Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          udYg/rJP/MwhFj/VbXKLNFXf+Rq75sc81yCNRMfBDos=
Subject key identifier:   D8:92:5B:82:71:FB:C8:C6:B6:D3:01:DA:3D:4F:27:A8:29:15:BF:46
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5C6C5B400004EE9485CC96B6E885A3C68C0EADF8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa
Signing time:             Sat 26 Jul 2025 03:29:44 +0000
ROA not before:           Sat 26 Jul 2025 03:24:44 +0000
ROA not after:            Sat 25 Jul 2026 03:29:44 +0000
asID:                     13335
IP address blocks:        104.234.63.0/24 maxlen: 24
                          104.234.65.0/24 maxlen: 24
                          104.234.189.0/24 maxlen: 24
                          104.234.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 15:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6c:5b:40:00:04:ee:94:85:cc:96:b6:e8:85:a3:c6:8c:0e:ad:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 26 03:24:44 2025 GMT
            Not After : Jul 25 03:29:44 2026 GMT
        Subject: CN=D8925B8271FBC8C6B6D301DA3D4F27A82915BF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:e8:fd:c4:2b:30:93:86:58:ae:84:84:37:
                    18:1e:05:a6:59:2b:6d:a1:0c:73:8b:e1:fd:28:20:
                    47:c5:d9:d7:b1:4c:22:04:56:44:58:90:98:fd:6f:
                    d9:01:82:81:8d:c2:ca:d2:21:1f:6d:55:99:e6:81:
                    da:00:22:ca:31:92:cb:fa:72:b9:f2:b3:8c:e5:f6:
                    89:55:30:68:0b:41:95:a7:86:11:d2:2b:05:2b:3c:
                    d7:4f:6f:d4:71:c7:9b:7a:67:d6:ef:93:22:67:da:
                    29:bd:16:62:70:f5:49:3d:dd:31:58:4d:05:78:b2:
                    27:c4:d6:f5:91:88:72:a7:62:b1:bc:87:23:90:df:
                    fc:94:15:1a:0d:04:e6:2b:32:1d:7b:bc:64:2b:85:
                    5f:e8:08:33:39:d4:24:51:41:ef:68:5b:41:ca:1b:
                    8d:43:f0:63:dc:f9:23:12:94:89:d5:bf:b9:53:59:
                    0c:97:41:7c:83:a8:e3:20:51:c1:96:9a:20:82:19:
                    03:e3:35:6a:44:bc:e0:8e:81:d0:21:c6:c4:2a:8b:
                    26:37:44:c8:de:42:f1:22:b2:bc:ad:de:aa:85:45:
                    52:b7:f5:56:a8:40:69:1e:4a:a0:b6:69:69:54:54:
                    1a:4a:b0:a0:40:63:8b:3d:4e:4d:b2:a1:9c:da:d9:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:92:5B:82:71:FB:C8:C6:B6:D3:01:DA:3D:4F:27:A8:29:15:BF:46
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.63.0/24
                  104.234.65.0/24
                  104.234.189.0/24
                  104.234.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:be:b5:98:36:5c:82:f3:40:2e:90:4a:e2:f7:ff:af:f9:b0:
         09:6c:42:7a:45:ea:67:63:10:3f:9c:a2:b7:b6:e1:f2:60:e2:
         23:70:b6:fd:02:c4:64:c1:3d:cf:69:5e:0f:6d:63:5c:68:9a:
         ca:0f:26:3e:32:a9:46:d3:9c:9c:b2:f0:10:3e:b1:58:ec:34:
         61:82:49:c0:21:3b:64:35:b7:53:01:0e:d4:1e:5a:8c:90:70:
         1a:52:d4:aa:b0:f7:ad:1c:86:22:a9:d3:83:11:28:b6:55:25:
         65:66:e7:51:a4:d0:b2:e3:f2:cc:41:e6:15:46:15:5a:32:7f:
         d3:56:51:6c:6e:a4:84:76:f5:46:69:1d:1c:b3:5c:95:29:13:
         03:b2:3d:24:8d:6b:e9:b4:7d:c8:ae:fc:2c:dd:fc:c9:0c:b2:
         53:d8:d2:29:8f:b3:ee:c8:72:de:af:11:3b:0e:8c:83:4c:ba:
         f0:32:fe:c0:93:b1:9f:0a:82:10:b5:4a:54:b5:c7:76:50:98:
         b4:01:14:5b:99:e6:2b:f9:17:2c:a0:0a:3e:ed:a2:32:5f:9c:
         72:92:8c:29:71:85:de:3e:e3:8a:d2:7f:42:84:9b:86:8f:60:
         96:73:c4:ca:ca:b0:f5:bc:8c:d8:fa:3f:16:45:b7:e0:2c:f5:
         0c:6e:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:31:43 2025 by rpki-client