Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272073.roa
File:                     AS272073.roa (raw, json)
Hash identifier:          NF4wiRUc6CBE9VJQCw4+X2BXmd+2hZCFa8rX4Cz66wc=
Subject key identifier:   86:7E:73:0A:7B:E0:B6:ED:2A:BC:E4:A5:0A:1C:76:E9:4B:E8:FD:E3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0BD312F63A25911D98FF6A08FA21A26086D85985
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272073.roa
Signing time:             Tue 24 Jun 2025 03:48:57 +0000
ROA not before:           Tue 24 Jun 2025 03:43:57 +0000
ROA not after:            Tue 23 Jun 2026 03:48:57 +0000
asID:                     272073
IP address blocks:        206.53.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d3:12:f6:3a:25:91:1d:98:ff:6a:08:fa:21:a2:60:86:d8:59:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 24 03:43:57 2025 GMT
            Not After : Jun 23 03:48:57 2026 GMT
        Subject: CN=867E730A7BE0B6ED2ABCE4A50A1C76E94BE8FDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:4e:08:08:5a:21:87:6f:76:ef:f6:5e:b8:
                    94:84:1f:01:8a:22:f8:02:f0:f2:e2:73:c2:da:ad:
                    95:b5:e9:e3:0d:1e:09:d4:d3:ed:cc:05:cc:d0:c2:
                    29:06:2f:6b:12:bc:4f:c7:28:1e:e3:39:9e:d2:58:
                    48:0e:25:f1:ac:07:0a:e0:5a:66:aa:18:d9:e3:7f:
                    54:1d:98:db:7d:71:dc:25:59:47:65:ad:71:6b:ee:
                    ce:b4:ea:99:1c:0d:af:e0:e1:b3:27:1d:fe:44:08:
                    17:cf:5f:2b:42:b0:d0:e2:b2:ee:61:e4:d5:fc:88:
                    c8:4a:7b:78:06:cf:67:65:ae:fe:76:af:5f:99:d5:
                    84:d5:9b:4d:11:0a:bb:0a:ac:5b:ba:d8:0b:a2:ba:
                    8f:af:ec:49:6a:a5:92:e7:2d:0d:a6:66:61:97:59:
                    f0:66:d2:36:e1:8c:83:a1:77:66:e0:bd:cf:e3:97:
                    98:b1:02:e5:7d:93:e0:8d:a9:a6:d8:55:52:50:ff:
                    24:a3:b5:b5:ad:19:c4:90:14:cb:b3:fa:a8:33:9c:
                    a9:a9:24:22:d9:85:66:e1:60:47:0a:17:6f:b9:e6:
                    d8:4e:d0:96:70:0d:41:eb:2e:5e:fc:76:ac:62:e1:
                    9b:f9:09:5e:5b:43:27:fa:1e:46:a8:f6:34:25:e1:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7E:73:0A:7B:E0:B6:ED:2A:BC:E4:A5:0A:1C:76:E9:4B:E8:FD:E3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:2c:6f:f5:ca:09:fd:39:10:b4:da:62:20:7f:1b:88:7d:
         af:da:e6:a8:0c:06:20:44:bb:1e:60:42:4a:7e:26:b9:f1:9f:
         ba:25:f5:9c:43:bb:f7:6f:fe:5b:48:91:98:26:47:0c:b8:b9:
         dd:e9:b0:c2:d0:f3:95:e2:71:7d:13:31:48:ea:76:94:39:17:
         b5:24:98:ce:e2:76:43:66:57:e0:a4:68:62:2b:e8:d4:af:ab:
         63:9d:02:66:c0:78:4e:ca:7d:ae:52:c7:1c:46:18:5b:25:e0:
         4e:07:fb:23:65:b5:22:f5:ad:d8:b2:b6:a1:2c:fe:07:40:3c:
         73:1f:95:2e:e4:f1:c3:5a:02:e9:56:26:cc:a7:7a:1a:d9:c9:
         7d:41:a6:05:81:2e:43:e5:3b:fa:64:9b:91:a6:66:b1:10:91:
         24:41:a0:f1:ac:1e:74:fe:62:88:bd:b7:e8:b3:1f:29:22:30:
         7e:4e:80:22:24:d0:04:51:f9:22:fc:1c:3b:df:f5:e1:66:26:
         0f:9e:3c:52:cb:e8:9b:c7:10:e0:31:ba:9b:83:36:88:c3:7d:
         ec:3c:ef:67:f3:b6:b4:f9:f4:5f:80:26:f6:d5:a3:ca:9a:80:
         8e:5a:30:96:26:12:06:47:1d:9a:03:8c:0e:87:22:f0:fd:84:
         54:22:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:59:57 2025 by rpki-client