Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47813.roa
File:                     AS47813.roa (raw, json)
Hash identifier:          SqKV9lE7WG0BdbO/gNoqH0TumSRIDPmLtTwpbWwzuUo=
Subject key identifier:   D9:32:B0:29:7E:FE:11:A2:E3:3E:D5:AD:52:13:48:75:80:D1:05:D3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4D0D9B8EF6A1E52AD4815AD1FF12B26FD3D06535
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47813.roa
Signing time:             Mon 01 Sep 2025 14:29:45 +0000
ROA not before:           Mon 01 Sep 2025 14:24:45 +0000
ROA not after:            Mon 31 Aug 2026 14:29:45 +0000
asID:                     47813
IP address blocks:        104.234.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:9b:8e:f6:a1:e5:2a:d4:81:5a:d1:ff:12:b2:6f:d3:d0:65:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  1 14:24:45 2025 GMT
            Not After : Aug 31 14:29:45 2026 GMT
        Subject: CN=D932B0297EFE11A2E33ED5AD5213487580D105D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:c8:25:22:b4:6f:15:77:d5:69:a8:fe:e4:
                    ad:8d:e6:20:a0:ed:da:44:71:63:c5:6a:87:83:c4:
                    46:fa:00:9c:80:5c:a9:5c:f0:7e:f0:b2:5f:0f:90:
                    63:dd:0a:73:b2:ac:e8:46:79:ca:d4:dd:48:77:e6:
                    14:fd:b8:4c:2a:36:da:4b:25:d5:b7:54:e5:c2:34:
                    b9:ce:c7:02:f1:ed:c9:0c:a4:64:c0:21:60:c2:08:
                    e3:64:fb:d6:54:6f:d9:ce:37:74:73:ae:0c:0a:3a:
                    cd:d9:47:6e:69:1a:24:2e:e7:53:3b:eb:1b:4b:62:
                    f0:b5:1d:32:63:17:35:d3:4f:f1:df:12:37:f8:a5:
                    9f:63:92:a4:be:13:0a:64:22:0a:b4:a0:b5:fb:65:
                    0c:f7:09:cd:a8:78:9d:dd:07:e9:2f:a2:af:3f:b0:
                    15:d1:5d:1a:4c:fc:22:c6:59:19:f4:17:39:7f:6a:
                    10:75:b8:e4:ce:57:a4:d1:a7:8e:4a:87:19:a4:6f:
                    70:a0:4a:57:48:1b:03:03:69:b7:a3:31:a2:7b:43:
                    8d:e9:32:28:dc:a1:14:f0:44:b0:ee:dc:a4:1d:47:
                    61:3b:85:99:74:b0:27:0b:bc:93:c5:1d:b6:3d:fa:
                    9c:e0:b2:99:60:95:78:5a:0f:81:02:ea:6c:79:df:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:32:B0:29:7E:FE:11:A2:E3:3E:D5:AD:52:13:48:75:80:D1:05:D3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c4:3b:d8:ac:e9:aa:0b:6a:b0:d7:d5:2c:40:e2:30:00:02:
         b0:dc:28:a1:62:a7:0e:22:fd:ad:02:a5:b6:b7:96:60:90:0b:
         6a:87:59:62:41:33:46:5d:97:71:04:55:a9:a6:ac:ce:aa:1c:
         17:6d:cb:27:cd:ce:20:18:23:0c:94:e4:24:9a:98:5e:c3:05:
         6f:b6:d9:77:2d:94:43:8d:8d:44:da:53:c7:e1:7e:0e:b3:43:
         41:f7:44:56:d9:36:7d:fc:de:12:c4:a8:75:72:26:74:7f:eb:
         b4:9a:f0:da:c0:22:d9:e0:8d:e3:42:66:6a:94:5c:52:86:1e:
         4a:bb:41:34:29:76:1d:b8:ae:09:20:40:2e:54:fd:07:8c:67:
         04:fc:0e:b1:3d:f0:0b:95:fa:0f:1e:d2:7f:79:ac:6a:5a:23:
         58:92:7f:2d:9d:db:c5:0e:1f:cb:bd:b7:76:b9:42:60:88:ff:
         95:c6:15:f1:84:33:e3:44:7c:ce:f1:22:14:e9:fc:cd:1d:d4:
         78:57:32:af:4d:7d:57:af:05:a3:a0:d5:63:07:37:a0:27:63:
         f0:6c:eb:73:75:99:13:f9:8f:a9:61:51:aa:c2:82:d7:15:31:
         2a:64:d4:20:49:5b:63:64:51:61:e6:01:91:00:0d:e7:d5:06:
         09:4e:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:19 2025 by rpki-client