Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30455.roa
File:                     AS30455.roa (raw, json)
Hash identifier:          WunuNWebcdR6LgzGPV6KGwVidEZOx0Vi00d9B5x+9Q4=
Subject key identifier:   A3:C6:0D:2A:29:11:BA:B4:2E:58:06:85:9E:66:42:8C:9A:E6:28:E3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       19F077ED06E52EDA0DE8FAD301C9919FEA2F6271
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30455.roa
Signing time:             Sat 26 Apr 2025 21:51:15 +0000
ROA not before:           Sat 26 Apr 2025 21:46:15 +0000
ROA not after:            Sat 25 Apr 2026 21:51:15 +0000
asID:                     30455
IP address blocks:        104.234.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 07:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f0:77:ed:06:e5:2e:da:0d:e8:fa:d3:01:c9:91:9f:ea:2f:62:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 26 21:46:15 2025 GMT
            Not After : Apr 25 21:51:15 2026 GMT
        Subject: CN=A3C60D2A2911BAB42E5806859E66428C9AE628E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:94:d4:fa:1c:6f:44:88:7f:4c:b0:86:56:
                    17:53:e2:e0:dd:3f:1a:d7:d4:28:c0:58:28:2a:3f:
                    b3:4b:75:e1:85:66:13:d8:fe:1b:49:24:3d:9e:49:
                    f0:6d:57:96:1f:fe:97:2f:63:61:c6:35:dd:6b:e8:
                    e8:cb:87:3b:ea:7e:da:09:64:0f:a2:4e:68:ad:98:
                    04:f6:94:a3:94:4e:0b:26:d1:63:18:4d:d6:ad:88:
                    86:35:bc:e6:60:24:f1:2f:e9:20:30:1a:cf:55:d8:
                    0e:68:44:5f:de:f7:bc:c8:94:10:36:25:78:38:3e:
                    88:b3:f8:c1:d5:44:5a:7e:d7:87:ce:25:1c:a8:ae:
                    9b:c2:67:4b:4e:d9:b1:4e:0d:d4:97:d8:ab:fa:35:
                    13:28:9b:cc:34:e6:ef:ab:cf:b7:cb:ec:9e:96:ab:
                    36:23:2f:96:64:a5:73:60:db:6c:6a:69:7c:ae:94:
                    5c:87:d9:f9:56:1f:04:23:8d:30:6d:78:55:c6:43:
                    40:38:71:6d:f4:ec:23:14:ac:99:6b:79:56:d5:8c:
                    44:96:33:94:ea:63:81:f0:4f:4e:20:af:52:40:b5:
                    a6:4f:45:47:e8:2c:92:1c:5d:dc:56:0b:3c:bd:ab:
                    73:a2:8b:ac:ad:62:cd:b2:9c:2c:03:b9:27:ba:c3:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:0D:2A:29:11:BA:B4:2E:58:06:85:9E:66:42:8C:9A:E6:28:E3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS30455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c3:22:34:1e:c7:18:4f:80:6c:cb:69:d6:8f:47:fb:7b:76:
         4b:c7:fa:29:c2:73:08:78:a9:f4:d9:86:a6:cd:71:eb:36:d5:
         c7:19:24:6d:c8:0b:4e:54:1b:23:13:9d:6d:03:a3:b2:ad:9f:
         4b:ca:4b:0d:72:df:34:00:7c:b9:36:8a:ed:d1:47:3a:96:fe:
         ae:03:45:02:08:8d:33:2f:56:5e:c5:f6:38:97:01:f2:64:6c:
         c7:b0:ab:91:dc:29:f9:a4:dc:b1:81:2a:94:53:d6:f5:06:ba:
         9d:67:12:83:da:dc:f3:fe:51:9d:bd:57:0b:d8:f5:93:24:5c:
         30:bd:f6:e7:0a:ce:56:59:e0:e8:b5:a3:51:6b:a8:1b:ad:86:
         a2:23:e9:a6:b0:ca:5b:7f:38:46:e1:2f:7a:7c:1d:a8:db:80:
         20:d6:97:ff:0e:5e:6b:b4:8e:b5:ee:18:9a:ab:92:a5:ec:26:
         9c:7d:dd:64:3b:bf:4b:ff:69:6e:5c:6e:0f:2f:4e:c1:3d:b6:
         22:e6:ab:2f:85:b4:ca:08:3b:e8:11:65:6b:60:e7:65:d4:2f:
         70:ec:1e:8b:f5:1c:b2:40:db:d2:23:96:6c:33:8f:ce:41:f8:
         61:57:d7:e9:9d:a6:9a:b2:87:6a:9f:b0:b2:98:e3:18:8a:ca:
         a0:1f:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:18:38 2025 by rpki-client