Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265919.roa
File:                     AS265919.roa (raw, json)
Hash identifier:          ohpi2v38kTx+HBe7CjhySh1TqHqDKQ5BycUnznELxN4=
Subject key identifier:   42:83:94:31:5A:D5:54:64:78:FC:B9:0C:93:4F:76:01:1B:33:77:98
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1BB28A8D9430EC59C6A495904DDC3BB684E5ED63
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265919.roa
Signing time:             Sat 26 Jul 2025 03:29:44 +0000
ROA not before:           Sat 26 Jul 2025 03:24:44 +0000
ROA not after:            Sat 25 Jul 2026 03:29:44 +0000
asID:                     265919
IP address blocks:        104.234.63.0/24 maxlen: 24
                          104.234.65.0/24 maxlen: 24
                          104.234.189.0/24 maxlen: 24
                          104.234.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b2:8a:8d:94:30:ec:59:c6:a4:95:90:4d:dc:3b:b6:84:e5:ed:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 26 03:24:44 2025 GMT
            Not After : Jul 25 03:29:44 2026 GMT
        Subject: CN=428394315AD5546478FCB90C934F76011B337798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:63:2c:7f:a7:ff:b0:d7:30:0e:27:10:31:
                    96:59:70:8e:d3:d5:c7:56:db:06:e9:ef:2b:61:61:
                    12:2f:3d:d8:fa:ad:9c:1c:d7:ce:60:33:85:2b:95:
                    de:49:a7:17:b4:d3:29:e2:a3:6c:9e:43:75:e3:ce:
                    6a:50:15:6f:3d:c3:6c:88:f3:80:c3:5a:5a:58:13:
                    f2:e2:81:8d:68:ce:c1:20:39:ef:4c:e4:03:bf:97:
                    43:1a:3c:76:5a:6d:35:e9:bf:64:46:5c:af:6a:0b:
                    a9:e8:6a:7a:75:48:22:92:23:aa:0c:fe:f1:f7:36:
                    9b:90:4b:ae:1b:a0:cc:2b:84:60:f5:0b:dd:e2:0c:
                    b9:dc:67:72:21:fd:7e:69:92:84:62:1d:70:61:61:
                    6e:79:cc:c9:d7:26:04:fb:00:da:5d:9b:11:8d:4b:
                    dd:de:ee:1c:2a:9e:a5:da:8b:f4:d2:d7:45:23:a6:
                    ab:9c:78:5c:50:80:7d:1d:5c:12:5d:81:83:ec:6d:
                    27:25:90:af:e0:44:58:82:e7:79:fb:b7:05:a9:5c:
                    e0:11:32:61:a7:ed:32:8a:fc:a3:da:9f:30:00:b8:
                    f1:d9:c5:4f:4a:8f:dd:76:00:d6:05:7a:44:6f:27:
                    64:4c:e1:f1:65:3b:d2:17:49:cf:76:66:b8:34:2f:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:83:94:31:5A:D5:54:64:78:FC:B9:0C:93:4F:76:01:1B:33:77:98
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.63.0/24
                  104.234.65.0/24
                  104.234.189.0/24
                  104.234.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:14:00:13:f4:56:31:83:11:3b:2b:3f:43:60:e9:9c:2c:ba:
         fe:4b:60:d7:01:72:bf:c9:3b:3c:52:8a:58:fd:08:d9:a0:cd:
         c4:c0:05:9f:88:97:7c:c1:37:37:5e:a4:99:7f:f6:af:76:f0:
         3a:27:9a:f3:7c:85:c8:60:3d:b8:8f:85:2d:cf:fb:c6:a6:28:
         75:b4:84:f4:42:e5:14:ab:70:b6:4a:30:b3:fa:67:fb:52:7b:
         6d:93:f8:f4:13:90:9d:c6:8c:48:e1:55:e4:16:06:ad:42:74:
         fd:46:e4:fc:d0:f1:fc:60:0b:0c:5b:ec:28:80:7a:45:a3:48:
         c3:e7:ef:ab:90:9a:d0:99:4d:b2:0c:07:d9:1d:f4:6e:5e:cc:
         8c:c8:ae:bc:d8:72:a8:de:74:04:d8:40:40:57:b3:31:d7:54:
         35:59:0d:6a:55:ad:12:66:c8:20:96:cc:a2:e7:bc:11:5d:36:
         df:54:1a:27:ce:51:a4:e6:0d:f3:f5:a1:23:59:01:a1:9d:d9:
         c4:14:9e:30:ae:97:dc:4b:df:47:77:9a:73:9f:02:95:c9:ab:
         cd:ca:79:e9:d6:81:33:32:48:64:12:41:aa:28:6a:1c:95:5b:
         f1:90:5e:7c:af:f0:40:56:82:11:2e:30:18:2c:2e:0f:79:7c:
         05:d6:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:59 2025 by rpki-client