Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa
File:                     AS54339.roa (raw, json)
Hash identifier:          b4EkX3uUrNhLEo8Hdwj7peRYOo4vakJ97gSeHHFolNg=
Subject key identifier:   04:FD:1E:A1:61:42:3F:B6:C8:FF:58:EF:F6:15:AA:8D:AF:30:73:E2
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5B8806C2895657DFF566D0F7ABFFD2264D856E71
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa
Signing time:             Wed 14 May 2025 11:58:49 +0000
ROA not before:           Wed 14 May 2025 11:53:49 +0000
ROA not after:            Wed 13 May 2026 11:58:49 +0000
asID:                     54339
IP address blocks:        104.234.82.0/24 maxlen: 24
                          104.234.88.0/24 maxlen: 24
                          206.53.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:88:06:c2:89:56:57:df:f5:66:d0:f7:ab:ff:d2:26:4d:85:6e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 14 11:53:49 2025 GMT
            Not After : May 13 11:58:49 2026 GMT
        Subject: CN=04FD1EA161423FB6C8FF58EFF615AA8DAF3073E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:84:28:fb:f9:32:8b:67:91:9b:b9:df:b8:
                    2e:98:15:a0:fb:f1:4b:12:bd:3f:88:e4:7c:1e:64:
                    31:a4:d4:54:2c:a5:83:41:71:07:bd:53:34:a7:a2:
                    42:0d:38:70:71:3f:52:ef:34:59:89:3f:37:0c:54:
                    83:df:b7:d6:30:a2:2c:4e:fc:67:0a:9d:4a:bd:9f:
                    29:0b:e8:78:79:02:ca:5f:59:8d:cf:47:39:9b:0b:
                    36:7c:aa:24:74:d6:ef:26:4c:84:d7:ab:5a:56:1d:
                    38:a3:fe:c6:9c:7d:d6:ba:02:2f:4a:ff:1f:a1:6d:
                    a0:0d:52:c0:32:56:09:67:9d:d8:06:4c:85:67:48:
                    1f:23:5a:0b:54:65:21:0b:4d:98:26:c6:e1:7c:eb:
                    61:a1:89:07:cc:8e:12:ed:9d:39:f4:20:f1:9c:cf:
                    c5:c0:ef:36:d5:a8:1b:88:30:b5:c5:45:ec:57:70:
                    b2:40:16:6e:77:27:f8:86:8a:59:77:b0:c3:47:a9:
                    3f:67:27:bd:77:e1:9a:da:fc:bb:c3:4b:08:70:b9:
                    1f:db:8d:67:5d:f5:7f:19:23:db:76:11:f9:a6:e2:
                    6f:a2:74:f2:fb:43:8b:67:ec:d2:91:ce:b8:49:a0:
                    80:f2:6b:da:77:31:8e:42:c5:02:ec:48:95:8e:c3:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FD:1E:A1:61:42:3F:B6:C8:FF:58:EF:F6:15:AA:8D:AF:30:73:E2
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.82.0/24
                  104.234.88.0/24
                  206.53.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:11:46:bd:fe:a4:14:fc:9b:0d:21:87:2a:67:c7:98:25:
         05:86:10:1a:4e:09:4e:b2:1e:62:07:97:a1:23:2d:47:2c:34:
         5b:ec:6a:31:f6:e8:c6:ba:37:3d:db:c6:08:b2:11:5f:be:03:
         b0:00:a4:d6:48:12:97:1a:27:97:18:ec:34:d3:38:84:10:e6:
         bf:59:e5:73:87:4b:f2:56:c2:0e:7e:b0:b5:0a:64:74:8e:d2:
         ed:71:05:fa:94:b9:4b:1a:c7:b0:ee:4f:d9:e0:6b:0b:c6:9e:
         71:da:61:17:72:a0:2c:16:d6:0f:16:fc:2e:3f:32:6a:80:62:
         a9:64:9f:3b:d1:b3:f0:d1:5c:3b:95:b2:9a:0c:6e:df:c6:26:
         e9:b6:78:6c:ac:b1:db:0f:cf:46:20:af:db:75:61:60:4b:3c:
         81:1a:70:1d:f5:6b:d4:db:3a:51:0c:52:a9:67:31:b5:a9:44:
         9e:15:fc:3b:ff:2b:e6:e0:29:2d:aa:7e:b6:f7:ea:4f:a4:55:
         2f:bf:97:82:1d:42:8e:27:16:f4:e4:ed:8c:93:67:69:f6:97:
         bd:4f:45:7c:2c:d2:0a:1e:15:74:99:1c:9b:3d:c6:11:ce:13:
         d5:b9:98:b5:90:09:2c:4c:f6:1d:5f:5a:72:f5:59:d5:5e:a3:
         d1:27:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:06:34 2025 by rpki-client