Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53340.roa
File:                     AS53340.roa (raw, json)
Hash identifier:          5N/cTZHpaozibgcZDpvpnJcmSOM3KhIQCqUrZIgpT7Q=
Subject key identifier:   26:16:AA:68:9F:51:9F:69:4C:5F:9F:CF:4A:BA:62:B8:D1:C5:09:5C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1BFC1B29CBA3ED3BCD4BB8181B5B62C57F6AD6E0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53340.roa
Signing time:             Tue 28 Oct 2025 19:30:39 +0000
ROA not before:           Tue 28 Oct 2025 19:25:39 +0000
ROA not after:            Tue 27 Oct 2026 19:30:39 +0000
asID:                     53340
IP address blocks:        104.234.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fc:1b:29:cb:a3:ed:3b:cd:4b:b8:18:1b:5b:62:c5:7f:6a:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 28 19:25:39 2025 GMT
            Not After : Oct 27 19:30:39 2026 GMT
        Subject: CN=2616AA689F519F694C5F9FCF4ABA62B8D1C5095C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:9d:02:6a:05:35:8e:3c:cf:94:17:6b:61:
                    72:08:33:1b:ea:f2:db:b0:a2:64:bd:93:17:97:1b:
                    e3:51:13:7f:cc:fd:03:33:1d:54:5b:35:37:6d:b2:
                    a6:c7:80:63:65:5b:d1:e0:b7:ed:5c:43:45:0e:2e:
                    e7:f8:f1:26:8d:a4:b0:5e:5d:51:ba:4c:0c:24:ff:
                    1f:77:94:7c:d3:08:87:44:3c:08:78:52:9f:91:ec:
                    74:aa:0a:4a:c5:2e:fe:70:e6:cf:b5:48:e1:d0:5c:
                    d8:51:ae:69:ec:b5:9e:33:6a:b5:37:58:db:a6:98:
                    eb:9e:21:38:d9:3e:1b:15:ea:b6:1c:c1:80:0d:81:
                    18:aa:4c:07:ae:30:03:dc:20:80:86:7c:61:8e:ee:
                    45:37:2f:9c:67:fc:aa:78:77:d2:4c:d2:80:1a:39:
                    9c:8b:93:1c:95:aa:c8:71:35:86:d8:9e:3d:37:1e:
                    93:2e:52:ad:f0:16:f8:33:03:fa:f9:3f:91:c4:ce:
                    ae:e2:db:b5:cc:fe:ac:66:aa:41:36:e2:3d:2f:9a:
                    0c:c0:a4:31:ab:9b:21:92:8d:bc:b0:97:25:a1:9c:
                    38:36:c6:6b:9e:7a:80:4a:ac:72:b2:be:e4:3a:b0:
                    ee:48:18:11:e9:b8:f4:76:ab:7a:8d:ca:58:8a:87:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:16:AA:68:9F:51:9F:69:4C:5F:9F:CF:4A:BA:62:B8:D1:C5:09:5C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:87:62:86:98:dd:19:61:1a:7e:39:42:fc:56:5b:fe:a2:
         98:e9:8e:66:3f:c8:04:99:9f:6a:b4:91:f6:42:d9:da:0b:ec:
         2a:7c:d0:5a:a6:1d:38:60:80:25:ac:7f:78:a2:ee:9a:95:79:
         d3:93:8f:de:ae:54:83:2c:f2:55:d8:ef:9b:27:56:6e:c2:96:
         fc:cc:00:8c:07:75:4c:c5:14:14:a0:12:f3:8d:5c:bf:ec:20:
         b4:9b:b3:27:dc:b6:62:46:a4:b2:96:b9:1c:ec:56:7a:3e:a9:
         08:f1:70:68:65:10:59:48:00:d0:90:08:3e:fe:6a:2f:1f:3c:
         47:42:14:55:19:db:bd:07:fb:4f:8f:9d:34:70:54:04:71:8d:
         dd:39:7a:b5:c9:f3:cf:eb:57:33:1b:2f:f6:d0:8a:08:2a:d9:
         3f:34:65:d2:61:70:ac:08:d5:e7:64:00:ac:da:27:82:84:61:
         70:16:94:bc:97:5a:8b:ed:6e:20:25:56:d8:3e:00:51:c4:54:
         af:71:83:3f:02:f5:3f:8c:2d:31:fd:d4:78:a2:09:3b:b4:09:
         84:db:42:b2:20:7d:fc:35:6c:bd:60:64:c3:bd:75:a2:53:a5:
         0d:36:c8:c9:6d:5b:f2:ad:bf:db:14:01:07:6b:49:24:85:fd:
         c6:37:4d:a7
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUG/wbKcuj7TvNS7gYG1tixX9q1uAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDI4MTkyNTM5WhcNMjYxMDI3MTkzMDM5
WjAzMTEwLwYDVQQDEygyNjE2QUE2ODlGNTE5RjY5NEM1RjlGQ0Y0QUJBNjJCOEQx
QzUwOTVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxROdAmoFNY48
z5QXa2FyCDMb6vLbsKJkvZMXlxvjURN/zP0DMx1UWzU3bbKmx4BjZVvR4LftXENF
Di7n+PEmjaSwXl1RukwMJP8fd5R80wiHRDwIeFKfkex0qgpKxS7+cObPtUjh0FzY
Ua5p7LWeM2q1N1jbppjrniE42T4bFeq2HMGADYEYqkwHrjAD3CCAhnxhju5FNy+c
Z/yqeHfSTNKAGjmci5MclarIcTWG2J49Nx6TLlKt8Bb4MwP6+T+RxM6u4tu1zP6s
ZqpBNuI9L5oMwKQxq5shko28sJcloZw4NsZrnnqASqxysr7kOrDuSBgR6bj0dqt6
jcpYiofpwQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCYWqmifUZ9pTF+fz0q6YrjR
xQlcMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzUzMzQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOp7MA0GCSqGSIb3DQEBCwUAA4IB
AQAOcIdihpjdGWEafjlC/FZb/qKY6Y5mP8gEmZ9qtJH2QtnaC+wqfNBaph04YIAl
rH94ou6alXnTk4/erlSDLPJV2O+bJ1Zuwpb8zACMB3VMxRQUoBLzjVy/7CC0m7Mn
3LZiRqSylrkc7FZ6PqkI8XBoZRBZSADQkAg+/movHzxHQhRVGdu9B/tPj500cFQE
cY3dOXq1yfPP61czGy/20IoIKtk/NGXSYXCsCNXnZACs2ieChGFwFpS8l1qL7W4g
JVbYPgBRxFSvcYM/AvU/jC0x/dR4ogk7tAmE20KyIH38NWy9YGTDvXWiU6UNNsjJ
bVvyrb/bFAEHa0kkhf3GN02n
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:23:47 2025 by rpki-client