Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214693.roa
File:                     AS214693.roa (raw, json)
Hash identifier:          skPOUagOYCUSFcEJAOZZaDUxjLSnW6vEGNcJhEfyXWs=
Subject key identifier:   74:04:DA:16:6F:5C:B3:CD:F8:66:27:12:B6:BB:A6:03:40:C0:C7:F0
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6BB9C82BA3A5C5CCD57B19ECEFDE853023B1BADF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214693.roa
Signing time:             Thu 01 Oct 2026 23:36:20 +0000
ROA not before:           Thu 01 Oct 2026 23:31:20 +0000
ROA not after:            Thu 30 Sep 2027 23:36:20 +0000
asID:                     214693
IP address blocks:        104.234.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b9:c8:2b:a3:a5:c5:cc:d5:7b:19:ec:ef:de:85:30:23:b1:ba:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  1 23:31:20 2026 GMT
            Not After : Sep 30 23:36:20 2027 GMT
        Subject: CN=7404DA166F5CB3CDF8662712B6BBA60340C0C7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:14:70:bf:20:59:8c:77:f2:db:f6:8c:03:
                    f4:99:57:ef:02:02:8b:ba:bf:cb:39:3b:9d:95:c2:
                    97:36:2a:3e:bd:da:db:a4:e5:76:38:ce:d9:63:40:
                    94:ae:09:53:91:76:68:86:e7:cf:f0:64:6c:e5:54:
                    07:fa:74:5f:b6:b4:61:3e:2d:b4:1a:c0:b9:84:ea:
                    93:5b:62:9c:9f:d2:b6:a9:b9:86:21:15:7e:de:f7:
                    de:9e:2f:3b:d3:a7:ef:64:2f:6e:64:6a:e7:c2:1a:
                    84:7a:9b:0a:39:37:32:2b:ab:95:a1:ec:c1:4d:e4:
                    ef:8c:5e:52:e7:8c:b1:ec:a9:38:bb:57:ad:9a:86:
                    23:9b:24:9f:c3:e0:f6:32:34:b4:2e:c3:e8:12:02:
                    bc:38:a0:c8:38:e4:c6:b6:0f:73:cf:d4:ce:f6:23:
                    bd:ff:07:49:2e:c5:88:21:92:58:6f:40:b0:b1:d8:
                    b5:c4:f5:84:39:df:05:5e:86:37:c7:11:d6:e8:5c:
                    5c:58:46:3a:40:3a:0e:24:02:b5:51:8f:d8:ea:5a:
                    e4:d3:62:7a:90:d5:87:ae:32:27:73:16:53:52:4c:
                    c9:ee:70:7f:76:86:a8:4e:6e:da:fb:e5:f2:78:2a:
                    48:5d:90:01:f9:9b:d8:53:1e:01:28:3e:5f:19:20:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:04:DA:16:6F:5C:B3:CD:F8:66:27:12:B6:BB:A6:03:40:C0:C7:F0
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:a2:50:29:b7:3f:11:fc:32:e6:92:32:63:f5:23:8b:56:
         37:76:9c:8e:dc:4f:72:2e:37:25:ad:3a:d4:f6:e4:0d:c4:71:
         e9:a8:29:8b:03:ac:62:3a:ab:5e:a9:56:04:bc:8a:0d:2e:0e:
         e4:46:45:7b:d9:cd:b1:39:f5:83:c0:e2:d9:f9:3f:e9:57:71:
         ee:0c:92:cc:a1:a0:bb:3c:72:aa:4c:69:09:90:be:5e:54:92:
         a4:59:09:11:1e:a4:a3:01:85:12:15:b4:57:33:f0:b3:db:1c:
         68:54:ca:e6:10:7e:f6:ad:87:55:dd:04:a1:16:d5:5b:4a:71:
         07:b7:d8:f3:e3:86:d0:ef:16:86:78:0f:b0:d0:cf:b2:17:22:
         a2:13:ab:8d:ed:76:d9:c1:36:15:71:97:3d:0a:e5:e7:65:26:
         c5:80:98:be:25:17:4a:f6:d1:89:4f:d6:8d:97:22:6d:f5:2c:
         e6:0a:a4:78:00:f3:c9:b6:09:13:1b:91:78:32:ab:a9:d1:ee:
         3e:f2:9c:70:7c:a1:17:e3:bc:eb:96:7e:b8:10:bb:f1:23:83:
         a0:64:86:5b:48:e4:f1:8f:2f:09:7a:cc:66:03:72:a7:75:20:
         a5:b2:ea:41:7b:d9:e6:08:4b:f7:1c:ec:01:0f:be:f0:15:61:
         6c:bb:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:53:44 2026 by rpki-client