Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
File:                     AS399641.roa (raw, json)
Hash identifier:          fILMJfT8Etxva7yiRz1IFW30d02nOAn9l8wjNnHJfhQ=
Subject key identifier:   1F:42:61:51:00:E4:CF:52:C3:2B:93:64:AF:B1:67:C9:DB:D3:03:37
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       511E5E1903CB17CE69218734A0E7ACC39BA2C65D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
Signing time:             Fri 05 Sep 2025 21:29:45 +0000
ROA not before:           Fri 05 Sep 2025 21:24:45 +0000
ROA not after:            Fri 04 Sep 2026 21:29:45 +0000
asID:                     399641
IP address blocks:        104.234.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Sep 2025 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1e:5e:19:03:cb:17:ce:69:21:87:34:a0:e7:ac:c3:9b:a2:c6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  5 21:24:45 2025 GMT
            Not After : Sep  4 21:29:45 2026 GMT
        Subject: CN=1F42615100E4CF52C32B9364AFB167C9DBD30337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:30:6f:d8:cc:d2:ba:36:8e:19:fa:8a:c2:
                    d8:d1:53:37:6e:42:67:18:44:ec:ae:db:81:ea:99:
                    90:ec:aa:1b:fc:0a:45:c2:37:d6:39:bb:f2:e8:c0:
                    64:d3:80:5e:7c:92:f2:af:3a:7e:40:98:45:0f:76:
                    7a:2b:28:d5:2d:4d:19:07:27:0e:6a:87:d0:e4:b1:
                    e1:08:18:8c:89:cd:cb:1c:03:07:96:85:66:9f:cb:
                    bc:fb:ed:30:ee:a0:90:bf:2b:a2:70:6a:f9:99:bf:
                    dc:4b:75:71:2d:4e:92:d2:55:d2:a9:f4:9a:51:a7:
                    16:b4:bd:40:1e:ba:5e:9f:e7:0b:ee:c5:c8:cd:81:
                    1a:1d:1f:54:2e:0b:8d:ed:1a:6b:a6:ac:2c:0a:b8:
                    3e:31:d9:ec:6c:45:2d:66:d8:a2:dc:08:92:9e:bc:
                    e9:73:88:e9:6e:20:9c:22:2a:f2:30:f8:70:2d:e0:
                    15:21:1b:8a:a9:da:fe:58:7a:60:d6:fb:2e:04:d1:
                    ca:66:ab:96:45:5f:5a:60:c1:af:ac:d6:2c:1d:6c:
                    da:1b:b5:26:e7:22:a8:28:db:3f:ec:56:38:4c:5c:
                    69:37:2c:f6:85:99:90:65:a4:fb:e5:10:d9:4d:36:
                    d9:bd:98:02:8c:18:44:6f:d7:f3:29:63:1b:07:a8:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:42:61:51:00:E4:CF:52:C3:2B:93:64:AF:B1:67:C9:DB:D3:03:37
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:74:c2:93:d5:5f:be:c5:88:6c:ff:bf:29:1d:55:fe:f3:
         96:9f:dd:ea:7d:e9:9e:41:9b:71:8d:93:b6:9d:33:48:2b:1a:
         1b:9d:e1:1e:54:b1:42:63:af:d0:ea:94:42:f1:6e:af:74:7a:
         91:8e:d5:39:4b:bd:5b:26:fa:0d:3f:f6:8b:91:7a:42:ca:84:
         d7:be:5b:a8:19:e7:13:7b:37:5c:90:1d:78:a5:40:39:19:1b:
         e4:c5:82:a0:b3:69:02:0a:01:23:18:17:3a:c9:4a:c8:de:40:
         15:7c:98:cb:56:26:67:11:29:c6:ef:a3:86:69:f4:e1:ef:0b:
         50:63:e6:fd:d9:15:23:70:79:2c:5a:9e:91:0e:1e:ab:40:7b:
         78:18:8e:2e:dc:8e:c5:d6:b0:cc:6c:77:43:f3:51:fb:f0:90:
         c6:48:ea:a7:27:70:b5:6a:de:5c:d8:22:81:d9:dc:30:f2:87:
         da:cc:be:c0:92:fc:f5:5b:2e:8d:6a:aa:38:6b:69:ed:80:c1:
         17:ff:23:ed:c0:49:12:52:b1:d2:fc:44:c1:04:1e:3f:1a:af:
         66:65:61:34:db:d9:03:56:9e:70:6f:1b:96:dd:bb:08:8f:f1:
         06:10:57:85:4b:b6:55:5a:21:a6:d0:1e:73:38:dd:17:c8:9d:
         01:bc:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 03:46:22 2025 by rpki-client