Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa
File:                     AS13737.roa (raw, json)
Hash identifier:          Yk8xeXV2W1oLxrp5wm0bgHdPxR/uclGYhIZ4ika9pCc=
Subject key identifier:   B6:93:16:14:40:3B:72:71:75:0F:43:DE:CC:18:30:0C:CC:24:E7:23
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5B272DB4D3E07EFADEC250F83FF2099F790630F6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa
Signing time:             Tue 15 Apr 2025 22:28:29 +0000
ROA not before:           Tue 15 Apr 2025 22:23:29 +0000
ROA not after:            Tue 14 Apr 2026 22:28:29 +0000
asID:                     13737
IP address blocks:        104.234.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 20:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:27:2d:b4:d3:e0:7e:fa:de:c2:50:f8:3f:f2:09:9f:79:06:30:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 15 22:23:29 2025 GMT
            Not After : Apr 14 22:28:29 2026 GMT
        Subject: CN=B6931614403B7271750F43DECC18300CCC24E723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:e5:ee:a4:5a:f7:2e:2d:6a:4f:75:2f:8b:
                    bb:13:af:1c:5a:12:55:06:b7:c1:23:f6:fd:7c:e7:
                    1c:2c:74:78:76:d9:be:98:52:d1:7e:03:7f:ec:4a:
                    52:23:69:40:29:47:7a:a5:82:ed:8c:89:66:84:f2:
                    7f:d3:4a:40:40:61:09:c8:9a:a4:43:87:1c:e3:20:
                    62:93:32:5b:02:d6:e3:3e:94:d5:93:fa:7f:9c:35:
                    bc:58:16:e5:88:9a:ac:51:f8:a7:d6:7a:ab:43:9a:
                    37:21:c2:b9:9e:b9:e9:fe:03:51:b5:9d:fc:e9:54:
                    0b:27:04:95:6f:6e:5d:7e:79:ea:a2:3a:88:55:c1:
                    50:81:92:d2:3b:03:16:32:d0:b9:a3:d2:54:19:0f:
                    21:d4:c8:40:a0:7d:15:87:54:c5:28:4d:2b:16:f1:
                    66:7c:71:4f:ba:31:98:a3:d1:2f:48:e0:3c:3d:ea:
                    5a:c3:bc:40:6b:89:a4:6e:39:79:be:38:e3:cf:69:
                    3a:ec:12:1b:24:a2:da:31:d2:a2:22:56:ef:b4:f0:
                    bf:21:f2:1e:33:65:28:44:f4:ea:bf:81:c8:54:31:
                    a1:11:63:de:e5:49:cd:3e:22:f2:e2:eb:6c:22:e8:
                    c2:7b:bb:55:45:c6:70:0b:42:fc:3d:89:d3:50:b1:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:93:16:14:40:3B:72:71:75:0F:43:DE:CC:18:30:0C:CC:24:E7:23
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:3e:f5:aa:a0:b1:7c:31:ef:99:2b:03:8e:40:7a:52:16:
         25:48:23:de:23:57:e5:6d:9c:aa:0d:47:c6:16:5a:2b:13:54:
         a7:9c:40:44:0d:ae:0d:4a:cf:28:61:27:68:9c:44:ef:87:11:
         33:17:8b:19:3c:b3:19:59:fd:c5:dc:42:08:0d:c4:b7:ff:52:
         1e:be:0d:29:ef:72:ed:6d:59:cb:60:00:fc:d8:7c:dd:00:77:
         57:0d:a9:49:71:9b:68:8a:4b:65:d6:0f:38:3d:bf:5b:ba:d4:
         f5:4b:e2:fb:a4:95:2b:a1:78:5e:70:81:3c:3a:19:86:e4:07:
         4a:10:87:68:d2:f7:a6:e7:99:20:c6:90:84:87:b4:80:90:16:
         6a:2b:1c:74:90:89:4e:07:0d:eb:4c:b4:da:95:90:7e:4e:d8:
         0e:35:7c:c5:65:6b:50:36:59:c7:a5:d8:f6:6d:78:e4:29:7f:
         7d:59:0d:d6:90:2b:c9:3e:5d:4c:d2:38:9b:81:71:40:a8:fc:
         67:be:f6:f3:f1:6e:ab:c1:1b:59:35:40:1d:d8:c8:bd:33:94:
         76:1c:f0:0e:01:0d:78:23:54:2c:41:a6:0b:22:1c:86:0f:54:
         a0:e5:c5:9b:05:de:9f:da:8f:8f:48:d2:7f:0d:35:09:a7:f1:
         f2:c8:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:28:08 2025 by rpki-client