Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS62904.roa
File:                     AS62904.roa (raw, json)
Hash identifier:          IVtX/0Di/qRl/0DHqjJ72PaN19TbQDO6ssThbtRBBnI=
Subject key identifier:   CF:B2:6A:8E:E3:91:B9:8F:66:4E:64:E6:D7:8E:FC:44:F3:89:42:80
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       38A2D9B327C1B7FEADE09C07C85EAE9236E6E7B2
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS62904.roa
Signing time:             Sat 18 Oct 2025 06:30:39 +0000
ROA not before:           Sat 18 Oct 2025 06:25:39 +0000
ROA not after:            Sat 17 Oct 2026 06:30:39 +0000
asID:                     62904
IP address blocks:        216.246.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a2:d9:b3:27:c1:b7:fe:ad:e0:9c:07:c8:5e:ae:92:36:e6:e7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 18 06:25:39 2025 GMT
            Not After : Oct 17 06:30:39 2026 GMT
        Subject: CN=CFB26A8EE391B98F664E64E6D78EFC44F3894280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:c9:cd:54:c2:94:aa:72:42:b7:f4:77:10:
                    94:ad:5c:a5:37:f4:8c:f0:4b:39:0c:01:33:be:2c:
                    29:fb:04:b7:5e:46:3b:03:e8:13:54:3d:89:5d:14:
                    28:c0:65:60:12:cc:4b:56:9d:a7:13:24:80:c1:17:
                    0f:e7:9c:8c:9f:81:be:a2:fa:4d:d2:53:95:ea:e6:
                    f4:d7:2e:18:f0:b9:1b:be:59:2e:34:40:d4:a8:6c:
                    9b:6a:a5:43:b1:56:ed:97:27:0f:81:ea:7a:f2:0b:
                    99:e0:ea:6a:b0:bd:28:78:9a:46:55:1e:7c:6f:79:
                    9d:d9:4c:ec:9f:98:0f:15:76:97:d5:28:11:cb:40:
                    7f:0c:93:24:fa:bb:6f:0d:97:29:34:22:8a:7a:b4:
                    2f:7c:0c:ac:a7:ad:d7:25:b6:45:2a:64:c0:01:d3:
                    62:6a:db:c6:0c:31:54:b0:58:2e:ed:da:68:31:84:
                    54:af:16:5f:44:68:32:c3:db:76:a2:9d:da:d2:29:
                    fe:e3:32:50:9a:a2:90:f4:1c:a7:f7:65:6a:7a:93:
                    8e:76:93:a6:dd:78:60:6e:b3:93:bd:14:fb:5f:4f:
                    8f:e9:50:fc:22:de:0b:a9:20:05:4d:24:c2:f5:cd:
                    45:a8:fa:45:b8:54:f3:7e:4a:c8:6d:27:67:1d:4c:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:6A:8E:E3:91:B9:8F:66:4E:64:E6:D7:8E:FC:44:F3:89:42:80
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS62904.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:24:2c:4a:01:cc:f4:94:f3:cf:22:cf:88:43:ba:9d:86:
         4a:e4:27:2c:e0:9c:6f:06:c5:d3:d4:9c:11:41:ee:44:55:09:
         01:ec:94:cf:6e:b2:15:52:91:26:46:01:f7:b9:3e:6d:93:bb:
         8c:4a:37:28:62:14:8f:4e:0f:bf:dd:ed:e7:e3:3b:8e:57:9d:
         61:8e:bd:7f:c6:84:69:6d:82:a1:df:e1:7e:16:e7:f2:48:ed:
         89:cf:94:5f:8e:bc:6d:67:0d:ac:d3:8b:db:1e:49:c8:90:25:
         10:43:23:a6:15:6b:eb:a9:3d:92:22:df:b6:3d:86:5b:11:42:
         19:b5:cf:07:2d:a8:25:0d:bc:81:75:2b:41:bb:59:57:25:45:
         18:5c:dd:c3:ae:4e:49:85:bb:67:18:b3:96:88:3d:71:ca:74:
         a7:da:b3:45:46:d0:14:36:26:64:24:34:ad:7d:84:16:04:5f:
         cf:63:9b:78:45:70:2f:ae:d5:b6:bd:3d:0a:d9:24:8a:bc:4b:
         6f:22:c2:ca:f3:f2:de:84:e9:04:ce:c0:0e:25:87:65:b5:5c:
         82:0e:30:f8:55:c1:ab:e9:aa:53:a9:54:f8:38:19:83:2b:22:
         10:36:63:1e:14:d2:3d:53:66:61:f6:48:9a:12:48:3b:f6:e9:
         b8:c9:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:29 2025 by rpki-client