Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
File:                     AS48925.roa (raw, json)
Hash identifier:          VhZfqAVcuMRd6MlAR1cLGrh+xqWHrDD0PWr99MS1sWs=
Subject key identifier:   D9:2D:7A:36:BD:F3:D5:36:87:93:11:E3:E1:F5:7F:4F:05:2F:97:50
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0707C85AF67F81483D5003AE181969FE62495977
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
Signing time:             Fri 03 Jul 2026 09:36:09 +0000
ROA not before:           Fri 03 Jul 2026 09:31:09 +0000
ROA not after:            Fri 02 Jul 2027 09:36:09 +0000
asID:                     48925
IP address blocks:        104.234.180.0/24 maxlen: 24
                          104.234.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 20:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:07:c8:5a:f6:7f:81:48:3d:50:03:ae:18:19:69:fe:62:49:59:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  3 09:31:09 2026 GMT
            Not After : Jul  2 09:36:09 2027 GMT
        Subject: CN=D92D7A36BDF3D536879311E3E1F57F4F052F9750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:de:ba:e9:e5:4c:83:60:7b:3c:07:e8:0e:
                    5f:3b:47:33:27:fb:f6:b1:04:61:d4:4c:fe:c2:58:
                    0c:11:c3:9b:f8:ce:fb:2f:30:66:1f:6c:a3:a9:56:
                    ed:9b:d0:0a:95:52:1e:f3:42:69:72:04:e1:49:11:
                    2d:f9:5d:95:59:92:5d:12:33:e1:84:3f:5a:82:f7:
                    db:9e:98:7a:c9:95:db:d8:0f:93:85:08:5d:d4:c7:
                    5d:f9:68:68:6d:14:09:2b:88:0b:0b:7f:87:73:7f:
                    5d:26:a0:8d:e2:82:93:97:c9:84:8d:67:c3:3d:22:
                    c7:c4:db:80:82:15:d6:ac:cb:fc:2c:52:71:d2:1a:
                    23:9d:02:ce:a6:37:39:c9:35:a4:f8:c0:20:2f:d9:
                    dc:20:70:7b:cf:23:9d:18:70:85:ec:86:9d:f6:8c:
                    1a:95:43:29:c1:b6:00:9c:93:71:d5:84:77:35:1b:
                    a0:b4:52:a8:8d:83:bd:4c:ce:0d:1b:dd:54:a4:d4:
                    ca:67:62:3d:bb:89:78:81:45:94:26:83:e8:63:99:
                    8d:44:2f:a1:63:ff:53:d4:6d:8e:5c:e1:6b:ea:fb:
                    b2:9e:32:77:21:0b:64:87:82:5d:a1:11:91:76:a2:
                    f5:f2:77:50:0b:3b:e4:f8:ab:62:02:97:5b:ec:22:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2D:7A:36:BD:F3:D5:36:87:93:11:E3:E1:F5:7F:4F:05:2F:97:50
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.180.0/24
                  104.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:8b:aa:ae:3b:4e:a7:cb:39:de:69:1e:05:21:ee:cd:f9:
         77:97:ee:fa:fa:04:e9:94:7d:4e:c5:8b:bd:34:b1:28:f4:4a:
         de:41:91:fc:61:5c:1f:78:d3:9b:b2:ca:39:5d:8f:b2:7f:20:
         59:eb:f4:b7:ff:b9:76:2d:02:95:a4:a2:f4:f0:4d:0b:81:1f:
         22:56:de:dd:b3:4f:7e:9d:c6:07:1e:49:e4:67:02:96:ea:17:
         e9:a6:f5:b1:d8:b1:fc:36:51:8a:a5:25:08:78:10:67:bc:9e:
         b0:42:2b:5b:6f:21:e8:e7:4a:0f:20:e9:ab:16:ce:9a:94:e4:
         81:08:fc:23:a0:b9:33:5f:82:d0:24:c8:21:49:16:d1:48:e5:
         8f:43:db:4c:22:ae:4b:76:fe:7c:5f:db:07:31:39:04:38:34:
         f9:4e:c4:86:08:ef:f5:24:cd:3a:5d:ba:36:12:b2:51:3d:18:
         4d:88:bb:10:f3:5a:b2:62:21:2a:9b:e9:ac:c8:df:17:7c:c2:
         4b:c6:ec:29:23:de:e2:33:d9:d6:4d:8a:a0:55:9c:81:9a:6f:
         98:10:a1:9b:7e:32:68:48:7a:13:70:7a:8b:e6:0d:77:8c:b2:
         d6:e9:37:eb:e5:88:58:93:04:59:94:28:f8:42:20:9f:bd:93:
         34:97:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client