Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa
File:                     AS31863.roa (raw, json)
Hash identifier:          j9yLT3rh0vtzQbjo90U0GE7GuZYYyVdEM1Me47R8j0o=
Subject key identifier:   7F:B8:85:BA:0D:95:47:F7:58:64:26:5A:B7:C3:5B:0B:FA:2A:8A:41
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4B72E9387006B3EDD7BC8869E67268DBA1B2E835
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa
Signing time:             Fri 25 Sep 2026 04:36:20 +0000
ROA not before:           Fri 25 Sep 2026 04:31:20 +0000
ROA not after:            Fri 24 Sep 2027 04:36:20 +0000
asID:                     31863
IP address blocks:        104.234.30.0/24 maxlen: 24
                          104.234.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:72:e9:38:70:06:b3:ed:d7:bc:88:69:e6:72:68:db:a1:b2:e8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 25 04:31:20 2026 GMT
            Not After : Sep 24 04:36:20 2027 GMT
        Subject: CN=7FB885BA0D9547F75864265AB7C35B0BFA2A8A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:ab:49:c0:01:9e:9f:7c:7d:f3:b0:60:18:
                    92:c3:62:7f:4c:fa:60:6e:ce:2b:8e:fb:49:42:97:
                    1f:9a:6c:02:ce:64:bd:65:c4:35:f7:1b:b8:2f:35:
                    35:41:62:58:1a:06:82:9f:1e:74:10:3f:fb:b1:c6:
                    9e:d1:b7:ee:39:80:bb:c0:60:e7:8b:27:74:31:32:
                    17:8e:9c:61:be:63:92:06:81:69:57:f6:95:e4:42:
                    db:4a:67:6c:29:29:e6:65:96:68:66:d0:c4:31:0c:
                    52:4b:08:1b:97:80:12:f3:87:63:d4:c3:13:50:49:
                    ad:a2:78:38:28:e2:ab:82:63:50:50:ec:b1:f2:0e:
                    32:8e:c4:15:68:b6:72:90:e3:a5:79:63:f6:4a:39:
                    8e:f0:88:7f:e2:59:ef:13:a8:8c:6f:25:d0:f2:d5:
                    df:58:4e:a1:c1:7c:66:c9:07:3d:5e:04:35:f4:8c:
                    56:74:3e:4c:04:a7:5b:a8:a6:b2:8d:59:70:5e:02:
                    b4:c3:3a:35:6e:5d:0e:ca:e7:8b:50:a3:2b:98:14:
                    d7:74:b5:b6:72:2e:b2:3e:30:d0:03:7d:9b:39:de:
                    f9:dd:81:2f:6f:b2:25:f9:0b:3c:7e:f9:ce:bc:b6:
                    59:eb:cc:3d:4a:ba:17:4b:a9:e9:e6:8c:a7:ca:77:
                    63:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B8:85:BA:0D:95:47:F7:58:64:26:5A:B7:C3:5B:0B:FA:2A:8A:41
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.30.0/24
                  104.234.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:cd:0b:d3:3b:c5:77:b7:ff:e4:9c:c3:0b:e6:94:23:c3:72:
         e0:64:59:e5:63:7a:18:bc:70:a9:79:e4:d0:b9:fd:a9:ae:42:
         fc:32:29:20:71:e4:75:a8:56:fc:2c:1f:15:fb:fd:51:13:29:
         b3:c0:a7:7a:a0:ae:77:5b:5d:64:47:27:20:39:76:92:81:b2:
         cb:83:48:7a:e2:bb:52:0b:46:9b:f4:f9:ca:12:56:e5:6c:3c:
         10:b4:5e:d6:68:3a:79:26:3f:eb:b9:58:77:d3:94:3d:32:d4:
         cd:0e:8d:01:f8:42:37:70:ed:88:cf:56:bd:73:b5:fd:76:64:
         42:84:1f:75:b0:29:7b:ca:e9:71:5d:66:bb:70:e3:19:8b:32:
         89:54:76:ee:ff:79:b4:ce:25:4f:ae:f5:25:72:b0:56:57:fd:
         56:f4:37:18:64:fc:e8:7a:38:d5:e7:72:74:f5:43:42:c8:20:
         a3:aa:1f:ad:41:cd:52:b3:dc:99:6b:be:9d:ed:55:a0:ba:71:
         2c:41:bb:8f:ec:ff:85:ac:f2:89:8c:96:1b:60:9a:38:6d:eb:
         d0:97:48:a5:9e:23:59:90:90:42:e4:17:42:50:9e:ee:4d:d2:
         b0:52:d9:7c:09:a4:1f:11:ae:ae:ad:cf:d0:3a:66:cf:dc:f2:
         cc:54:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:30:19 2026 by rpki-client