Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa
File:                     AS61112.roa (raw, json)
Hash identifier:          KreuHki1WdSdqeElRX68y+Vsdl2jKud6o2iBhW/sWFg=
Subject key identifier:   2B:26:9F:96:4C:97:81:38:A7:0B:F3:7A:48:B3:F8:4D:D0:FA:D7:7B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0AA5A54063CD70FB475AB770010B540FDDED3017
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa
Signing time:             Fri 22 Aug 2025 06:57:20 +0000
ROA not before:           Fri 22 Aug 2025 06:52:20 +0000
ROA not after:            Fri 21 Aug 2026 06:57:20 +0000
asID:                     61112
IP address blocks:        104.234.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:a5:40:63:cd:70:fb:47:5a:b7:70:01:0b:54:0f:dd:ed:30:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 22 06:52:20 2025 GMT
            Not After : Aug 21 06:57:20 2026 GMT
        Subject: CN=2B269F964C978138A70BF37A48B3F84DD0FAD77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:2c:c7:43:5d:f4:8a:fd:48:ed:9e:67:01:
                    ea:97:cb:f4:eb:79:45:5a:3c:67:18:a8:e6:81:44:
                    a4:5d:c4:2a:92:0d:0f:f9:b0:a3:dd:57:38:46:e8:
                    e6:cd:4c:c8:d9:af:7b:27:ef:f4:ca:72:5f:d6:c6:
                    72:77:ef:69:0a:9f:c7:0f:f6:47:ad:42:a8:ec:24:
                    cf:7d:f9:35:58:fc:f6:16:df:e8:8b:23:56:9e:c5:
                    af:07:9e:1e:d9:2c:91:31:43:f5:44:f8:79:67:62:
                    4a:11:02:d0:5a:dd:63:3e:88:94:f6:29:0b:a7:d0:
                    fc:eb:32:29:01:02:2f:f2:ed:93:52:7c:1a:70:c4:
                    ad:d5:bf:c4:2a:b7:99:02:89:2e:1e:48:06:cd:9f:
                    d6:52:86:a9:5e:a5:e7:84:24:86:b9:c5:cf:9c:29:
                    8c:af:d6:5e:2f:96:f1:81:d1:65:27:70:d7:c5:6c:
                    c8:42:af:94:95:32:47:b5:2f:67:3a:7c:25:e1:cd:
                    94:92:d3:6d:60:e1:2b:7d:b3:ab:2a:ef:45:0c:b9:
                    ea:7e:e3:4a:0d:c5:15:74:5b:cd:e1:ad:48:d9:0f:
                    fe:f0:19:1c:8a:f5:52:84:f1:4d:b2:56:b9:ef:37:
                    29:90:2a:b2:bb:9c:26:aa:e2:a9:66:19:7c:e3:ae:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:9F:96:4C:97:81:38:A7:0B:F3:7A:48:B3:F8:4D:D0:FA:D7:7B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:05:ec:a5:b7:7a:31:95:76:64:45:d3:48:a0:04:63:68:
         33:2d:f3:f9:e5:12:64:0d:fe:bc:b3:71:6f:ee:8f:ca:4d:1f:
         4e:35:5e:8a:84:0d:b1:b4:53:95:20:dc:13:a9:ba:19:e8:13:
         7c:7c:17:40:41:bb:e2:9a:b2:86:c9:f5:4f:e5:1c:0a:60:fd:
         08:29:23:b2:86:82:67:da:77:68:3b:b5:d4:90:b6:dc:a5:cf:
         35:31:07:f2:b9:3e:ef:61:65:d1:b8:34:ad:f7:da:f2:99:40:
         e4:f5:ee:a4:82:80:f3:9f:9c:a3:cf:a3:e7:ee:95:03:ad:5d:
         13:49:6a:ee:67:b8:65:84:03:5f:37:8c:85:53:03:93:38:db:
         12:fa:94:91:f6:82:b4:3a:a4:46:4a:b2:d3:88:e0:7e:ac:c0:
         05:00:b7:ee:d8:b1:f8:cb:66:a6:2a:e0:6b:92:b4:5d:5f:3c:
         31:81:62:d4:72:c4:8f:ec:1d:ff:f8:13:ab:e5:88:58:3a:26:
         10:25:62:fb:3a:d4:a3:d5:dd:32:12:52:e1:e0:cd:6f:f9:39:
         a1:3e:6a:fe:75:86:bb:d5:fe:ca:5c:ec:ab:41:d6:99:01:0d:
         90:c0:a7:a2:40:02:74:08:33:b4:4d:c6:0a:a5:d4:64:b1:fe:
         52:20:1e:6a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUCqWlQGPNcPtHWrdwAQtUD93tMBcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwODIyMDY1MjIwWhcNMjYwODIxMDY1NzIw
WjAzMTEwLwYDVQQDEygyQjI2OUY5NjRDOTc4MTM4QTcwQkYzN0E0OEIzRjg0REQw
RkFENzdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxMsx0Nd9Ir9
SO2eZwHql8v063lFWjxnGKjmgUSkXcQqkg0P+bCj3Vc4RujmzUzI2a97J+/0ynJf
1sZyd+9pCp/HD/ZHrUKo7CTPffk1WPz2Ft/oiyNWnsWvB54e2SyRMUP1RPh5Z2JK
EQLQWt1jPoiU9ikLp9D86zIpAQIv8u2TUnwacMSt1b/EKreZAokuHkgGzZ/WUoap
XqXnhCSGucXPnCmMr9ZeL5bxgdFlJ3DXxWzIQq+UlTJHtS9nOnwl4c2UktNtYOEr
fbOrKu9FDLnqfuNKDcUVdFvN4a1I2Q/+8BkcivVShPFNsla57zcpkCqyu5wmquKp
Zhl8466NDwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCsmn5ZMl4E4pwvzekiz+E3Q
+td7MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzYxMTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOrpMA0GCSqGSIb3DQEBCwUAA4IB
AQBcqAXspbd6MZV2ZEXTSKAEY2gzLfP55RJkDf68s3Fv7o/KTR9ONV6KhA2xtFOV
INwTqboZ6BN8fBdAQbvimrKGyfVP5RwKYP0IKSOyhoJn2ndoO7XUkLbcpc81MQfy
uT7vYWXRuDSt99rymUDk9e6kgoDzn5yjz6Pn7pUDrV0TSWruZ7hlhANfN4yFUwOT
ONsS+pSR9oK0OqRGSrLTiOB+rMAFALfu2LH4y2amKuBrkrRdXzwxgWLUcsSP7B3/
+BOr5YhYOiYQJWL7OtSj1d0yElLh4M1v+TmhPmr+dYa71f7KXOyrQdaZAQ2QwKei
QAJ0CDO0TcYKpdRksf5SIB5q
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:50:09 2025 by rpki-client