Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa
File:                     AS270764.roa (raw, json)
Hash identifier:          8fXkt+ydVIIqtTbz7zYbeCAe5g0idO162civWuTmIO0=
Subject key identifier:   1F:81:2F:13:0E:B5:C8:E2:0C:AA:5A:3E:91:C3:52:4D:17:C8:55:8F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       658C0852C090B73DFE56B9AA4065CC661FA083DA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa
Signing time:             Tue 05 Aug 2025 00:14:41 +0000
ROA not before:           Tue 05 Aug 2025 00:09:41 +0000
ROA not after:            Tue 04 Aug 2026 00:14:41 +0000
asID:                     270764
IP address blocks:        104.234.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8c:08:52:c0:90:b7:3d:fe:56:b9:aa:40:65:cc:66:1f:a0:83:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  5 00:09:41 2025 GMT
            Not After : Aug  4 00:14:41 2026 GMT
        Subject: CN=1F812F130EB5C8E20CAA5A3E91C3524D17C8558F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:9b:a5:61:f7:bf:0b:47:48:8a:7b:db:5a:
                    c4:5c:fc:67:46:15:ee:ba:76:16:86:56:ef:36:60:
                    79:ea:4f:c5:d3:1b:60:f9:a4:bc:fa:2d:f6:84:99:
                    b6:9f:aa:59:fb:b6:86:c6:3d:f2:87:3f:af:a7:47:
                    ea:e4:b4:3d:dc:1d:9a:64:df:32:36:1b:3a:76:4a:
                    31:cc:39:c7:42:fd:7c:9d:d5:5f:9d:00:51:c8:07:
                    b9:06:a6:35:0e:e8:ce:f8:bb:4c:87:c4:8b:17:80:
                    f4:62:19:79:77:1d:53:dd:08:e6:7e:c6:0a:0e:13:
                    86:c5:ed:f0:b3:59:89:1e:f3:82:5e:75:ed:84:54:
                    3a:05:fb:4b:34:84:a4:69:e8:c6:fc:f1:a0:1c:6d:
                    6c:b7:e9:46:f5:37:2a:3f:5f:79:fc:8e:87:44:93:
                    b3:ad:13:8b:de:5d:10:6e:d5:26:c6:04:c8:6a:bb:
                    cd:6d:df:e6:7f:bf:18:1d:72:3c:a3:79:81:6f:e5:
                    23:00:52:e9:9c:16:ad:2c:42:c5:51:57:22:8a:dc:
                    b4:0e:7f:8d:68:4b:60:67:09:cd:b6:d0:21:f0:95:
                    11:30:d1:9a:76:f1:0e:d3:09:38:d6:05:89:e3:94:
                    52:98:20:5c:40:24:48:05:d3:8f:f6:2c:01:81:3b:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:81:2F:13:0E:B5:C8:E2:0C:AA:5A:3E:91:C3:52:4D:17:C8:55:8F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:86:1a:3d:ce:86:e7:20:d1:a0:d9:e9:6c:8b:38:3a:dd:30:
         74:f6:09:b9:5a:82:f2:36:80:c3:c1:21:75:6b:f9:51:2f:46:
         53:6c:61:59:b7:79:8d:ab:df:40:fe:c9:09:8e:0e:bf:48:e9:
         57:59:ae:5f:a4:f5:8d:6e:1b:e0:bd:ed:c3:5d:fa:50:b2:ee:
         0c:f3:78:68:30:17:a1:0e:68:30:22:dc:35:13:0d:4e:95:8a:
         d5:86:05:62:df:8f:7e:01:9e:16:9a:10:39:8f:30:30:ed:30:
         5c:a6:b5:7f:a3:24:8d:e0:67:85:4f:21:12:b5:ce:46:d2:68:
         9c:3d:d3:4f:ee:dd:87:dc:dd:62:02:b4:83:81:b6:77:01:89:
         92:c9:e3:ac:26:c0:56:c7:22:ce:0d:88:6d:b9:58:c5:d1:c1:
         14:95:6e:99:4a:b7:b4:7a:46:4a:48:ab:fc:af:d8:b7:da:8e:
         28:50:19:c4:da:c5:24:96:dd:9b:48:51:e7:f1:66:f5:8c:2f:
         48:52:26:26:7c:8a:e0:75:90:1e:4b:6e:a5:8c:2c:32:52:02:
         f4:9f:ec:d3:a3:ac:9d:17:a2:bd:e0:25:a4:03:b3:f6:53:be:
         b7:9a:a6:8d:ef:0c:4d:24:ad:ef:8c:17:73:4d:21:00:21:b2:
         e4:ee:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:29:06 2025 by rpki-client