Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          fgYzazGfveeu05JiJKCzIMxtSKX8xcWqEqBBPt1O/sw=
Subject key identifier:   E2:C6:24:C8:EF:28:9F:A3:BA:77:4E:5F:86:14:0F:CC:C1:CE:6D:30
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2229D296990A433EC4E48A82D2D69CB6DC7B74E1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152179.roa
Signing time:             Tue 29 Sep 2026 05:55:22 +0000
ROA not before:           Tue 29 Sep 2026 05:50:22 +0000
ROA not after:            Tue 28 Sep 2027 05:55:22 +0000
asID:                     152179
IP address blocks:        104.234.207.0/24 maxlen: 24
                          104.234.229.0/24 maxlen: 24
                          206.53.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 14:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:29:d2:96:99:0a:43:3e:c4:e4:8a:82:d2:d6:9c:b6:dc:7b:74:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 29 05:50:22 2026 GMT
            Not After : Sep 28 05:55:22 2027 GMT
        Subject: CN=E2C624C8EF289FA3BA774E5F86140FCCC1CE6D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a8:6c:b4:ff:12:71:d2:7f:0d:5b:2c:f5:40:
                    fb:a8:ad:ee:34:55:13:7d:37:5b:c1:90:e6:c9:fb:
                    f7:f7:87:f2:f5:6a:10:f6:fc:91:7c:24:06:61:0e:
                    c2:c5:73:74:a0:38:e6:eb:00:a2:3a:68:9d:34:9e:
                    10:5e:36:fc:d9:37:5b:5e:86:0d:e8:7c:b8:6d:f1:
                    37:ff:4c:b4:b3:16:d7:11:52:df:d6:12:49:41:58:
                    e0:d0:37:62:4d:67:5b:39:22:d2:b1:1e:d7:46:81:
                    3d:57:ef:a2:43:87:4e:34:77:8a:da:8a:44:62:4d:
                    c9:7a:47:79:67:a8:cd:66:5e:37:1e:24:06:83:33:
                    bf:cc:0d:57:25:2b:4d:10:6f:ba:08:f3:33:77:a6:
                    1e:5f:eb:8d:fd:fb:5c:43:b5:e6:60:51:3f:b5:ad:
                    97:fe:ad:b4:d8:fd:c8:8f:51:c6:53:40:60:48:f6:
                    08:f8:1d:50:c6:bc:24:92:1b:8a:46:f0:2c:7e:ee:
                    f4:9a:b4:4a:13:ee:1b:1d:06:1c:10:aa:6e:96:1a:
                    0b:e9:f6:90:24:62:35:6b:d2:fb:07:50:9c:aa:18:
                    0b:7b:28:a6:4a:27:62:d5:d6:d6:6f:bc:1e:2c:71:
                    5d:7f:88:fe:fb:67:f1:19:2d:17:91:d1:27:83:cf:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C6:24:C8:EF:28:9F:A3:BA:77:4E:5F:86:14:0F:CC:C1:CE:6D:30
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.207.0/24
                  104.234.229.0/24
                  206.53.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:2b:27:9d:98:59:24:12:95:7b:6d:53:2e:37:21:fa:67:
         9f:d5:81:9b:fc:88:2b:d7:d5:52:fa:74:62:29:a6:16:95:3c:
         00:45:d6:59:b4:f7:e1:27:86:48:6b:f0:48:2e:67:b3:ce:35:
         b1:5c:5c:28:c6:f8:47:f3:4c:51:79:e2:be:99:b7:9e:37:25:
         df:64:a1:0a:91:db:ac:da:ba:6d:cc:3c:35:f8:4c:c3:7a:17:
         72:ba:d7:45:2f:7f:4b:7e:f2:64:6a:b3:14:04:52:12:87:f7:
         4d:e2:ec:92:23:90:b4:44:36:c3:d7:14:e2:d2:84:4e:54:bb:
         96:84:65:07:76:f5:ca:cd:5b:b4:da:80:e4:02:87:80:1b:35:
         34:4d:c5:81:ee:ca:9a:54:03:fd:0c:5f:28:d4:e2:be:6c:9f:
         ad:05:63:02:1d:02:df:4b:11:5d:c7:48:ca:a6:49:3c:67:5e:
         5e:24:68:b7:76:cc:ad:6a:c3:55:89:64:61:0d:23:55:08:f4:
         b7:a8:55:83:83:d7:a0:0b:44:8c:3f:b3:ea:85:d9:ca:e5:b1:
         73:36:b7:de:10:95:cb:67:8b:76:c9:02:84:c1:0c:23:13:ad:
         4a:01:7a:0c:42:db:6a:ca:0c:99:63:24:0c:cc:d9:ee:d3:f0:
         5e:e4:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 00:41:42 2026 by rpki-client