Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa
File:                     AS135392.roa (raw, json)
Hash identifier:          SYKg38aAk5/Z0pELTfraCf85zJ8kLSrjGZGrJTrjrOo=
Subject key identifier:   FD:93:59:AF:54:6D:3B:63:53:B9:EC:41:52:72:FB:B1:85:C3:E2:3E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       02CA27B1E215D6D4D0E7769E3F754E80B8990DAB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa
Signing time:             Fri 01 Aug 2025 21:51:05 +0000
ROA not before:           Fri 01 Aug 2025 21:46:05 +0000
ROA not after:            Fri 31 Jul 2026 21:51:05 +0000
asID:                     135392
IP address blocks:        23.94.252.0/24 maxlen: 24
                          104.223.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ca:27:b1:e2:15:d6:d4:d0:e7:76:9e:3f:75:4e:80:b8:99:0d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  1 21:46:05 2025 GMT
            Not After : Jul 31 21:51:05 2026 GMT
        Subject: CN=FD9359AF546D3B6353B9EC415272FBB185C3E23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:81:6b:3f:d6:6e:83:9f:ed:5d:1b:26:75:
                    c8:d7:ac:d9:a3:78:71:ff:59:e1:c9:82:2f:e6:ec:
                    51:a6:98:49:4b:71:5a:e7:28:a7:06:ee:3b:b8:df:
                    1f:5d:3b:0c:61:0a:bd:04:a4:3b:fe:6d:03:4e:5e:
                    33:b4:31:cf:9a:c8:80:9f:e6:1c:37:c6:8b:db:5d:
                    15:95:c9:5b:4f:15:0a:75:11:d2:a5:24:eb:c4:c9:
                    8e:46:1b:dc:65:c8:0e:55:e3:de:44:5e:d1:2c:ea:
                    13:35:3e:d3:de:8a:e1:34:54:fc:25:97:11:55:87:
                    46:0a:ae:63:d7:fd:05:bf:8e:64:4e:03:1d:f4:33:
                    b9:4b:9f:59:ba:ca:d7:20:9e:d1:a0:cb:88:59:15:
                    8b:13:94:39:29:01:ec:de:54:72:aa:1c:25:00:f5:
                    63:3f:04:52:1d:19:a8:05:8a:d0:42:21:05:ea:00:
                    3c:f7:6b:1e:98:df:37:8c:2b:6d:32:87:97:75:a9:
                    7b:25:dd:66:0b:f5:9d:8d:1e:32:15:df:22:bf:53:
                    86:55:f7:a6:88:1c:ce:2a:99:8a:5b:c3:50:fd:7b:
                    2f:e7:09:90:fa:32:10:2b:8d:28:13:eb:87:55:3f:
                    6d:02:63:0d:39:34:5f:db:af:8a:a4:77:50:d6:d2:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:93:59:AF:54:6D:3B:63:53:B9:EC:41:52:72:FB:B1:85:C3:E2:3E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.252.0/24
                  104.223.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:82:cf:d7:c3:af:bd:df:9b:ee:a1:3e:ec:8f:fd:25:25:2b:
         c9:94:ef:ed:0a:8a:05:78:0d:96:c7:80:9c:ec:0d:5d:b0:d5:
         d0:7b:b1:ca:38:b0:69:99:c8:cc:5f:3d:c6:47:2b:b0:a2:fb:
         85:f7:49:22:46:0f:7d:e6:30:f5:a8:d6:8d:90:55:7b:fa:79:
         7c:dd:50:fe:57:18:a8:39:63:bd:ee:87:e9:59:16:d8:45:7c:
         bd:73:a2:1a:89:a2:57:2a:63:26:03:ea:af:26:ab:b8:5f:5c:
         71:8f:ca:c9:fc:b9:20:e5:cd:c0:d3:f1:ec:19:0a:f9:9e:04:
         63:cc:07:c8:ae:96:31:5c:69:d7:9e:8d:95:b8:e2:25:fa:f4:
         dd:23:5b:be:3a:3a:59:2c:08:c9:bc:c3:c1:14:2e:73:14:44:
         89:44:29:33:30:ed:99:de:eb:66:6f:10:bf:f0:c8:c4:38:33:
         f4:fb:e1:8b:e8:f9:c9:fb:9c:ef:c4:a0:64:eb:77:63:e9:2c:
         b8:e1:cd:03:08:23:75:92:0c:26:95:ec:75:b9:13:f4:29:4b:
         75:6a:33:7e:da:19:8f:57:9c:a5:87:49:3e:c7:ce:f1:7b:52:
         3e:46:ed:d8:38:12:c9:f8:bd:20:ae:b3:f0:a3:62:eb:73:b3:
         d8:a2:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:24:52 2025 by rpki-client