Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa
File:                     AS216050.roa (raw, json)
Hash identifier:          IGC+4kKYIqRJf0y7RajwW6dwrLAckChJfUdn6OG+8cg=
Subject key identifier:   70:CA:76:CE:BB:2F:5F:BE:DB:4C:F2:EA:4E:69:93:0B:86:AF:DA:69
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0B5021084CD8A82F8FEB6CADE3226811BB886D24
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa
Signing time:             Mon 16 Jun 2025 08:29:44 +0000
ROA not before:           Mon 16 Jun 2025 08:24:44 +0000
ROA not after:            Mon 15 Jun 2026 08:29:44 +0000
asID:                     216050
IP address blocks:        104.234.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:50:21:08:4c:d8:a8:2f:8f:eb:6c:ad:e3:22:68:11:bb:88:6d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 16 08:24:44 2025 GMT
            Not After : Jun 15 08:29:44 2026 GMT
        Subject: CN=70CA76CEBB2F5FBEDB4CF2EA4E69930B86AFDA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fc:2b:69:2a:af:76:a7:19:e2:73:69:5c:39:
                    c3:c7:df:8d:72:a7:e9:6d:1e:e5:db:cc:f2:ef:21:
                    dd:05:36:de:c1:c3:1d:02:6c:6a:92:2a:71:c4:f9:
                    c9:ce:27:5a:f0:c5:b3:50:92:5a:88:4f:0e:37:af:
                    e4:1d:63:25:9a:97:87:41:5b:dd:7f:31:41:33:28:
                    50:eb:92:76:62:47:1a:b4:59:be:ae:66:14:16:d4:
                    54:0d:10:e0:42:df:fa:da:67:65:f3:dd:c9:8d:60:
                    2e:18:75:8d:14:36:5c:bf:22:43:68:93:88:fe:d6:
                    56:83:19:cf:2e:5e:dd:96:5d:27:b6:5d:49:79:90:
                    ad:49:7c:c3:c9:bd:0f:40:38:eb:b5:f7:c0:ce:cd:
                    ba:d6:26:6d:c0:95:d9:2b:a1:02:16:f4:f6:84:7a:
                    33:a5:8e:62:85:23:b0:dd:ad:6a:fa:33:da:69:db:
                    a3:d7:cf:9a:7d:d1:90:5c:58:bb:4f:07:c3:b4:c9:
                    ea:ae:70:1a:91:03:c5:56:d2:9b:66:4f:c5:b9:9a:
                    2b:39:c0:9b:8f:f3:3f:55:4e:dc:cf:9f:fb:44:53:
                    5d:f5:0e:43:60:33:08:ef:29:9e:2b:f6:aa:c8:42:
                    40:ab:0d:80:0a:8e:48:d2:eb:4e:64:d4:0e:bb:fd:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:76:CE:BB:2F:5F:BE:DB:4C:F2:EA:4E:69:93:0B:86:AF:DA:69
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:39:7e:84:58:0b:cb:cd:ef:b3:22:74:c3:4b:4e:4b:01:84:
         73:58:f8:0b:1c:58:db:74:b1:e3:b9:35:aa:8b:a4:d0:09:ec:
         42:84:4b:1e:2c:3d:d3:61:65:24:a8:d5:ca:b4:ad:92:92:83:
         a2:98:02:13:16:79:b4:82:e0:6c:65:0f:03:96:3d:9a:c6:85:
         38:5f:a6:d0:d3:b0:6b:78:cd:67:a9:9b:73:69:db:e9:1d:8c:
         98:42:6f:86:26:38:a4:1b:87:37:85:9a:d1:80:e2:1e:82:11:
         88:61:e3:1b:ac:a4:df:20:da:5b:c2:29:3e:70:35:5f:25:d6:
         c5:a7:64:66:a8:21:90:e5:0f:11:c0:2f:a8:bd:a8:1b:8c:89:
         3d:a0:6d:50:39:87:30:b8:a2:df:da:8e:be:4d:c9:d0:3e:0e:
         cf:0c:11:cc:f0:67:26:74:41:2a:8f:47:7c:6e:2e:d7:33:25:
         12:99:13:7d:78:96:3f:54:e8:e9:9b:f0:d1:de:57:ff:a6:cf:
         75:52:5a:d6:96:8c:76:b7:64:a6:f8:e7:9d:76:6a:53:f3:0f:
         21:08:f7:a6:e8:6c:62:41:6a:63:90:e7:88:7b:b8:32:1f:60:
         6f:06:e2:61:d6:99:83:cd:d8:2b:03:4e:f0:b7:0c:7c:a2:1a:
         68:eb:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:36 2025 by rpki-client