Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400833.roa
File:                     AS400833.roa (raw, json)
Hash identifier:          3vZunv1dBWXa5TPm8OCTaTZrROleuKQZbJoz8Q2k/nQ=
Subject key identifier:   32:73:2E:3B:48:FD:04:81:26:39:09:D9:D4:13:BD:00:29:9C:35:DF
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       242A0ACBC524B99A205CEC359BD8137C2398A220
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400833.roa
Signing time:             Thu 07 Aug 2025 00:01:56 +0000
ROA not before:           Wed 06 Aug 2025 23:56:56 +0000
ROA not after:            Thu 06 Aug 2026 00:01:56 +0000
asID:                     400833
IP address blocks:        104.234.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2a:0a:cb:c5:24:b9:9a:20:5c:ec:35:9b:d8:13:7c:23:98:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  6 23:56:56 2025 GMT
            Not After : Aug  6 00:01:56 2026 GMT
        Subject: CN=32732E3B48FD0481263909D9D413BD00299C35DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:3a:b9:bd:e4:70:97:91:6d:e2:6a:e2:56:
                    d2:18:9a:0f:ea:b9:57:2b:39:98:d4:af:27:d8:39:
                    cc:f1:29:2f:42:7c:dd:f6:56:05:1f:a1:00:4e:51:
                    39:41:d2:b5:1b:23:2c:6f:c2:41:bb:39:81:30:41:
                    66:1f:ef:2d:9a:e5:d0:c5:3a:7e:7e:ea:8f:d6:ea:
                    ee:f1:62:a3:a9:f0:a7:5d:0f:7f:8e:7f:8a:3f:78:
                    6e:a5:60:6e:8b:ee:ef:65:1d:8b:85:e4:d0:d7:9c:
                    c6:c0:9f:8d:ea:f6:32:79:e0:99:85:9b:58:1b:bd:
                    20:42:d6:2c:64:d6:61:d5:dc:8a:b2:4d:56:94:21:
                    9d:93:fe:a0:f8:76:8c:c0:18:32:4e:e5:8f:38:ee:
                    29:55:8d:ae:71:8c:44:f4:3e:0e:57:73:e8:5c:75:
                    4b:b7:7c:05:ed:fb:97:74:80:66:a2:4f:4c:f0:fb:
                    38:28:4d:8f:09:35:8b:c0:41:3b:c2:f4:63:04:08:
                    3e:c2:1b:ef:89:01:6f:44:15:69:57:9e:f0:6e:b6:
                    08:d4:65:d7:7e:39:9f:f5:68:55:e9:84:6b:f4:4c:
                    cd:4a:76:09:db:1e:41:05:31:52:9f:5e:be:85:69:
                    65:7a:f6:77:18:2f:9e:67:0b:6c:38:a9:c0:96:e2:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:2E:3B:48:FD:04:81:26:39:09:D9:D4:13:BD:00:29:9C:35:DF
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:1b:54:10:8f:b8:a6:8e:f9:4c:33:7e:c3:99:85:94:e6:
         a8:9f:84:ae:37:19:70:41:29:c3:84:33:27:ca:34:02:6a:6c:
         69:0c:7e:cc:c5:e6:88:f3:af:c9:88:91:00:50:09:35:2c:cc:
         a4:bf:cd:07:19:5b:7c:b6:4e:77:b0:2a:6a:cc:43:fd:ab:93:
         08:58:bb:6f:e6:e1:2f:79:05:4f:18:e8:30:0e:35:9d:f1:1d:
         b7:91:fe:4f:8d:80:4b:96:6a:ea:c2:48:85:cc:80:37:a1:bf:
         86:16:44:5c:a5:55:96:e3:ef:2c:15:cd:88:7d:26:22:63:64:
         b7:23:bd:ec:ff:9a:8b:62:fd:5d:bc:b7:f7:12:40:8d:c9:34:
         37:98:2a:23:8d:53:30:5f:79:b1:ba:42:36:89:26:36:09:0b:
         f0:ba:58:d1:4c:9e:f9:3e:7a:ab:38:85:ad:2f:e8:30:48:fa:
         e7:ef:23:59:3e:5c:77:43:7e:be:41:5c:64:8a:1b:20:85:f1:
         33:b3:13:b1:52:4a:51:c8:c4:bd:bc:9e:7c:2d:f6:d4:2d:43:
         2c:30:22:19:8f:d7:11:e7:5e:96:a5:16:b7:f3:40:c7:f7:14:
         d2:ae:e2:51:85:49:0b:4d:85:29:cb:e5:82:5b:f5:ee:da:26:
         4c:fe:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:21 2025 by rpki-client