Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25846.roa
File:                     AS25846.roa (raw, json)
Hash identifier:          jxWF2+yvOqhkJ1Mq8vciX0FkqrJ7aq16mH57Rl7DQKo=
Subject key identifier:   8D:C2:29:AC:58:1E:D4:46:B2:04:08:6F:22:78:8F:87:07:CF:31:44
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       428DF254D600A85FF10D7C299A2EFC3D11AB3645
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25846.roa
Signing time:             Tue 14 Oct 2025 13:30:38 +0000
ROA not before:           Tue 14 Oct 2025 13:25:38 +0000
ROA not after:            Tue 13 Oct 2026 13:30:38 +0000
asID:                     25846
IP address blocks:        104.234.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8d:f2:54:d6:00:a8:5f:f1:0d:7c:29:9a:2e:fc:3d:11:ab:36:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 14 13:25:38 2025 GMT
            Not After : Oct 13 13:30:38 2026 GMT
        Subject: CN=8DC229AC581ED446B204086F22788F8707CF3144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:81:41:37:23:68:bb:35:2c:8d:ee:ed:75:
                    60:a2:d6:58:00:63:d1:be:a0:06:9a:b2:59:f7:32:
                    97:3d:6b:5c:0d:c6:fb:09:6d:5c:bb:16:56:27:96:
                    ae:18:ad:a2:20:c3:bf:fb:2a:8d:12:dc:75:a6:bb:
                    64:ad:61:0c:80:44:c7:e1:12:04:5e:16:c9:20:02:
                    02:45:7c:f1:ba:2a:8a:dc:10:e1:0a:c9:a2:62:77:
                    a3:86:d4:2f:d4:15:28:d0:da:4e:5a:0d:4b:94:68:
                    0f:60:29:ba:b1:3a:98:8b:da:73:35:94:e7:ca:60:
                    c6:69:a6:e3:ae:66:e8:e6:08:9c:78:6c:08:a3:d0:
                    aa:31:17:a9:94:e9:cc:97:87:f5:92:2a:05:d7:ab:
                    4c:73:e7:89:30:9c:7f:07:d4:ce:9f:b6:6e:0b:cc:
                    51:32:80:c5:29:0b:1c:42:5e:e5:09:4f:c4:97:e6:
                    3f:ce:f2:96:9b:3a:d9:85:0d:19:3a:8f:40:87:78:
                    13:da:dd:67:2d:83:ca:36:74:a3:6d:6a:e6:bd:c9:
                    ee:11:de:fe:15:32:cb:28:90:5d:06:66:e6:37:4e:
                    55:f8:38:b3:5a:e6:d6:43:e4:8e:69:fd:a9:51:8e:
                    3c:d0:f6:06:78:51:be:f1:09:15:cf:3d:5d:63:91:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:29:AC:58:1E:D4:46:B2:04:08:6F:22:78:8F:87:07:CF:31:44
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5b:f2:00:a9:7b:8a:8b:9d:44:6a:cc:c9:8c:56:9b:91:3e:
         f1:20:ac:89:14:71:20:91:e9:4d:47:80:0a:bb:14:e3:49:35:
         b4:7d:1c:85:4f:ca:15:1c:9d:22:93:20:c8:ef:be:0d:57:df:
         7e:59:79:5e:f4:4e:40:94:ae:94:af:95:d4:e4:3a:da:d9:40:
         73:40:eb:6e:8c:d2:8b:ca:9e:19:65:77:06:de:5f:3b:19:1e:
         37:4e:4c:79:0a:f0:0c:0f:99:06:ca:d2:7c:a9:2f:fa:f1:81:
         37:d5:b4:c1:90:6b:99:b5:dc:0b:67:00:49:e5:d7:52:4a:38:
         8c:06:46:78:f2:ca:a8:58:41:f9:ee:43:5c:37:d3:d8:da:c6:
         15:c8:99:65:10:33:c8:49:5e:33:88:83:de:91:68:91:bf:4b:
         a5:74:eb:9e:b4:0b:44:f4:80:62:52:38:95:07:21:40:8c:e5:
         aa:b5:3b:a8:51:88:de:d1:c1:f6:fe:fb:83:12:fc:24:d7:33:
         dc:b1:77:40:17:aa:ef:5d:9b:61:dd:42:a9:b9:39:5e:be:4b:
         b3:dd:39:69:f1:22:fb:2a:d7:f5:b7:d9:62:ce:73:c9:6d:4c:
         a5:08:9b:d8:0a:3e:44:3b:b3:04:8b:73:b2:3a:65:0b:87:e6:
         19:13:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:00 2025 by rpki-client