Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
File:                     AS136258.roa (raw, json)
Hash identifier:          zr1WfYeuQz9Q+v7gTcLYdZQdHZMWmsaKVXSPdyHfUQI=
Subject key identifier:   30:D0:D5:44:47:14:21:38:13:A0:9A:23:A3:66:85:67:83:71:A2:88
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2FE77C5B9804CAD2D37F73A03F493172B861E284
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
Signing time:             Mon 04 Aug 2025 19:12:10 +0000
ROA not before:           Mon 04 Aug 2025 19:07:10 +0000
ROA not after:            Mon 03 Aug 2026 19:12:10 +0000
asID:                     136258
IP address blocks:        23.95.72.0/22 maxlen: 24
                          23.95.76.0/23 maxlen: 24
                          23.95.79.0/24 maxlen: 24
                          96.44.152.0/24 maxlen: 24
                          104.168.10.0/24 maxlen: 24
                          107.174.114.0/24 maxlen: 24
                          107.175.82.0/24 maxlen: 24
                          172.245.232.0/21 maxlen: 24
                          204.44.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e7:7c:5b:98:04:ca:d2:d3:7f:73:a0:3f:49:31:72:b8:61:e2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  4 19:07:10 2025 GMT
            Not After : Aug  3 19:12:10 2026 GMT
        Subject: CN=30D0D5444714213813A09A23A36685678371A288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:f5:5c:48:18:04:ad:b9:82:52:d1:18:a2:
                    8a:28:08:8a:32:53:a4:8e:56:35:9c:ee:18:b6:d9:
                    03:8a:45:65:96:c7:c3:cd:d3:81:c5:09:24:0b:53:
                    f8:42:6e:9b:67:a9:5a:f7:0b:9b:f6:35:0e:1e:39:
                    77:ae:18:3f:69:a9:c3:80:c3:97:6b:59:cc:14:3c:
                    d0:d9:9f:3e:f3:ff:01:13:16:54:b7:fe:90:b7:19:
                    b3:97:3c:70:f3:b6:85:db:fa:bc:29:a7:27:30:b2:
                    f9:1b:86:3b:f6:81:87:6c:ef:e6:7f:cf:8d:4f:e5:
                    a7:66:78:8a:7a:44:ed:50:af:e5:d7:73:21:85:5f:
                    57:2e:e2:0d:d8:1c:f6:bf:ce:c4:68:39:8b:ea:dc:
                    be:5b:67:22:59:ca:58:21:3c:7c:5c:85:8b:b1:b2:
                    6d:f2:87:46:fa:7c:de:64:8f:49:b4:86:09:db:ab:
                    57:d7:15:56:49:5a:37:cb:65:ad:e9:dc:b0:4a:11:
                    f2:1d:a1:e5:76:e2:26:d6:06:03:0c:04:24:32:18:
                    e6:dc:07:8e:ed:b4:ec:41:1d:08:98:b5:21:5c:9e:
                    af:b0:f6:83:d9:db:86:de:9d:12:3b:41:ff:ec:d7:
                    82:f9:39:c7:84:18:59:0f:45:79:85:06:59:57:2b:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D0:D5:44:47:14:21:38:13:A0:9A:23:A3:66:85:67:83:71:A2:88
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.72.0-23.95.77.255
                  23.95.79.0/24
                  96.44.152.0/24
                  104.168.10.0/24
                  107.174.114.0/24
                  107.175.82.0/24
                  172.245.232.0/21
                  204.44.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:66:58:a3:b7:fe:6e:97:7a:15:a4:4b:0a:16:8f:e9:9b:57:
         46:43:68:55:4a:a6:74:d1:9b:b8:a1:7b:02:40:8e:0a:db:c1:
         f1:82:7a:5e:99:e6:6d:83:c5:95:93:97:18:2f:8d:6d:12:16:
         67:1d:7a:6e:49:44:ea:91:68:e4:38:f7:57:ff:9a:7e:23:3f:
         52:46:8b:92:1d:38:1c:d3:bf:c3:ee:f5:94:bc:ae:70:82:ef:
         7d:05:50:43:e0:84:62:31:3f:81:bb:df:80:93:b4:29:a7:d2:
         f2:bb:04:93:dc:64:74:66:56:60:78:1d:f7:ab:2d:0c:93:64:
         49:46:b1:cc:79:fe:1f:00:e9:25:aa:da:32:26:2c:cf:8c:57:
         ae:a3:69:d6:af:07:f5:a6:40:b1:dc:c4:2b:40:e1:04:6a:b5:
         fb:86:62:a4:c7:a7:9d:e9:8d:1f:f7:1d:b8:fa:0d:a3:6a:6e:
         7b:29:a2:2e:a4:ad:e7:c7:e1:5b:e7:1a:6b:ee:97:43:cc:cb:
         70:42:87:c0:fa:f4:7e:58:66:f6:9e:9e:09:34:dc:c1:33:b6:
         a2:85:b8:14:2f:1d:14:85:89:d2:ef:7a:07:af:03:42:b6:1f:
         3a:9c:cc:62:98:7c:3f:ab:2a:87:97:3f:63:ba:cc:e2:3d:0a:
         ef:ba:ae:0a
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIUL+d8W5gEytLTf3OgP0kxcrhh4oQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA0MTkwNzEwWhcNMjYwODAzMTkxMjEw
WjAzMTEwLwYDVQQDEygzMEQwRDU0NDQ3MTQyMTM4MTNBMDlBMjNBMzY2ODU2Nzgz
NzFBMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTr1XEgYBK25
glLRGKKKKAiKMlOkjlY1nO4YttkDikVllsfDzdOBxQkkC1P4Qm6bZ6la9wub9jUO
Hjl3rhg/aanDgMOXa1nMFDzQ2Z8+8/8BExZUt/6Qtxmzlzxw87aF2/q8KacnMLL5
G4Y79oGHbO/mf8+NT+WnZniKekTtUK/l13MhhV9XLuIN2Bz2v87EaDmL6ty+W2ci
WcpYITx8XIWLsbJt8odG+nzeZI9JtIYJ26tX1xVWSVo3y2Wt6dywShHyHaHlduIm
1gYDDAQkMhjm3AeO7bTsQR0ImLUhXJ6vsPaD2duG3p0SO0H/7NeC+TnHhBhZD0V5
hQZZVyuTJQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFDDQ1URHFCE4E6CaI6NmhWeD
caKIMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzEzNjI1OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwODAMAwQDF19IAwQBF19MAwQAF19PAwQA
YCyYAwQAaKgKAwQAa65yAwQAa69SAwQDrPXoAwQAzCx3MA0GCSqGSIb3DQEBCwUA
A4IBAQDCZlijt/5ul3oVpEsKFo/pm1dGQ2hVSqZ00Zu4oXsCQI4K28HxgnpemeZt
g8WVk5cYL41tEhZnHXpuSUTqkWjkOPdX/5p+Iz9SRouSHTgc07/D7vWUvK5wgu99
BVBD4IRiMT+Bu9+Ak7Qpp9LyuwST3GR0ZlZgeB33qy0Mk2RJRrHMef4fAOklqtoy
JizPjFeuo2nWrwf1pkCx3MQrQOEEarX7hmKkx6ed6Y0f9x24+g2jam57KaIupK3n
x+Fb5xpr7pdDzMtwQofA+vR+WGb2np4JNNzBM7aihbgULx0UhYnS73oHrwNCth86
nMximHw/qyqHlz9jusziPQrvuq4K
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:40 2025 by rpki-client