Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          jtzU0yhGg9zN/hg7yTbqfBZifO/uzhDMHCcfXs3sw00=
Subject key identifier:   35:66:3F:4E:26:3C:29:69:5A:96:F6:74:50:DA:A5:D6:9F:2C:BB:23
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       257CCC52E4F0F958CE910B75D6834F24032CC268
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
Signing time:             Tue 01 Jul 2025 15:59:25 +0000
ROA not before:           Tue 01 Jul 2025 15:54:25 +0000
ROA not after:            Tue 30 Jun 2026 15:59:25 +0000
asID:                     36530
IP address blocks:        104.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7c:cc:52:e4:f0:f9:58:ce:91:0b:75:d6:83:4f:24:03:2c:c2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  1 15:54:25 2025 GMT
            Not After : Jun 30 15:59:25 2026 GMT
        Subject: CN=35663F4E263C29695A96F67450DAA5D69F2CBB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:14:4e:4d:82:29:6b:12:8e:a9:a2:14:ba:
                    10:b5:65:20:4f:95:30:70:f4:3a:5e:70:3b:48:05:
                    bd:e2:4e:48:c2:35:6d:96:2d:01:83:69:ba:76:67:
                    7a:dd:f8:76:26:77:78:a5:69:d2:19:78:80:6a:28:
                    86:f2:94:bd:3e:22:c5:0c:3a:12:4d:6e:45:e4:eb:
                    bc:75:72:ea:46:1f:bc:f3:9c:10:e4:79:1d:b5:ab:
                    53:e9:1e:a7:43:c6:60:8a:d7:56:fd:36:4d:be:04:
                    a0:e1:23:7d:a5:d1:e2:19:ef:61:73:c5:2e:13:62:
                    c3:3d:46:87:f2:72:e9:65:08:1e:d2:3c:e9:d4:b5:
                    fe:04:83:77:98:fb:0d:71:0a:9c:2d:59:63:06:33:
                    c2:1d:c7:f7:0a:5f:46:7b:77:56:b5:fd:e7:de:91:
                    25:40:c7:50:56:0c:b0:4f:c7:2c:3c:58:7d:c5:c4:
                    d9:78:d2:5b:db:43:82:a3:e3:22:9d:9e:3f:81:e2:
                    24:bc:54:92:0d:14:b7:3f:ff:c9:67:ad:74:4d:2f:
                    29:6c:bc:db:5a:36:9d:0d:e3:32:8b:1c:a9:57:c6:
                    68:48:c1:cf:4c:48:47:a5:94:89:a8:25:ac:a0:5c:
                    7a:7e:a0:6a:bb:01:01:08:46:47:73:fe:fe:ef:e4:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:66:3F:4E:26:3C:29:69:5A:96:F6:74:50:DA:A5:D6:9F:2C:BB:23
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:24:08:f4:9a:ea:c1:84:09:08:c1:88:9f:f3:ac:87:34:5e:
         9a:29:ad:eb:4c:6d:35:f8:ce:ee:39:1f:11:e9:38:73:9b:d4:
         e8:f7:97:44:68:35:0a:57:e1:c9:b9:65:a3:63:4c:af:4f:52:
         33:24:11:fc:65:3e:c1:53:a7:a7:6f:4e:e6:65:04:0a:9a:51:
         a8:f7:04:0b:3a:6e:c1:c5:d1:08:d2:ab:66:df:7f:32:4b:4a:
         5c:53:b0:5e:f1:6c:d0:a9:a0:10:da:13:bb:74:eb:61:aa:b1:
         c3:e3:d2:f8:aa:ed:1d:27:99:49:57:43:60:ef:2e:d6:39:7d:
         2b:42:be:61:cf:fc:46:29:33:c2:03:b7:86:92:47:f7:95:22:
         a6:4a:b1:82:10:0e:78:16:8a:31:c2:2c:43:5c:fb:82:f3:79:
         df:00:fa:db:ff:cf:d5:df:3d:0b:41:92:39:86:f2:12:00:0a:
         a2:b8:fd:a8:63:d1:92:f7:d2:4f:f8:3b:e7:dc:f9:d1:eb:84:
         ea:95:f5:4e:2d:7d:04:d0:8c:a2:d0:f1:d9:b3:c5:92:af:b5:
         9b:cf:32:6d:d0:06:64:e4:62:29:41:08:05:7a:48:6c:3e:bf:
         b2:91:3d:a5:39:21:ad:b9:78:a3:56:9b:8c:67:b6:db:10:00:
         5b:02:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:57 2025 by rpki-client