Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS274095.roa
File:                     AS274095.roa (raw, json)
Hash identifier:          PxlIGzS33UWmvnLspZHf7cLfpHX2JO1cYd5m5PIE9Zg=
Subject key identifier:   3C:D2:B9:82:EA:4C:53:B0:8A:FF:F6:C6:C8:FD:43:19:9A:60:0B:E3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1B45F54A9CF51BE36779C340A9E2B8EEC8A64871
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS274095.roa
Signing time:             Thu 07 Aug 2025 22:46:52 +0000
ROA not before:           Thu 07 Aug 2025 22:41:52 +0000
ROA not after:            Thu 06 Aug 2026 22:46:52 +0000
asID:                     274095
IP address blocks:        206.53.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:45:f5:4a:9c:f5:1b:e3:67:79:c3:40:a9:e2:b8:ee:c8:a6:48:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  7 22:41:52 2025 GMT
            Not After : Aug  6 22:46:52 2026 GMT
        Subject: CN=3CD2B982EA4C53B08AFFF6C6C8FD43199A600BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:7e:1b:2b:f5:20:d8:87:78:bf:76:45:99:
                    ce:e1:c5:6c:c6:f0:50:d3:7e:8c:ec:19:b9:d9:b2:
                    5a:db:ac:9d:87:2f:f8:b8:57:b4:e0:36:d9:53:8c:
                    88:a9:be:8c:1e:cb:6d:fc:1a:52:7b:2d:40:52:9a:
                    4a:0b:8e:46:61:69:87:05:c6:4b:92:22:d5:ec:e8:
                    0f:ce:cf:33:8a:3c:91:c0:96:83:75:12:74:84:2b:
                    2d:bd:2d:ed:96:10:9c:cd:5c:58:1f:7c:f7:3e:74:
                    42:27:96:1d:94:e1:29:a4:28:17:24:44:ab:2d:bf:
                    fb:46:d0:2d:ac:83:e3:17:e2:0b:80:3b:79:56:d0:
                    90:0b:f4:1f:ff:70:5b:4c:5c:ae:f9:b7:70:f7:c9:
                    fc:4d:1e:a7:a5:bf:a5:ba:a0:65:27:5f:46:c4:63:
                    b8:60:8d:2d:2b:b9:c6:d0:e2:72:0c:dc:98:70:3e:
                    7c:c3:45:e7:4c:bc:72:56:a3:4f:de:1d:6d:d0:44:
                    b9:9f:7d:87:6a:65:54:e2:a8:73:d0:35:8c:23:24:
                    c7:c6:8a:b1:6b:c6:f6:aa:95:d5:15:c4:70:9d:bf:
                    8b:46:9a:b7:a3:c1:ec:a7:66:33:c5:0c:60:58:bb:
                    1e:24:8d:bc:7d:30:94:5a:a8:8d:1c:e5:86:d1:b1:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D2:B9:82:EA:4C:53:B0:8A:FF:F6:C6:C8:FD:43:19:9A:60:0B:E3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS274095.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:56:20:e4:1d:d8:48:15:0d:ab:f1:61:95:a1:cc:82:58:a6:
         83:70:cb:b8:b5:f6:4f:5e:0f:bf:52:35:f0:40:74:b9:13:b9:
         9e:e1:8a:82:f5:f2:c2:1a:e6:57:22:a8:15:4a:21:21:43:b8:
         e3:af:d8:41:8e:38:18:24:a1:30:11:f8:3f:95:14:38:70:56:
         a4:d1:aa:e8:78:f0:55:f7:73:af:06:3f:06:1b:40:50:48:d1:
         80:34:af:b8:fc:61:88:48:57:2a:50:53:ca:df:86:6b:2c:20:
         34:a8:72:f6:d1:d0:cc:4e:2e:c6:63:83:30:c6:39:75:76:6a:
         17:f0:ab:60:14:5e:e2:66:5c:bf:55:7f:26:5c:83:37:27:e7:
         8a:69:53:e3:45:43:c5:66:a7:ed:88:ff:b9:37:2a:64:f5:e2:
         8d:44:42:7d:4c:71:13:6f:8c:20:6a:41:24:8d:fd:6b:19:ae:
         1e:25:3d:8b:0c:29:ce:d6:91:c7:68:7f:37:0c:ee:ea:69:36:
         5a:04:23:c2:3a:b1:33:0a:9d:8e:28:d1:18:06:ba:ad:c6:6c:
         51:db:a0:4d:9e:34:6f:1a:bd:fa:3f:b1:29:d2:a1:75:26:0a:
         71:b7:01:56:61:25:b4:01:15:86:e3:ca:05:8b:7b:4a:78:77:
         1b:15:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:47:03 2025 by rpki-client