Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53427.roa
File:                     AS53427.roa (raw, json)
Hash identifier:          7FxUsT68CR7GSFo7KMuNe/6MkkOGNN4lJ/rZSvOr2a8=
Subject key identifier:   18:C8:81:5C:71:68:67:73:0E:0E:E5:22:6D:C0:EF:43:94:6C:F4:D1
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       644E5B5F35D26E298D766CF304BDF65C5D10CC69
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53427.roa
Signing time:             Thu 04 Sep 2025 02:29:45 +0000
ROA not before:           Thu 04 Sep 2025 02:24:45 +0000
ROA not after:            Thu 03 Sep 2026 02:29:45 +0000
asID:                     53427
IP address blocks:        104.234.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 16:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4e:5b:5f:35:d2:6e:29:8d:76:6c:f3:04:bd:f6:5c:5d:10:cc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  4 02:24:45 2025 GMT
            Not After : Sep  3 02:29:45 2026 GMT
        Subject: CN=18C8815C716867730E0EE5226DC0EF43946CF4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:53:8e:0d:0e:0e:60:79:d0:a3:fc:90:72:ba:
                    dc:ec:27:b4:6f:38:5d:e6:59:ad:3f:7a:16:7a:50:
                    b2:af:17:4b:63:1a:76:40:92:0e:03:5d:32:4a:6d:
                    1f:f2:09:37:bf:40:b7:0e:68:53:92:f0:6b:e6:57:
                    f0:2a:6f:ba:da:0e:d2:55:80:cd:3e:65:a2:2f:32:
                    2a:cf:ef:f2:bc:b7:fb:bc:28:d8:5d:5d:fa:70:77:
                    af:0e:d6:3b:95:e9:9d:ea:bf:e2:5d:4b:94:a6:e8:
                    bd:dd:a1:73:fd:a0:66:ed:55:1f:b9:30:af:9f:d7:
                    3a:c9:b8:f1:69:04:05:b8:c2:20:a4:d9:49:08:b0:
                    90:b9:b5:a1:05:51:d8:66:f9:d0:82:8e:f6:8d:91:
                    e1:5e:a9:7a:d0:95:2b:b9:6e:47:42:ee:82:aa:ea:
                    62:c2:c8:f4:64:b7:b1:5f:31:89:7d:9a:8a:9f:69:
                    f5:cf:c1:30:ff:1f:1d:da:a5:f8:ad:ed:04:1f:22:
                    4b:82:00:1b:f1:18:6f:8e:05:d3:3f:7f:35:e3:8d:
                    1b:33:26:45:3b:a0:3d:48:cb:7f:70:50:ff:54:54:
                    3b:66:81:02:c3:37:7d:42:e9:dd:53:1d:00:4d:3d:
                    8d:3e:f7:e9:40:a1:73:38:73:e5:0c:c7:a8:c0:b3:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C8:81:5C:71:68:67:73:0E:0E:E5:22:6D:C0:EF:43:94:6C:F4:D1
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:2b:73:24:8b:5a:51:80:1b:40:66:19:0e:b0:19:f1:86:
         11:0d:01:f3:b7:1f:9c:9e:de:82:79:00:bb:85:97:85:9b:76:
         1e:d2:a9:70:36:9c:da:25:27:b5:14:74:60:3b:55:5d:5b:8d:
         16:d9:ba:6f:71:04:56:e2:68:80:62:a5:03:a8:5b:de:5d:78:
         3f:0c:8c:f7:3c:1f:5f:08:2b:9d:f8:c8:01:cf:18:b9:b9:d6:
         d6:14:ea:69:78:bf:83:d5:85:b4:7c:e9:d2:f4:75:41:6c:ab:
         dc:94:df:90:24:ca:02:b3:51:57:91:35:73:8d:85:dd:f4:3f:
         80:ad:41:0d:81:e4:74:37:d9:37:3a:e1:81:60:f7:6b:09:b1:
         12:35:9b:ef:12:a1:90:a9:6e:06:f6:55:47:ee:80:38:0b:9e:
         15:fa:2b:4a:0b:ea:57:b2:03:24:c7:3e:27:97:3d:97:15:2a:
         d0:f7:54:35:84:9a:84:92:f0:00:ae:ff:31:d0:bf:a8:32:8a:
         39:9f:b2:ab:b0:01:5e:97:db:19:68:2e:2d:4b:e0:4e:5a:b5:
         d7:5f:6e:55:da:e3:79:24:21:97:59:c5:1e:c1:fc:48:23:b5:
         94:9e:7c:dc:ce:b0:e6:28:7d:91:d5:fd:f5:8e:f6:ff:d8:1c:
         0a:be:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:55:16 2025 by rpki-client