Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa
File:                     AS135392.roa (raw, json)
Hash identifier:          TJhzGwSRpYc2YXBtLkhS2SSRcdcXDwPm4qz7nQ8H/Pk=
Subject key identifier:   26:AD:73:B1:BA:1C:F4:42:D9:0C:1F:BE:95:E3:8E:88:32:5A:54:FD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       55466880372DB2349FFEB2FDA587F6AA794DF4B9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa
Signing time:             Tue 01 Jul 2025 12:18:14 +0000
ROA not before:           Tue 01 Jul 2025 12:13:14 +0000
ROA not after:            Tue 30 Jun 2026 12:18:14 +0000
asID:                     135392
IP address blocks:        104.223.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 19:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:46:68:80:37:2d:b2:34:9f:fe:b2:fd:a5:87:f6:aa:79:4d:f4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  1 12:13:14 2025 GMT
            Not After : Jun 30 12:18:14 2026 GMT
        Subject: CN=26AD73B1BA1CF442D90C1FBE95E38E88325A54FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:86:ba:b4:f8:6b:73:8d:8d:c4:ca:0f:1e:
                    18:30:22:2d:19:89:65:73:28:db:1b:12:b0:12:6a:
                    d3:9d:45:69:ef:93:33:fc:90:c5:34:36:92:8c:64:
                    b7:40:d0:3d:ae:bc:52:82:5b:ba:31:bb:3c:8f:7a:
                    5a:38:8f:12:39:13:90:33:9f:42:97:81:ed:fa:51:
                    22:3c:f6:47:8c:78:6a:da:f4:b0:96:fd:76:6d:11:
                    8d:59:34:d9:b3:a2:8d:a2:cd:c3:91:70:5a:8f:f2:
                    9f:ce:31:78:c5:52:f4:24:08:89:4c:7f:af:17:1b:
                    24:8f:f6:6c:af:85:0a:4d:40:67:1b:a2:78:82:73:
                    49:8c:16:bf:19:b1:39:1b:d2:f3:d7:37:2b:90:9b:
                    dc:36:c2:7c:ad:48:a2:79:ad:2f:2e:4d:85:c8:63:
                    3a:bf:b7:7b:ef:dc:0a:4f:c1:7a:aa:21:83:eb:f8:
                    b1:fd:89:d8:00:ec:65:bb:e3:69:e1:18:80:2f:2d:
                    f8:a2:80:57:1d:67:31:94:f9:e8:7a:f5:9a:42:c4:
                    b7:30:81:e4:5a:e3:84:c5:6c:ef:70:9b:df:fc:a3:
                    a4:50:5c:0a:37:d4:c0:c8:77:66:bb:dc:78:d3:16:
                    aa:31:29:a4:c8:ff:0b:88:b1:58:2e:37:2d:ef:40:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AD:73:B1:BA:1C:F4:42:D9:0C:1F:BE:95:E3:8E:88:32:5A:54:FD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.223.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:17:b9:28:81:ef:66:86:4f:e2:24:fe:69:29:83:cf:5f:ea:
         41:9a:33:f3:4c:fc:ba:36:9a:2d:c4:bb:ea:fe:83:c7:44:25:
         42:83:68:8b:ac:c9:5d:ff:be:b6:2e:2c:28:51:9f:da:71:40:
         fd:ef:55:e1:6f:5f:ad:86:8e:88:0f:79:87:82:af:98:e8:9c:
         e4:74:1e:36:11:a6:59:84:f2:58:56:90:f5:e7:3d:c8:d1:80:
         24:81:1d:15:28:52:3c:46:84:c2:75:a7:0f:60:ff:59:6b:f2:
         d6:fc:16:de:cb:7a:66:ba:0a:3b:18:9e:e0:37:47:32:e2:7a:
         09:3b:ac:f6:f7:ad:5a:f3:03:b0:15:12:e8:89:67:19:cc:db:
         3d:e3:10:c1:0a:9a:57:f8:7b:80:13:fb:68:10:c7:d6:80:c7:
         36:76:0a:e8:af:e0:a7:78:5e:7d:23:83:21:0f:de:6a:3e:6c:
         82:f0:ba:9b:ef:6a:21:7f:bc:70:a4:68:18:a7:87:26:31:28:
         1b:d4:ae:95:57:e7:01:d6:b5:cd:1f:50:dd:e8:3b:87:30:42:
         97:69:93:89:4c:77:6d:33:b0:30:87:02:d8:d3:e0:75:63:b0:
         f4:d0:0a:70:61:e5:76:07:f0:31:5a:f2:7b:92:24:57:28:bc:
         73:94:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 07:38:47 2025 by rpki-client