Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa
File:                     AS135392.roa (raw, json)
Hash identifier:          sLHnyqa/Ewxes7aYYn9RQwmGKi6Hrd5PFyHAklwr+r8=
Subject key identifier:   3A:3F:4F:C0:DB:B0:43:4E:D0:1E:74:D5:88:97:A9:54:19:F0:06:97
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       76DD505917F76E295D5C182E03FDE565CA19E424
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa
Signing time:             Thu 02 Oct 2025 16:01:48 +0000
ROA not before:           Thu 02 Oct 2025 15:56:48 +0000
ROA not after:            Thu 01 Oct 2026 16:01:48 +0000
asID:                     135392
IP address blocks:        23.94.252.0/24 maxlen: 24
                          104.223.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 22:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:dd:50:59:17:f7:6e:29:5d:5c:18:2e:03:fd:e5:65:ca:19:e4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  2 15:56:48 2025 GMT
            Not After : Oct  1 16:01:48 2026 GMT
        Subject: CN=3A3F4FC0DBB0434ED01E74D58897A95419F00697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:48:44:00:30:a4:2f:31:c6:f7:b7:5e:f8:
                    00:c7:31:39:21:e1:f3:55:5b:49:09:57:58:91:81:
                    5b:e6:69:17:0e:b7:67:dd:f5:11:33:49:18:d8:ca:
                    c6:84:68:4d:05:5b:1e:08:0d:27:d3:a6:89:67:af:
                    55:08:ed:27:65:5c:3b:1a:34:93:28:fd:5f:70:4f:
                    91:f8:c9:5a:39:ca:13:d6:30:31:07:38:5e:e9:e8:
                    da:86:f0:2a:79:b9:8e:e2:51:0f:3c:5f:fe:98:17:
                    88:5a:66:f5:e7:8b:e8:20:b8:83:3a:8d:3d:1a:76:
                    04:bb:b3:fc:fe:1b:81:00:d7:ae:23:24:aa:e5:2c:
                    1e:c7:93:b8:87:ed:63:2b:44:de:9f:75:bb:ef:03:
                    da:ce:a1:77:32:75:36:08:d9:43:69:b7:a2:e7:47:
                    df:1b:cf:7f:35:c2:22:3e:95:48:be:68:df:ae:a2:
                    75:6f:7d:29:bb:82:6a:65:ed:ad:c5:ff:94:b3:f9:
                    4c:ed:1b:0d:26:51:12:33:85:38:f2:e3:fb:ff:27:
                    f0:98:cd:1e:2e:bc:d9:63:37:68:cc:b6:b6:50:66:
                    d2:b5:19:b4:10:5f:2b:49:6a:9e:29:12:50:5e:57:
                    e1:df:29:3a:a4:39:cd:90:49:7e:ab:a1:06:3c:01:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3F:4F:C0:DB:B0:43:4E:D0:1E:74:D5:88:97:A9:54:19:F0:06:97
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.252.0/24
                  104.223.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:16:1e:b1:97:1f:6a:78:3f:9f:1e:cd:2f:5c:24:60:c7:67:
         54:b8:e4:95:a0:95:17:99:1f:3a:11:be:2b:b9:77:a9:e6:d0:
         f6:15:e3:cf:09:c7:20:54:46:bd:fb:9f:1b:63:3b:25:c2:05:
         07:31:4e:ff:99:2a:96:77:03:ca:4c:a8:fd:24:51:a8:7f:41:
         3e:c9:6a:b9:3c:9a:3f:8f:98:31:92:9b:b5:96:f3:52:17:8f:
         08:b3:5c:2e:eb:a3:cc:61:35:61:cf:e0:24:d7:2a:13:c2:d8:
         93:93:b8:23:72:a7:5a:76:46:21:13:e9:3f:78:91:24:38:fa:
         c6:90:7c:99:47:02:2c:b2:1c:ec:47:d7:8d:b7:ce:a1:24:a6:
         fc:52:e7:cd:b3:c2:10:36:cd:c1:f4:21:b7:35:cf:2b:c3:b7:
         e1:cc:86:24:f1:2f:b1:21:08:80:93:65:61:f4:17:4d:d5:cb:
         80:2f:40:93:df:2a:2a:32:88:e1:71:ba:9b:d6:d0:42:1b:48:
         7c:75:07:3f:38:68:d4:9a:5c:6e:d5:22:4d:a3:26:80:c6:87:
         d9:d7:b4:30:a0:b7:32:6d:50:bc:dd:95:31:da:3a:83:38:e9:
         d9:19:d6:9b:82:31:bc:ea:33:97:85:b8:bc:ba:18:bf:a9:28:
         6d:df:fa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 20:22:11 2025 by rpki-client