Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa
File:                     AS401443.roa (raw, json)
Hash identifier:          UsTG/Q8nwyCFSkuSY9A3xz/E1UIlWUOUByIoPPAO8+A=
Subject key identifier:   12:53:D2:D4:91:8F:69:3F:3E:71:C3:31:A6:52:31:53:AC:26:DC:21
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4156C132F616D048FD66E83D0161AFC0F51B5633
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa
Signing time:             Thu 09 Oct 2025 13:08:22 +0000
ROA not before:           Thu 09 Oct 2025 13:03:22 +0000
ROA not after:            Thu 08 Oct 2026 13:08:22 +0000
asID:                     401443
IP address blocks:        104.234.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 21:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:56:c1:32:f6:16:d0:48:fd:66:e8:3d:01:61:af:c0:f5:1b:56:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  9 13:03:22 2025 GMT
            Not After : Oct  8 13:08:22 2026 GMT
        Subject: CN=1253D2D4918F693F3E71C331A6523153AC26DC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:61:41:4f:e7:8b:e5:7e:6e:ce:4d:46:76:
                    dd:3e:93:f3:62:59:76:f0:88:78:b9:db:ff:8f:09:
                    24:23:c2:32:30:ee:e8:46:a5:2a:e5:70:27:7a:61:
                    ec:1b:b0:18:45:88:18:35:b8:2b:65:32:e5:75:aa:
                    c2:09:04:62:fe:0d:e7:e8:c9:52:32:a7:9a:0a:6d:
                    6d:4b:4e:7a:0d:dd:f6:02:78:cd:6b:75:b3:1a:25:
                    99:8a:86:fd:02:f3:1e:a4:f6:21:4d:6b:50:a3:5d:
                    85:a7:f1:ca:7a:48:6a:34:9d:ba:a5:7d:55:15:1c:
                    6a:27:20:6b:52:68:09:2a:2f:b9:d7:58:fc:f0:24:
                    be:2a:7c:db:df:47:09:c3:7a:9b:cf:a0:a5:57:2b:
                    76:81:4c:9c:cb:1b:01:5d:57:1d:43:37:89:2d:a9:
                    1c:90:a2:ce:ce:50:37:cb:6c:ff:76:1c:86:66:4a:
                    75:c5:e5:30:93:db:a7:ee:07:bd:ff:b2:22:e9:f0:
                    c4:11:6f:80:48:58:6d:a1:6b:20:0a:42:75:53:14:
                    3a:86:de:b7:c8:b7:5c:2f:b3:77:8c:97:76:43:e7:
                    96:46:ed:cb:33:60:42:2d:c3:05:be:a0:3a:aa:ed:
                    f0:a9:c3:3b:d6:e8:b4:5a:5f:59:9d:71:09:9a:c0:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:D2:D4:91:8F:69:3F:3E:71:C3:31:A6:52:31:53:AC:26:DC:21
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:eb:21:19:2c:78:d3:71:4e:5b:52:4e:30:3a:70:8f:30:24:
         cd:db:a4:4a:f5:13:ff:da:ea:1f:c0:af:db:ed:b7:96:b0:e8:
         03:64:2d:9d:88:63:d2:55:bf:65:aa:8d:75:57:03:d0:22:b6:
         2f:5d:42:90:b1:2f:69:8b:a5:e4:6d:11:23:8f:ac:98:94:0e:
         06:56:90:88:01:08:cc:38:6e:16:72:2b:dc:be:7c:74:ee:3a:
         14:f9:fa:0e:b2:bc:d0:86:b0:61:cb:c9:04:e7:03:2a:b0:15:
         34:ce:35:15:5c:5d:b1:8f:af:f8:67:0f:b2:94:f7:e4:73:34:
         32:cb:ab:32:50:10:61:7f:ff:3c:1f:b0:b2:26:12:39:d1:9e:
         87:92:e3:94:9c:35:a5:9c:56:e6:b4:3f:0f:96:a1:c3:d1:37:
         58:d7:e6:9c:87:97:95:92:b4:fb:c1:4c:a0:8f:40:12:3c:ac:
         b4:6e:40:2d:0f:8e:75:e7:60:f7:77:1f:4e:df:93:7e:e7:c6:
         0b:c0:80:77:b0:d9:ac:94:a1:cd:16:42:e5:54:d1:a6:65:c0:
         39:5e:41:26:3f:04:fc:88:08:e2:6b:35:cd:43:d1:9b:b6:28:
         1b:b0:08:fc:58:d9:c0:8e:a8:39:30:ee:84:c6:77:d0:5c:7c:
         ba:25:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 04:38:15 2025 by rpki-client