Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa
File:                     AS211373.roa (raw, json)
Hash identifier:          r37NxWyMOM4MtGJTIa5WHUv5fu1eNSF2ZZnVEaZzILc=
Subject key identifier:   7F:FB:CC:8D:8A:85:36:F0:35:33:F9:16:F6:1C:8A:7B:0D:C0:BB:A9
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6F513464195DCFFAB711CE05E088817B9EC00008
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa
Signing time:             Wed 06 Aug 2025 12:29:44 +0000
ROA not before:           Wed 06 Aug 2025 12:24:44 +0000
ROA not after:            Wed 05 Aug 2026 12:29:44 +0000
asID:                     211373
IP address blocks:        104.234.130.0/24 maxlen: 24
                          206.53.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:51:34:64:19:5d:cf:fa:b7:11:ce:05:e0:88:81:7b:9e:c0:00:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  6 12:24:44 2025 GMT
            Not After : Aug  5 12:29:44 2026 GMT
        Subject: CN=7FFBCC8D8A8536F03533F916F61C8A7B0DC0BBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0b:fd:f4:b5:92:bb:0b:fc:03:c3:b3:8d:65:
                    9d:ec:99:08:4c:8e:71:c8:7a:ab:5c:c4:64:54:7e:
                    50:46:b8:ce:69:64:d9:5a:45:49:ed:dc:dd:8a:7f:
                    d1:6b:e7:dc:14:48:a7:cd:e1:32:2e:40:8d:92:3f:
                    39:72:15:4c:09:5f:f9:63:38:75:b2:fe:fd:ca:8d:
                    d1:e7:4c:20:75:dc:fc:58:d8:00:08:85:20:04:46:
                    34:24:06:66:65:25:06:08:24:49:24:09:60:19:ac:
                    41:59:5a:2f:9e:d7:c9:ae:1f:17:97:cb:73:44:b4:
                    17:78:68:e1:df:49:16:c4:f8:c2:f3:14:e4:20:8a:
                    57:9b:5a:08:02:03:d2:90:10:3e:d8:66:7e:4f:ef:
                    e5:c2:35:27:e4:41:a2:36:2b:07:bb:42:71:e2:fc:
                    95:9c:4b:21:d3:9d:6c:7a:7e:58:d1:ca:bd:50:c9:
                    ed:ae:78:7a:e8:ac:b8:ff:d0:eb:25:1f:46:92:6b:
                    77:55:6c:8f:d3:c0:7d:9a:c5:50:fa:a4:8c:2f:78:
                    b8:07:b2:21:05:ed:42:ac:68:e3:d1:06:10:e2:42:
                    bd:4b:8c:44:0a:39:b3:f9:7e:2d:d5:95:02:08:67:
                    09:0a:5d:fb:02:33:2b:7d:43:02:8b:94:86:e0:4b:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FB:CC:8D:8A:85:36:F0:35:33:F9:16:F6:1C:8A:7B:0D:C0:BB:A9
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.130.0/24
                  206.53.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:34:3c:17:96:2d:45:ab:ba:10:b6:7a:40:e0:a2:5c:27:cf:
         ef:98:40:c5:a0:c3:b1:f9:8f:c1:84:91:bf:cd:3a:6d:d0:e1:
         cb:96:89:ed:d4:e2:51:7a:05:b7:4e:60:23:a7:7d:93:fa:78:
         7c:6f:a8:8b:6a:0d:93:f8:e9:37:d0:d5:12:b2:44:d4:01:46:
         c4:18:e0:18:f1:19:0f:45:03:a9:70:0d:3b:e6:49:90:5f:24:
         35:8d:56:c0:da:e4:c5:95:f1:71:e5:bb:7a:ec:61:0e:1e:31:
         56:df:c4:88:a3:21:aa:69:55:41:89:46:34:5b:b8:ae:20:29:
         fb:19:c8:a1:35:b1:97:e7:20:fc:29:13:8e:5e:14:05:cb:fa:
         7f:6b:56:04:7a:be:d4:68:64:69:75:2d:20:03:21:29:18:f7:
         30:dd:81:43:a9:48:00:32:59:26:17:33:e2:9e:20:9e:f4:43:
         13:e8:12:46:53:bc:9b:04:ea:95:68:2c:20:ea:a1:5d:a5:84:
         ea:a0:62:2a:62:fa:8e:ad:c1:0d:76:c8:1e:8c:84:3d:93:d1:
         93:e7:c0:43:f1:c8:19:91:98:83:d4:53:90:30:a1:e8:ee:9b:
         2a:37:0e:31:ae:ad:d9:35:0c:06:d4:0a:19:02:d8:ec:3d:1d:
         31:db:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:54:30 2025 by rpki-client