Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199925.roa
File:                     AS199925.roa (raw, json)
Hash identifier:          IiRXJG2YC0UQFj98wpkUJZFAWG/7opySHLCLOykFV4I=
Subject key identifier:   E4:0F:D3:17:00:A4:A9:24:0C:52:EE:4B:D1:28:8A:30:10:3F:40:A5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       43DD958259D04D77DFA4A5EB05A61D8EEE92BE84
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199925.roa
Signing time:             Wed 10 Sep 2025 08:29:45 +0000
ROA not before:           Wed 10 Sep 2025 08:24:45 +0000
ROA not after:            Wed 09 Sep 2026 08:29:45 +0000
asID:                     199925
IP address blocks:        104.234.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:95:82:59:d0:4d:77:df:a4:a5:eb:05:a6:1d:8e:ee:92:be:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 10 08:24:45 2025 GMT
            Not After : Sep  9 08:29:45 2026 GMT
        Subject: CN=E40FD31700A4A9240C52EE4BD1288A30103F40A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:0f:55:9c:c6:04:ad:5f:4e:cd:05:1a:86:
                    9a:78:b3:db:f3:e5:73:65:4d:c2:00:0a:d4:28:7d:
                    26:36:ca:36:7d:2e:9c:58:41:0a:b4:a4:05:dd:f1:
                    a8:7e:61:c4:4e:d1:e6:22:88:b8:ec:ee:31:a2:0c:
                    4b:ed:83:39:44:96:29:3a:8c:aa:88:2f:24:ea:c6:
                    58:cc:85:67:4a:9e:58:c5:a3:37:e4:43:d9:c6:35:
                    e0:84:04:3d:00:b6:25:98:0f:79:19:e4:1b:12:a8:
                    13:8b:4c:3c:32:b8:2a:61:fa:39:88:71:95:8f:58:
                    aa:de:3e:a1:6a:26:55:a4:e2:90:a6:80:74:79:ac:
                    6e:e7:c9:8f:bd:9e:71:c5:26:c5:d4:3f:45:f2:31:
                    4f:c8:9a:b6:77:19:e5:79:88:09:32:27:ae:a4:8b:
                    b9:d2:b2:be:67:4e:5f:99:f8:e9:8f:10:89:ab:6e:
                    04:a6:fb:7f:ae:13:4e:30:77:2e:90:56:c4:19:b8:
                    90:8a:ef:9b:94:12:41:0d:9b:d9:d2:21:a0:bc:f2:
                    d5:b4:93:e5:fa:53:b8:b3:29:70:f3:49:23:3f:11:
                    60:6b:7e:65:74:07:10:b0:05:65:82:20:07:2e:d4:
                    34:65:ae:69:b2:44:9a:2c:09:7b:39:fd:a7:d0:7e:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:D3:17:00:A4:A9:24:0C:52:EE:4B:D1:28:8A:30:10:3F:40:A5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS199925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:7b:8e:bb:38:9f:46:0c:ca:65:66:c3:c2:bd:ab:cc:64:b6:
         80:1e:40:b2:65:3a:0d:93:89:5c:d3:1b:f9:10:76:e5:50:cc:
         40:c3:ae:48:a7:71:a4:b8:a3:5d:e6:75:37:0e:e2:05:12:b5:
         62:71:b8:db:65:f1:b5:87:72:20:ca:d4:32:ef:8e:78:cc:ac:
         a7:a1:b8:16:f8:b2:c2:bd:62:dd:65:4f:bf:c5:e9:e2:f9:4f:
         5c:ee:89:d6:26:40:aa:c9:a3:c3:29:72:c3:2c:0a:fb:05:06:
         13:6d:b8:91:dd:09:6e:d4:c4:9d:9b:57:ea:7a:74:5d:a9:72:
         68:75:e5:a3:1a:2a:dc:0d:af:16:ac:1e:dc:44:17:a5:da:31:
         83:a1:a0:fe:3d:98:1d:77:70:c1:3d:c4:a1:cb:33:58:65:83:
         05:3c:dc:79:e7:65:c1:2d:4d:08:10:a5:bd:73:1b:a0:d6:43:
         7f:5f:a5:09:ed:0f:9b:b0:a2:65:f8:8d:f7:97:52:59:a7:f0:
         02:52:94:88:ba:f4:38:d2:f0:9d:ab:87:c2:24:b5:3e:08:e2:
         52:e2:a2:bd:34:27:18:c9:a1:06:24:09:48:d8:03:1e:54:45:
         c0:09:37:c5:3b:75:62:ab:d2:b0:8c:1c:78:01:2d:98:9c:20:
         90:56:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:40:47 2025 by rpki-client