Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
File:                     AS136258.roa (raw, json)
Hash identifier:          mKYtRiJoJCpbqylHyTnpK6U1Wqwkk0Xy0ZqVB8+XycU=
Subject key identifier:   7F:D2:3C:F1:37:20:D1:22:67:26:17:43:93:F7:73:D2:80:40:FC:97
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6D42F072A99177CD13D320CA35805ACBD76D5D52
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
Signing time:             Wed 04 Jun 2025 02:24:24 +0000
ROA not before:           Wed 04 Jun 2025 02:19:24 +0000
ROA not after:            Wed 03 Jun 2026 02:24:24 +0000
asID:                     136258
IP address blocks:        23.95.72.0/22 maxlen: 24
                          23.95.76.0/23 maxlen: 24
                          23.95.79.0/24 maxlen: 24
                          96.44.152.0/24 maxlen: 24
                          104.168.10.0/24 maxlen: 24
                          107.174.114.0/24 maxlen: 24
                          107.175.82.0/24 maxlen: 24
                          172.245.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 01:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:42:f0:72:a9:91:77:cd:13:d3:20:ca:35:80:5a:cb:d7:6d:5d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  4 02:19:24 2025 GMT
            Not After : Jun  3 02:24:24 2026 GMT
        Subject: CN=7FD23CF13720D1226726174393F773D28040FC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:e3:66:d9:b7:a5:3d:14:f6:47:71:22:3e:
                    2a:90:a5:e8:e0:cf:1b:4d:8c:3e:16:27:3e:d6:ab:
                    94:71:45:f8:49:d1:18:3f:c2:86:bb:0a:f3:80:ea:
                    47:7d:3c:1f:05:a5:60:22:b0:f1:a7:0d:81:24:4f:
                    99:00:17:0b:8a:47:6f:9c:19:d6:32:69:4b:35:57:
                    2d:b2:ea:3e:38:2b:e0:05:b6:cd:65:df:be:79:1d:
                    69:e5:1c:2e:dc:60:f6:76:67:ed:20:44:d3:ad:73:
                    1d:3b:2f:fe:fe:99:53:82:2e:f5:34:10:70:de:f2:
                    e3:09:42:57:e0:1f:ed:df:c5:00:d6:4b:b9:e5:0d:
                    f2:bb:6b:9f:b3:29:6a:9f:66:fe:e1:3c:08:d7:eb:
                    a2:60:74:93:01:fa:7f:67:13:aa:3f:16:c5:a8:c7:
                    d2:4d:aa:04:31:69:06:76:60:ed:c4:9b:50:bc:1d:
                    06:52:57:8f:d5:f6:06:c5:87:4b:0d:bb:34:5b:37:
                    00:f9:ef:34:55:90:65:85:a0:ab:7f:ad:2d:45:a2:
                    fc:0d:c7:18:66:42:e6:3d:7f:18:a3:16:f0:20:9b:
                    aa:b7:70:a9:2f:a0:5d:9c:54:76:c3:5c:fe:a8:09:
                    7e:bf:d5:34:92:bb:78:1b:49:7a:ed:79:fe:9d:be:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D2:3C:F1:37:20:D1:22:67:26:17:43:93:F7:73:D2:80:40:FC:97
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.72.0-23.95.77.255
                  23.95.79.0/24
                  96.44.152.0/24
                  104.168.10.0/24
                  107.174.114.0/24
                  107.175.82.0/24
                  172.245.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:c6:39:0b:7c:0c:0c:0d:13:03:d5:32:22:91:4f:71:df:cf:
         03:bf:4e:c7:75:fd:07:a6:24:ef:ff:f5:88:48:dd:62:65:38:
         c7:f5:5d:3c:88:b9:c6:f4:23:ee:a0:56:9a:f1:c9:b5:91:2e:
         bd:e7:ca:66:27:90:8a:cf:27:4f:74:ab:18:b5:39:86:d9:3b:
         84:30:78:bb:de:3f:a6:99:6f:e5:c7:58:30:8c:40:ce:dc:fa:
         92:7b:b3:56:39:2e:61:32:28:2d:5d:af:d4:a9:02:9d:5a:4c:
         34:01:d1:00:d0:66:c3:9f:7c:34:d2:f9:3f:0a:2a:59:41:e7:
         6e:75:c3:9a:50:24:bc:a5:26:9c:2f:74:4c:ec:80:7c:fc:44:
         09:09:65:03:a8:64:0b:36:fa:a6:e9:d0:33:31:c6:bf:e5:ca:
         4e:ba:54:1b:0a:28:9d:e4:0c:0d:c9:d3:b6:4a:79:dc:3b:7c:
         a6:c5:1c:51:3b:f9:56:88:e2:e1:91:f1:12:fa:80:13:97:ba:
         c1:ba:39:67:e1:bd:69:45:0c:cf:1a:9b:4f:d4:96:53:8e:12:
         6c:3c:e8:70:3a:75:70:ab:ee:35:50:9a:56:cb:47:02:35:79:
         1d:3f:02:cf:51:ce:13:80:55:0a:5d:29:c0:2d:68:ef:42:be:
         7a:3a:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:13:29 2025 by rpki-client