Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397282.roa
File:                     AS397282.roa (raw, json)
Hash identifier:          eJHhRcoQJqEX5fkysIVHOaSDfsPc/+SMDmsUFZEJFAo=
Subject key identifier:   34:F3:03:A8:34:1E:F2:13:FA:3B:18:4C:0C:D2:70:7B:5D:64:D1:1C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       028488E402888857AEE6B95BCDA3C6A56B902F1B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397282.roa
Signing time:             Thu 30 Oct 2025 00:46:28 +0000
ROA not before:           Thu 30 Oct 2025 00:41:28 +0000
ROA not after:            Thu 29 Oct 2026 00:46:28 +0000
asID:                     397282
IP address blocks:        104.234.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:84:88:e4:02:88:88:57:ae:e6:b9:5b:cd:a3:c6:a5:6b:90:2f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 30 00:41:28 2025 GMT
            Not After : Oct 29 00:46:28 2026 GMT
        Subject: CN=34F303A8341EF213FA3B184C0CD2707B5D64D11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:32:cb:5c:ec:37:17:9a:63:3f:c1:6f:a2:
                    f3:f8:cb:d2:01:37:ef:26:f0:b4:fe:d0:09:3b:79:
                    ae:7d:a5:41:97:73:67:38:2f:c7:a9:6a:83:2b:c4:
                    a0:ce:fe:7a:ba:8e:2f:09:30:19:ec:bc:54:a3:43:
                    79:67:d7:2f:20:d9:a5:a9:2c:f5:c5:4d:d6:56:5a:
                    7a:5a:31:28:a8:82:9b:24:74:80:fa:39:8f:7d:9b:
                    10:f4:7f:0f:49:f6:47:48:1f:dc:ed:d3:a5:00:bf:
                    1d:4b:ca:d3:fc:43:81:17:39:01:19:69:2f:4b:2e:
                    e3:8c:2c:7e:95:6b:05:2d:d4:25:3a:8f:e5:86:7d:
                    3e:a6:ba:25:fa:21:46:d9:86:b7:4b:45:07:02:92:
                    27:58:28:17:24:ec:ee:2b:3f:69:61:c6:38:5d:4d:
                    22:af:e9:08:96:b2:56:e3:6b:87:0a:e1:00:db:9d:
                    d9:0e:91:39:da:f5:18:48:82:22:82:89:18:35:d6:
                    f0:e4:1d:32:67:f2:d3:7b:6b:41:23:1d:48:99:ec:
                    17:95:5a:36:ab:fd:49:3c:f8:60:25:f5:23:df:28:
                    ab:b0:e7:74:59:e8:29:53:df:8a:6b:51:16:63:f7:
                    69:29:52:0a:77:84:5e:06:9e:7d:0a:a7:fa:b5:e6:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:03:A8:34:1E:F2:13:FA:3B:18:4C:0C:D2:70:7B:5D:64:D1:1C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397282.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:44:72:5b:75:dd:33:79:04:b5:33:20:9d:4e:9e:cf:7d:16:
         34:b1:ed:0d:0e:9e:51:b6:48:de:fc:8f:88:8c:03:06:99:89:
         0a:a2:d2:a3:d7:b0:58:55:e8:62:98:2f:41:29:36:16:86:1e:
         1d:f1:f0:cb:bf:bd:2e:d2:f0:4a:2c:ae:69:60:46:4d:ce:5a:
         8d:ec:87:76:39:bf:32:ec:9d:54:29:06:ef:a0:44:77:59:09:
         77:44:61:de:e6:48:90:0d:75:35:7b:11:ca:46:42:93:1d:37:
         e7:f0:c6:4b:9e:53:04:37:9e:25:d8:9c:6c:8e:27:43:ce:0b:
         df:56:8f:05:c4:15:78:a7:b5:c4:97:f3:f3:ae:79:a4:f6:78:
         15:b5:ab:7c:1f:da:3b:67:50:03:65:6f:d2:2b:b8:ab:b5:a1:
         d7:66:4a:d3:a6:d3:c4:8d:41:74:bf:79:e0:7d:1a:ac:0d:c4:
         19:ac:00:df:85:ec:f3:1a:44:e7:97:28:bf:0e:59:39:77:ed:
         73:d2:98:07:d7:ab:2d:9e:4c:bd:5e:08:80:98:19:80:2f:c0:
         e4:57:fa:47:b9:2f:bc:11:60:d1:60:24:ee:ba:cd:f1:d8:b9:
         83:8c:84:55:22:67:2f:31:59:a4:e7:91:32:e4:43:6e:84:fa:
         8c:66:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:01 2025 by rpki-client