Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
File:                     AS48925.roa (raw, json)
Hash identifier:          Dza8GDxsLPxHiIoaTRliySgPSZJyPIWUhX95IMTKB2A=
Subject key identifier:   54:59:BA:25:17:64:89:7F:07:7D:55:A1:D6:08:06:7C:B3:8C:44:EF
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1975B59630FD5A4588573444BD34466201D81A61
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa
Signing time:             Fri 01 Aug 2025 09:29:44 +0000
ROA not before:           Fri 01 Aug 2025 09:24:44 +0000
ROA not after:            Fri 31 Jul 2026 09:29:44 +0000
asID:                     48925
IP address blocks:        104.234.180.0/24 maxlen: 24
                          104.234.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:75:b5:96:30:fd:5a:45:88:57:34:44:bd:34:46:62:01:d8:1a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  1 09:24:44 2025 GMT
            Not After : Jul 31 09:29:44 2026 GMT
        Subject: CN=5459BA251764897F077D55A1D608067CB38C44EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:24:81:b1:83:3a:30:7e:f2:6e:7d:1f:26:
                    33:e3:06:a9:a6:5e:21:49:78:8f:79:c7:35:3f:c3:
                    a0:39:d0:a1:28:07:43:f7:54:a2:fc:93:18:07:75:
                    d2:4c:08:7e:58:5d:28:8f:94:70:76:cd:82:12:cb:
                    26:dd:3c:7c:ad:dc:19:b1:38:f9:0a:47:13:a1:ef:
                    ee:95:13:e1:3c:24:30:9e:27:4a:f4:6b:70:91:73:
                    b8:ae:d6:cd:e5:79:64:f2:65:a5:69:36:4e:94:a8:
                    60:ee:e4:e9:72:3a:cd:e2:3b:0a:6d:2b:29:83:c9:
                    6b:f0:bb:dc:a6:6d:c0:31:42:47:85:30:2f:03:6d:
                    1d:36:a5:43:b4:de:91:2f:00:63:26:3e:25:22:99:
                    71:3d:f8:8e:3c:48:3b:21:ed:54:41:05:45:ee:63:
                    24:05:49:89:6e:8d:5c:63:d8:20:2e:3d:76:66:eb:
                    05:52:bc:ea:d9:69:5b:a3:a0:a5:f5:b7:19:37:1e:
                    92:00:e2:51:ab:2a:a3:d6:0c:f8:2f:5e:75:b3:f7:
                    c2:1e:ae:4b:2b:22:aa:8c:39:ff:46:ac:85:b0:b5:
                    ee:31:fa:6f:13:da:b4:03:cc:d9:a2:df:5a:fa:5b:
                    e6:65:81:5f:2d:3b:a2:0c:cc:87:d6:1d:2f:58:10:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:59:BA:25:17:64:89:7F:07:7D:55:A1:D6:08:06:7C:B3:8C:44:EF
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS48925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.180.0/24
                  104.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:63:81:24:31:d2:82:64:8c:c0:1b:7d:53:e0:f7:e8:7e:81:
         20:8b:ac:ab:87:61:4b:4c:ee:7d:ca:e5:64:9e:96:81:b7:06:
         eb:10:d4:40:bb:51:9f:fa:7f:57:d8:c6:4f:9e:a1:89:bd:4b:
         e9:e0:f8:ff:cd:29:3d:fd:b1:94:ce:21:4a:f6:51:3d:16:b2:
         7e:62:8c:1b:f6:66:7a:2d:c5:af:eb:f0:7e:29:f2:ee:de:92:
         67:d0:a4:7e:91:4d:54:05:80:72:79:3a:2b:3a:09:07:9a:05:
         47:02:20:b9:b8:6e:db:d3:f3:dd:f2:8d:34:fe:4c:58:8c:8a:
         d2:5a:20:e4:b1:2e:c1:e0:26:ea:ae:10:aa:4c:7b:9a:2e:bb:
         e8:2f:d4:9f:21:08:2a:93:a2:e0:95:89:2b:99:8a:ed:e8:91:
         0f:ca:54:0e:45:47:73:28:c0:78:ac:be:6f:b5:fa:5c:ca:f6:
         ba:41:42:bf:69:db:8b:b7:7c:00:ec:93:eb:b6:82:00:af:93:
         41:6f:66:95:94:1c:9a:55:d3:98:bb:06:9a:cc:78:09:06:7c:
         9c:07:32:bb:d0:03:2f:47:27:f3:a2:ee:ed:3a:50:c3:9d:9c:
         4a:0d:be:c8:28:09:b5:5f:69:33:6f:b4:9b:49:cf:96:63:cf:
         d1:58:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:34 2025 by rpki-client