Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa
File:                     AS61112.roa (raw, json)
Hash identifier:          /p7GneWizgu+540GPyuUIDgvpKpaBJKKTDA2KBbdp1o=
Subject key identifier:   31:60:7B:DD:EF:74:AB:2C:0D:3B:2B:04:81:E7:4E:E6:6F:30:D3:D9
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       793533A6BC3C7D67EAC8B1FC1EB1E8639632B2FD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa
Signing time:             Sat 24 May 2025 15:28:34 +0000
ROA not before:           Sat 24 May 2025 15:23:34 +0000
ROA not after:            Sat 23 May 2026 15:28:34 +0000
asID:                     61112
IP address blocks:        104.234.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 15:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:33:a6:bc:3c:7d:67:ea:c8:b1:fc:1e:b1:e8:63:96:32:b2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 24 15:23:34 2025 GMT
            Not After : May 23 15:28:34 2026 GMT
        Subject: CN=31607BDDEF74AB2C0D3B2B0481E74EE66F30D3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:5f:bc:3e:bc:69:17:ae:36:f8:92:83:9d:
                    cf:7c:46:72:3c:0d:56:9b:c0:26:d0:da:58:5c:d7:
                    ab:f9:e1:35:07:71:45:69:6f:45:22:83:c6:e6:cd:
                    56:f9:60:67:0b:1f:b3:1b:31:0c:25:c3:98:cb:9b:
                    87:4a:ab:c5:2c:4c:07:6e:a6:ac:d3:07:44:80:66:
                    ef:c0:a5:62:07:21:9e:1c:99:cb:ae:69:89:50:04:
                    3e:e6:8b:1b:79:89:7b:4d:d4:db:1e:16:f8:8e:5a:
                    f0:e1:5d:0f:95:bf:04:81:30:90:6a:25:db:bd:1f:
                    86:59:06:e8:50:23:91:e6:d9:3d:1b:47:c7:a5:e6:
                    ed:37:05:c4:31:73:96:1a:16:3d:b5:ea:a5:8e:41:
                    ad:b2:9c:a2:d0:1f:f7:10:e1:55:14:df:12:94:32:
                    a0:32:6d:e4:54:ae:2a:bc:44:82:28:b6:3c:c0:83:
                    3e:55:ee:1d:31:be:d1:b5:2d:97:d1:45:dc:af:04:
                    51:8c:1a:6b:e9:3e:d4:da:0e:c4:88:e3:97:3b:7e:
                    b3:cc:9a:a2:f7:cc:75:4a:88:67:b4:a8:df:28:15:
                    38:b5:48:ba:65:29:5d:f8:3d:53:35:62:1b:d0:be:
                    9a:8d:ab:03:6f:60:91:30:76:4b:3a:b0:04:d2:e5:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:60:7B:DD:EF:74:AB:2C:0D:3B:2B:04:81:E7:4E:E6:6F:30:D3:D9
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:85:e4:5c:d4:17:3b:31:ec:60:35:4f:a4:b0:a0:c2:3d:03:
         cd:be:6f:fb:b1:a9:c9:ca:af:cc:b6:4f:e5:fc:11:c8:6b:9c:
         6a:c2:2a:3f:e9:ed:69:10:e5:9f:ce:af:e9:05:df:49:29:25:
         26:be:9c:6c:0b:0e:d1:13:65:e3:9d:ef:1f:ee:19:77:cd:c8:
         9d:fc:c7:9d:19:ca:01:c2:1e:1a:83:50:8d:16:24:2e:91:0a:
         11:9d:d3:98:2c:76:88:2f:b2:34:7d:47:a2:8d:2a:f5:bc:f0:
         b3:c1:7a:a1:e9:3a:79:a8:5c:08:b4:31:4c:75:29:26:de:79:
         ae:a7:1f:01:8b:9b:f9:57:a2:58:cd:47:5d:40:f0:03:76:4f:
         56:3b:c2:e5:90:c5:fd:54:32:a1:cc:3e:69:3a:e1:c9:8e:81:
         c0:8a:81:97:b1:4b:e0:e0:67:d3:ab:e3:49:4c:0e:00:3e:08:
         4f:75:cf:29:4b:ea:86:50:26:b4:29:91:99:d5:40:63:e6:52:
         82:ef:a0:00:37:fd:c0:44:7d:e7:4f:91:4e:20:b8:a9:ee:3e:
         f5:66:e1:fd:fa:77:cc:ea:8c:4a:79:df:b3:ce:a4:eb:f8:00:
         fc:9b:47:f7:d4:32:cd:6b:a8:81:a2:16:fa:4c:37:6d:fd:47:
         e2:e7:78:6a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUeTUzprw8fWfqyLH8HrHoY5Yysv0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNTI0MTUyMzM0WhcNMjYwNTIzMTUyODM0
WjAzMTEwLwYDVQQDEygzMTYwN0JEREVGNzRBQjJDMEQzQjJCMDQ4MUU3NEVFNjZG
MzBEM0Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SdfvD68aReu
NviSg53PfEZyPA1Wm8Am0NpYXNer+eE1B3FFaW9FIoPG5s1W+WBnCx+zGzEMJcOY
y5uHSqvFLEwHbqas0wdEgGbvwKViByGeHJnLrmmJUAQ+5osbeYl7TdTbHhb4jlrw
4V0Plb8EgTCQaiXbvR+GWQboUCOR5tk9G0fHpebtNwXEMXOWGhY9teqljkGtspyi
0B/3EOFVFN8SlDKgMm3kVK4qvESCKLY8wIM+Ve4dMb7RtS2X0UXcrwRRjBpr6T7U
2g7EiOOXO36zzJqi98x1SohntKjfKBU4tUi6ZSld+D1TNWIb0L6ajasDb2CRMHZL
OrAE0uV5HwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDFge93vdKssDTsrBIHnTuZv
MNPZMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzYxMTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOrpMA0GCSqGSIb3DQEBCwUAA4IB
AQCZheRc1Bc7MexgNU+ksKDCPQPNvm/7sanJyq/Mtk/l/BHIa5xqwio/6e1pEOWf
zq/pBd9JKSUmvpxsCw7RE2Xjne8f7hl3zcid/MedGcoBwh4ag1CNFiQukQoRndOY
LHaIL7I0fUeijSr1vPCzwXqh6Tp5qFwItDFMdSkm3nmupx8Bi5v5V6JYzUddQPAD
dk9WO8LlkMX9VDKhzD5pOuHJjoHAioGXsUvg4GfTq+NJTA4APghPdc8pS+qGUCa0
KZGZ1UBj5lKC76AAN/3ARH3nT5FOILip7j71ZuH9+nfM6oxKed+zzqTr+AD8m0f3
1DLNa6iBohb6TDdt/Ufi53hq
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:18 2025 by rpki-client