Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa
File:                     AS394117.roa (raw, json)
Hash identifier:          O0/CpThNAU7B4Wbzqm+HGK4l6RAruRujU8iVadnl5BM=
Subject key identifier:   62:E3:50:9E:D9:23:24:93:4C:2F:43:14:E0:6D:F3:64:A6:38:4A:92
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       59013BE98AF4F5F7BDA1F7529FA66B22DEBE24FC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa
Signing time:             Thu 29 May 2025 09:49:04 +0000
ROA not before:           Thu 29 May 2025 09:44:04 +0000
ROA not after:            Thu 28 May 2026 09:49:04 +0000
asID:                     394117
IP address blocks:        104.234.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:01:3b:e9:8a:f4:f5:f7:bd:a1:f7:52:9f:a6:6b:22:de:be:24:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 29 09:44:04 2025 GMT
            Not After : May 28 09:49:04 2026 GMT
        Subject: CN=62E3509ED92324934C2F4314E06DF364A6384A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:5e:0e:e6:73:b9:d9:54:54:9c:0d:04:ca:
                    48:73:0e:61:9a:de:76:0d:2b:f9:dd:a5:33:79:05:
                    d4:ac:a9:c7:dc:3f:f6:e3:2a:92:18:6a:f5:0a:71:
                    ef:a4:6c:ee:6d:a7:eb:9c:6f:b0:00:5b:0d:80:7c:
                    e9:40:b1:6c:fe:2f:88:46:b2:77:90:27:ce:a7:0e:
                    f6:ba:ae:f9:18:77:fc:72:2a:ba:c8:ae:8b:ad:6c:
                    0e:79:ea:a0:2d:0c:94:b0:4b:36:0d:50:c1:e6:c4:
                    57:e0:d1:ad:6e:59:45:93:48:14:44:95:29:01:70:
                    eb:91:13:6c:58:4c:1f:6d:50:bd:aa:93:e2:46:f7:
                    36:40:a8:f4:9e:56:94:7e:6e:9c:11:8d:8b:83:ff:
                    64:94:d9:02:c1:1e:7e:24:ee:1d:09:f9:24:75:16:
                    b1:51:cb:48:60:20:f1:0a:d1:e5:47:e0:74:17:06:
                    bd:01:26:9e:84:65:c2:e7:62:6f:2c:cb:ca:41:d5:
                    cb:df:45:b3:ae:43:e6:10:24:71:4f:32:27:34:56:
                    40:74:8d:7f:84:f5:ce:6f:b0:48:ff:e3:9c:97:f1:
                    57:2a:f5:80:3b:95:87:8e:3d:bb:c9:db:87:44:03:
                    95:83:99:4f:ef:6f:46:98:23:b8:7d:11:c9:f9:1c:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E3:50:9E:D9:23:24:93:4C:2F:43:14:E0:6D:F3:64:A6:38:4A:92
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:00:41:bc:86:8a:8a:c1:43:f3:6d:05:7e:9f:dc:3b:db:56:
         a9:d9:81:70:d7:40:5e:c2:8c:d8:17:d7:a8:7a:e0:0f:4b:c1:
         5d:fd:c4:b5:3a:a9:ce:4b:35:cb:cd:d4:b4:56:c2:e9:cd:3f:
         1d:0b:78:46:03:67:91:67:a0:86:58:3f:e1:14:31:f5:a7:ed:
         bf:4f:06:9d:51:f3:80:0a:92:4e:55:c0:32:26:b9:89:b9:50:
         bc:0d:47:34:d5:f4:07:57:f7:80:5b:88:c7:8a:90:96:b7:3d:
         f0:d7:42:5b:a3:65:78:1c:82:69:21:d7:1f:ca:15:6c:16:32:
         5b:4f:8c:a3:49:af:71:80:12:f4:39:7b:20:21:3d:a6:d1:b8:
         64:e1:c5:cd:a6:f9:14:70:f6:92:14:6b:36:56:53:a9:8f:8f:
         28:41:f8:21:1f:33:4a:80:e3:48:1d:82:83:99:9c:d2:70:c0:
         09:80:2f:10:ad:76:1e:54:51:a4:4f:11:20:fa:f7:14:0c:23:
         a4:1b:f1:1d:77:b8:69:62:48:a0:d4:97:10:29:53:f8:3a:7f:
         12:60:a8:8e:66:f2:c9:55:f3:af:61:d1:ee:29:2e:fb:4a:3b:
         dd:4a:7d:b3:54:ae:9e:5f:b4:61:20:36:9d:dc:21:e5:6e:0c:
         9c:37:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:58:42 2025 by rpki-client