Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395917.roa
File:                     AS395917.roa (raw, json)
Hash identifier:          VxEKwblTyCZiMHPaUzYKcT/6/TZL39yVsyGIbrVmCg0=
Subject key identifier:   A3:E3:4C:46:B1:08:E6:9F:66:62:EC:17:1B:1C:62:4C:DD:3E:4D:99
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2FD9320B110AB49EF36231A563EF037BCC5B4F07
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395917.roa
Signing time:             Thu 01 May 2025 04:32:57 +0000
ROA not before:           Thu 01 May 2025 04:27:57 +0000
ROA not after:            Thu 30 Apr 2026 04:32:57 +0000
asID:                     395917
IP address blocks:        104.234.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:32:0b:11:0a:b4:9e:f3:62:31:a5:63:ef:03:7b:cc:5b:4f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May  1 04:27:57 2025 GMT
            Not After : Apr 30 04:32:57 2026 GMT
        Subject: CN=A3E34C46B108E69F6662EC171B1C624CDD3E4D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:06:be:7e:8c:ca:7e:23:74:2e:81:a3:28:
                    05:51:c3:cf:08:51:c4:d7:55:72:8b:9b:2d:28:e0:
                    e1:d4:1a:12:d2:e3:08:63:12:51:ae:d6:86:5b:68:
                    bc:d6:d0:d3:e2:b0:92:6f:d9:50:ce:91:14:eb:55:
                    8f:88:6d:f1:59:71:a2:7a:ff:e9:75:0d:78:40:72:
                    56:85:7c:b0:5a:62:e3:e1:be:c5:e3:98:cb:19:6f:
                    d3:b0:61:e2:79:a8:21:33:d7:8d:a6:3f:02:cc:50:
                    de:53:0f:27:c1:9d:d2:e2:d1:ed:29:84:a3:d0:2b:
                    8a:4c:0d:b0:71:6a:89:0e:e0:34:c7:7b:4d:28:a3:
                    be:c8:ee:25:e8:94:7d:fa:c6:26:0c:e2:c9:94:f4:
                    8f:d5:be:2a:92:c3:2b:19:69:a7:9f:df:20:5a:e8:
                    b3:a9:bb:28:b2:be:ac:43:27:d7:99:11:d1:da:0c:
                    40:ae:62:62:bf:39:b8:37:03:af:ca:a7:8c:0d:9d:
                    c6:c7:76:5e:93:dd:d1:48:84:03:80:3b:2f:33:e9:
                    4d:f0:f9:b0:04:a0:db:07:d0:68:1d:b9:ca:c3:67:
                    74:88:0c:f8:24:3b:e7:45:c2:46:4c:aa:8c:4e:29:
                    21:be:26:6b:6b:23:0b:bc:32:e8:cf:56:3c:08:10:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E3:4C:46:B1:08:E6:9F:66:62:EC:17:1B:1C:62:4C:DD:3E:4D:99
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395917.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:88:25:41:e8:35:13:68:82:d5:d6:bf:e2:2c:ab:e8:75:
         5f:94:74:85:be:72:dc:51:62:3e:be:10:7c:52:8e:24:f8:6c:
         f1:bf:52:4a:f6:7b:7c:8e:d4:63:d1:ab:90:12:85:a0:c3:af:
         4a:1a:3f:38:4f:30:f0:95:3f:3d:51:3f:d0:e3:bf:22:f4:8c:
         70:bf:95:2d:02:2e:71:21:e2:4c:df:c1:81:fe:af:28:64:30:
         5d:82:08:cf:6e:ac:40:1e:95:58:98:ce:7e:fb:4a:2f:be:6b:
         b5:a5:be:6a:a1:76:49:44:80:40:71:1f:78:90:70:95:24:47:
         d2:3b:a4:0a:59:be:ac:d5:9e:4b:b4:73:2c:bc:68:65:a1:01:
         a5:87:89:88:3a:77:dd:20:43:40:45:2a:2d:e0:39:a5:13:a6:
         02:18:41:c8:35:d9:7d:23:80:6b:ab:9b:06:27:3a:74:29:5f:
         f5:3d:b0:cc:0f:e5:f0:90:7a:af:c0:dc:70:b9:e0:03:73:3b:
         ff:b0:1d:1f:0f:50:0b:1b:4d:87:74:e8:cb:54:8f:1e:df:82:
         28:6a:59:c7:60:25:83:23:ac:d5:c6:ee:95:f0:88:1f:f4:d4:
         26:d4:61:15:48:ac:e5:ab:05:bd:c2:a6:39:e8:16:7c:92:e4:
         3c:99:55:14
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUL9kyCxEKtJ7zYjGlY+8De8xbTwcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNTAxMDQyNzU3WhcNMjYwNDMwMDQzMjU3
WjAzMTEwLwYDVQQDEyhBM0UzNEM0NkIxMDhFNjlGNjY2MkVDMTcxQjFDNjI0Q0RE
M0U0RDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNkGvn6Myn4j
dC6BoygFUcPPCFHE11Vyi5stKODh1BoS0uMIYxJRrtaGW2i81tDT4rCSb9lQzpEU
61WPiG3xWXGiev/pdQ14QHJWhXywWmLj4b7F45jLGW/TsGHieaghM9eNpj8CzFDe
Uw8nwZ3S4tHtKYSj0CuKTA2wcWqJDuA0x3tNKKO+yO4l6JR9+sYmDOLJlPSP1b4q
ksMrGWmnn98gWuizqbsosr6sQyfXmRHR2gxArmJivzm4NwOvyqeMDZ3Gx3Zek93R
SIQDgDsvM+lN8PmwBKDbB9BoHbnKw2d0iAz4JDvnRcJGTKqMTikhviZrayMLvDLo
z1Y8CBA9NwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKPjTEaxCOafZmLsFxscYkzd
Pk2ZMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5NTkxNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqSjANBgkqhkiG9w0BAQsFAAOC
AQEAng+IJUHoNRNogtXWv+Isq+h1X5R0hb5y3FFiPr4QfFKOJPhs8b9SSvZ7fI7U
Y9GrkBKFoMOvSho/OE8w8JU/PVE/0OO/IvSMcL+VLQIucSHiTN/Bgf6vKGQwXYII
z26sQB6VWJjOfvtKL75rtaW+aqF2SUSAQHEfeJBwlSRH0jukClm+rNWeS7RzLLxo
ZaEBpYeJiDp33SBDQEUqLeA5pROmAhhByDXZfSOAa6ubBic6dClf9T2wzA/l8JB6
r8DccLngA3M7/7AdHw9QCxtNh3Toy1SPHt+CKGpZx2AlgyOs1cbulfCIH/TUJtRh
FUis5asFvcKmOegWfJLkPJlVFA==
-----END CERTIFICATE-----
Generated at Wed May 7 05:14:47 2025 by rpki-client