Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40812.roa
File:                     AS40812.roa (raw, json)
Hash identifier:          Pjwdlwk1QyUN9ft6UrPQf9lWdYjb7n1or62zFI302HM=
Subject key identifier:   30:84:6A:6A:8C:C0:8A:29:1D:19:A1:D5:B0:80:8F:2C:16:74:E4:B7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       605666920B8C0D4A6D4C27786C23E080B9E49A4A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40812.roa
Signing time:             Wed 04 Jun 2025 12:52:42 +0000
ROA not before:           Wed 04 Jun 2025 12:47:42 +0000
ROA not after:            Wed 03 Jun 2026 12:52:42 +0000
asID:                     40812
IP address blocks:        104.234.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:56:66:92:0b:8c:0d:4a:6d:4c:27:78:6c:23:e0:80:b9:e4:9a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  4 12:47:42 2025 GMT
            Not After : Jun  3 12:52:42 2026 GMT
        Subject: CN=30846A6A8CC08A291D19A1D5B0808F2C1674E4B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:09:27:92:d2:c7:f8:a6:2d:c1:b2:63:ef:
                    b8:89:12:e3:de:08:32:11:04:f8:c6:3e:9a:f4:fa:
                    95:28:df:3d:e3:b4:ee:a4:f9:39:17:0a:66:50:95:
                    14:cf:f2:f3:66:04:91:a9:c4:2e:f4:ec:ce:9b:90:
                    49:63:09:ad:2b:cc:94:97:64:e3:32:d0:6e:ae:31:
                    7f:f7:5c:71:f5:4d:9f:5b:b9:c3:65:0b:20:a1:1e:
                    aa:aa:33:3a:4f:39:d9:e7:11:4e:59:89:06:24:9f:
                    55:80:12:64:1e:61:98:27:ff:76:29:98:2e:2b:5d:
                    94:c5:88:bc:8b:b1:c4:19:48:b6:e2:35:e7:88:a2:
                    63:6a:db:e6:a2:ca:e3:ff:e7:0b:2c:24:0d:61:06:
                    64:25:31:97:2e:09:e8:8d:f6:3a:c7:dc:7c:b7:e7:
                    82:46:87:9b:11:81:79:ec:89:92:6d:c6:ec:e6:ef:
                    3d:d3:1e:e9:a1:86:28:bc:05:a4:93:b5:01:c2:6e:
                    de:6b:0d:6c:ee:55:f3:9b:d1:e0:7f:72:6c:be:a9:
                    c3:8d:1a:c7:dd:7e:ed:2a:6e:a5:e3:d2:57:27:37:
                    06:e9:b8:92:00:8a:0b:97:96:07:26:ef:0e:a4:bc:
                    34:a3:cc:52:41:53:08:ea:19:81:f1:fb:e4:34:ba:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:6A:6A:8C:C0:8A:29:1D:19:A1:D5:B0:80:8F:2C:16:74:E4:B7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:84:b4:64:3e:56:c3:55:e1:2a:53:6a:b8:4e:60:96:1d:c2:
         32:a1:bf:63:2b:53:f9:b7:58:a0:8e:14:90:08:20:94:3c:20:
         39:17:3a:9b:a7:8c:70:2d:eb:d3:eb:d2:ec:df:f6:da:66:4c:
         e5:1f:cc:b7:e7:17:4e:55:af:bd:33:74:de:c7:c9:f7:e2:aa:
         8d:48:83:64:47:c4:a3:12:3d:af:19:ba:b3:72:50:b3:7c:c1:
         91:83:67:86:c6:25:ff:61:7c:e4:9c:e5:c3:28:a3:3f:78:60:
         c1:93:67:ce:cc:99:d7:a7:ed:33:2f:25:f5:4c:58:29:6b:32:
         2c:eb:e1:a6:a5:78:b5:d0:0e:98:a8:34:34:ec:14:15:e6:6d:
         eb:d5:20:78:54:ff:bd:db:51:67:a0:89:a4:bc:ba:0a:30:86:
         84:e6:b9:79:ef:96:5a:46:05:d3:19:26:90:e4:84:08:89:09:
         7f:38:be:77:69:02:62:2b:a7:a3:c5:47:33:05:25:3f:ae:53:
         9e:82:ce:69:55:a3:59:5b:16:c4:d7:75:9f:5d:ca:a9:85:6d:
         30:90:19:63:fe:66:04:6c:55:74:38:92:22:9a:90:e2:7e:96:
         0a:c7:01:7b:5e:e9:a0:32:29:e4:aa:a1:30:92:fa:1a:c1:f7:
         72:d3:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:27:29 2025 by rpki-client