Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          slkOUF2+fBSWQZYk8jgQ3TPX9Y/wF3wkDwe6fDA3ooE=
Subject key identifier:   BB:B1:17:F2:00:E6:21:BB:96:DF:C2:42:88:53:8D:6E:70:08:21:6F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       20285E38AEF3B7683AD30A508F59D0B14FAC00A4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30058.roa
Signing time:             Sun 17 Aug 2025 06:41:36 +0000
ROA not before:           Sun 17 Aug 2025 06:36:36 +0000
ROA not after:            Sun 16 Aug 2026 06:41:36 +0000
asID:                     30058
IP address blocks:        104.234.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:28:5e:38:ae:f3:b7:68:3a:d3:0a:50:8f:59:d0:b1:4f:ac:00:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 17 06:36:36 2025 GMT
            Not After : Aug 16 06:41:36 2026 GMT
        Subject: CN=BBB117F200E621BB96DFC24288538D6E7008216F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:2f:2d:26:33:c0:48:cc:0f:10:ed:b6:1b:
                    fb:fc:97:cc:a4:23:45:6a:95:c4:11:4d:17:a8:19:
                    ff:3e:45:7d:8b:5a:2a:4d:e1:62:aa:e8:27:1d:57:
                    86:fa:f8:8e:ab:f0:98:f3:43:47:0e:49:c3:56:a5:
                    67:cb:c5:b1:80:cf:5e:6c:b5:5c:ac:43:e6:16:95:
                    24:30:95:11:44:f4:b1:8f:e5:49:f6:67:68:e7:e6:
                    23:23:a6:60:85:57:e1:7a:fe:99:f7:81:b3:96:83:
                    81:94:7e:6e:bc:10:eb:f7:b4:2f:18:50:10:d4:d6:
                    32:59:1e:f1:e8:d4:63:20:f7:6f:14:4d:a1:4f:bb:
                    7b:4b:21:57:d1:76:60:bb:31:f6:a6:58:66:93:f0:
                    f0:c6:58:d2:5c:06:2a:f6:0c:d6:3a:b3:14:86:b4:
                    66:72:09:0d:17:24:dc:d5:d5:ad:fc:72:14:5b:cc:
                    d5:87:84:b0:f9:c5:6e:af:78:ac:b8:18:a7:38:07:
                    26:9e:ae:fb:cc:e1:8b:a6:e3:9a:f8:95:fb:8f:8e:
                    46:ed:6b:e8:85:57:ba:de:c4:0f:5b:87:65:42:ee:
                    fb:58:cc:5c:4d:2d:c0:86:ae:92:d1:1b:c8:4c:2f:
                    38:7d:d2:54:05:ba:33:38:6c:42:80:ef:29:df:29:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:17:F2:00:E6:21:BB:96:DF:C2:42:88:53:8D:6E:70:08:21:6F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:0d:c8:d9:94:56:45:ab:c8:f4:16:87:38:9c:ef:7b:b0:
         e1:b7:c2:6f:20:57:b7:b2:aa:c9:e0:71:4e:96:c3:49:62:23:
         cb:a1:c4:90:44:73:20:3b:12:f4:2b:1c:40:ef:10:2e:95:9d:
         e4:4b:f1:c6:c4:5f:47:24:8a:cb:53:f9:f0:85:76:c7:35:a6:
         d2:57:b4:99:60:a0:55:6b:f1:ff:b2:47:74:2a:1d:01:f6:e1:
         2f:a1:bd:26:21:96:ea:78:53:b7:96:fd:8a:58:cd:86:80:07:
         5c:0f:88:34:e5:24:2d:38:5e:f3:2b:01:9a:41:48:31:31:9c:
         de:f6:5f:e4:ad:8c:3b:24:4c:6a:4b:fa:de:f1:75:7e:2c:5f:
         b0:10:d8:f9:a7:a1:e0:fd:6e:b7:95:24:33:63:44:ff:5c:93:
         8f:64:24:7b:fd:1f:e4:b4:7e:8d:58:6e:fd:3c:dd:54:48:e8:
         3e:48:2b:93:7e:04:7d:5d:6e:b7:b9:13:c2:be:6b:8c:d2:12:
         7e:4a:15:53:61:78:99:a6:7c:c6:97:66:6e:b9:11:da:53:18:
         4f:5a:1c:b2:60:3f:e5:ed:8d:2c:06:8f:9e:3f:32:44:0a:36:
         22:d2:ee:2c:ff:bd:69:01:ba:dd:d1:7a:93:c1:0b:ba:25:24:
         5d:f8:6f:ad
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUICheOK7zt2g60wpQj1nQsU+sAKQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwODE3MDYzNjM2WhcNMjYwODE2MDY0MTM2
WjAzMTEwLwYDVQQDEyhCQkIxMTdGMjAwRTYyMUJCOTZERkMyNDI4ODUzOEQ2RTcw
MDgyMTZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleIvLSYzwEjM
DxDtthv7/JfMpCNFapXEEU0XqBn/PkV9i1oqTeFiqugnHVeG+viOq/CY80NHDknD
VqVny8WxgM9ebLVcrEPmFpUkMJURRPSxj+VJ9mdo5+YjI6ZghVfhev6Z94GzloOB
lH5uvBDr97QvGFAQ1NYyWR7x6NRjIPdvFE2hT7t7SyFX0XZguzH2plhmk/DwxljS
XAYq9gzWOrMUhrRmcgkNFyTc1dWt/HIUW8zVh4Sw+cVur3isuBinOAcmnq77zOGL
puOa+JX7j45G7WvohVe63sQPW4dlQu77WMxcTS3Ahq6S0RvITC84fdJUBbozOGxC
gO8p3ymjgwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLuxF/IA5iG7lt/CQohTjW5w
CCFvMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzMwMDU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpWMA0GCSqGSIb3DQEBCwUAA4IB
AQCKcA3I2ZRWRavI9BaHOJzve7Dht8JvIFe3sqrJ4HFOlsNJYiPLocSQRHMgOxL0
KxxA7xAulZ3kS/HGxF9HJIrLU/nwhXbHNabSV7SZYKBVa/H/skd0Kh0B9uEvob0m
IZbqeFO3lv2KWM2GgAdcD4g05SQtOF7zKwGaQUgxMZze9l/krYw7JExqS/re8XV+
LF+wENj5p6Hg/W63lSQzY0T/XJOPZCR7/R/ktH6NWG79PN1USOg+SCuTfgR9XW63
uRPCvmuM0hJ+ShVTYXiZpnzGl2ZuuRHaUxhPWhyyYD/l7Y0sBo+ePzJECjYi0u4s
/71pAbrd0XqTwQu6JSRd+G+t
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:39 2025 by rpki-client