Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147281.roa
File:                     AS147281.roa (raw, json)
Hash identifier:          XB0e9kUng6ufc/q0jgEMyA28MF9CkBJ7vBEWSzblzVU=
Subject key identifier:   01:85:C9:F6:1E:D8:64:B5:2D:4B:B7:FB:B5:3A:48:70:B3:83:42:E8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       212886B3E568645C7FA60812D389329B2D2DAD40
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147281.roa
Signing time:             Tue 20 Oct 2026 09:26:13 +0000
ROA not before:           Tue 20 Oct 2026 09:21:13 +0000
ROA not after:            Tue 19 Oct 2027 09:26:13 +0000
asID:                     147281
IP address blocks:        104.234.196.0/24 maxlen: 24
                          206.53.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:28:86:b3:e5:68:64:5c:7f:a6:08:12:d3:89:32:9b:2d:2d:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 20 09:21:13 2026 GMT
            Not After : Oct 19 09:26:13 2027 GMT
        Subject: CN=0185C9F61ED864B52D4BB7FBB53A4870B38342E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:4b:44:fa:b2:08:f7:24:1c:6c:40:f4:fc:
                    1d:80:ec:34:63:6b:dd:25:ee:d9:f2:e2:4a:a5:fb:
                    cf:c0:d0:5e:ea:b9:a0:a9:23:4c:6b:fa:2e:60:87:
                    49:04:1f:56:d6:7d:3a:9f:a8:9d:eb:fd:fc:aa:6d:
                    44:20:2e:65:48:49:4b:40:eb:ca:a6:48:60:c8:c7:
                    11:ec:b0:86:78:7f:6d:86:00:72:ff:3a:43:b7:29:
                    1a:04:37:9b:bb:84:23:a3:db:d5:d8:f1:87:62:57:
                    a1:01:c4:d6:80:b0:09:a2:ae:e2:83:e7:96:54:8d:
                    96:13:44:f6:c8:54:f3:fd:fe:18:de:24:bb:6f:a4:
                    4a:1f:df:8f:56:3b:2c:b3:e4:e1:1d:80:31:ba:ee:
                    9e:3d:17:ad:39:e0:53:b0:c0:67:c6:b4:ef:39:e7:
                    7e:e7:02:51:c5:db:cd:62:1c:5e:6d:9a:d1:6a:62:
                    1a:38:cd:71:83:06:0b:5f:d7:f1:e8:05:4e:76:58:
                    97:28:d8:8e:66:c2:e2:1b:be:78:c0:22:17:78:e2:
                    72:b5:08:97:fc:bd:d8:d7:e1:d7:2e:89:61:50:f9:
                    6f:a4:49:3b:2c:69:33:87:a8:99:6c:4f:09:7c:ee:
                    ee:56:8d:dc:ed:4f:9e:f2:df:cd:c2:25:b9:42:2a:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:85:C9:F6:1E:D8:64:B5:2D:4B:B7:FB:B5:3A:48:70:B3:83:42:E8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147281.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.196.0/24
                  206.53.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:cc:0b:43:94:73:3d:19:26:2b:47:0f:3f:5d:70:9a:70:32:
         5d:a4:5a:9e:7b:fb:e9:99:29:1d:ab:e4:34:3b:06:94:78:c6:
         a0:4c:13:34:9a:d4:9d:18:c6:67:f2:f5:08:24:75:3a:31:87:
         80:a9:dc:d7:ba:28:60:1f:54:44:63:4b:4f:3e:9f:4d:09:03:
         b1:3f:2c:05:86:7e:dc:fa:ad:f2:86:7b:d2:3e:2f:85:90:be:
         ed:9a:8a:74:3b:25:8b:f1:81:7b:b7:4c:3c:3a:08:16:88:e1:
         e8:a1:c5:cc:e2:d3:f7:ba:51:a7:55:f8:8c:d6:2c:92:46:e2:
         e5:4c:c1:37:ed:8e:7f:9c:35:dc:03:fb:5a:59:24:b8:91:b5:
         42:4d:44:9f:bf:02:f6:7c:e2:d5:01:0e:46:cc:c3:9d:c4:d0:
         3b:26:e9:fc:c9:f3:41:c3:24:a6:98:56:a6:2e:c4:38:a0:c3:
         b4:5c:02:d3:58:df:76:41:d4:1a:7b:1e:49:ae:4e:cf:70:22:
         ca:6e:f7:fb:cf:bf:cb:5f:18:e8:e4:bd:7a:28:ab:78:07:8d:
         ee:b2:2c:44:15:7a:51:f1:77:1b:ee:0b:de:de:43:ec:7c:5e:
         8e:9e:fc:9b:e9:30:71:f7:2e:e3:91:ed:74:29:df:1e:bc:9b:
         28:92:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 15:22:10 2026 by rpki-client