Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396982.roa
File:                     AS396982.roa (raw, json)
Hash identifier:          H9ZQidCAv2+FieOgwxelBUkOpx2XZxFkDcFw9UokRj0=
Subject key identifier:   50:75:D6:48:84:23:24:1F:7E:FC:40:28:84:66:3C:22:69:C5:7B:DE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       30ACF222235AC34100C02366F23F99CD21A98A10
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396982.roa
Signing time:             Fri 16 Oct 2026 17:08:30 +0000
ROA not before:           Fri 16 Oct 2026 17:03:30 +0000
ROA not after:            Fri 15 Oct 2027 17:08:30 +0000
asID:                     396982
IP address blocks:        104.234.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ac:f2:22:23:5a:c3:41:00:c0:23:66:f2:3f:99:cd:21:a9:8a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 16 17:03:30 2026 GMT
            Not After : Oct 15 17:08:30 2027 GMT
        Subject: CN=5075D6488423241F7EFC402884663C2269C57BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:66:4c:02:8c:4a:cc:e7:7d:85:f2:f1:0d:
                    a8:8f:34:0e:26:56:4c:e9:50:af:3d:24:62:e1:73:
                    bc:5d:cf:f1:8a:ac:78:57:d0:01:75:a3:64:d9:24:
                    ad:cc:93:25:b5:e2:be:c2:19:c2:8a:ba:6a:46:57:
                    23:4a:0a:10:8a:24:08:2f:44:cd:db:20:1a:ff:88:
                    c3:65:88:10:c6:3b:de:3c:7c:a0:e7:9a:bb:9a:64:
                    fb:d4:5e:fe:d8:4d:57:c1:44:85:6e:04:94:91:7e:
                    62:09:f4:bb:af:a7:60:61:b4:f0:7e:e1:7f:55:7b:
                    a3:66:9f:20:c5:3f:b2:6b:d8:12:d9:65:7a:ff:42:
                    a4:05:0d:21:ae:36:72:6f:36:4a:7b:5e:08:cb:8f:
                    20:e5:40:14:06:ab:dd:b7:36:94:8c:13:91:5b:23:
                    65:b5:5d:26:7d:a0:24:ec:0c:d3:a2:f1:f0:51:0a:
                    70:b1:5f:4b:5b:94:35:4d:07:c4:17:12:e3:43:72:
                    f4:04:88:a7:bd:9a:da:d1:a9:c6:09:59:e9:77:7b:
                    ea:72:80:98:a4:92:67:5f:b3:6d:dd:0b:6c:5c:5a:
                    39:32:8e:9e:e8:9d:26:38:a8:c3:a0:7e:9d:67:84:
                    49:a8:5c:df:d0:0a:0f:a5:24:48:3f:4b:9a:96:77:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:D6:48:84:23:24:1F:7E:FC:40:28:84:66:3C:22:69:C5:7B:DE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:bf:9a:e7:5f:36:1f:34:59:38:f3:37:4e:80:74:17:1a:
         31:e3:de:42:a4:ec:e0:9c:91:df:22:31:14:5b:34:a5:fb:70:
         72:d7:cf:82:6b:60:6e:11:1e:b1:a5:9e:39:6d:3f:09:46:13:
         1e:87:b0:61:9f:7c:b0:2d:24:58:0a:f5:bf:63:20:26:17:06:
         3f:c8:86:61:ff:a1:6f:b6:0d:48:8a:2b:37:bd:26:04:01:ac:
         9a:5f:25:22:81:87:07:f3:51:49:1b:de:81:24:ae:00:39:15:
         8b:34:b7:8e:82:5a:f6:47:e3:76:8d:95:ac:6d:0d:c4:b8:b2:
         4e:cd:8f:9e:94:06:bb:ca:ca:f5:f8:d7:92:c2:11:80:f3:32:
         ed:49:0d:39:39:cb:31:f9:5d:40:d7:1b:28:09:c0:f4:72:df:
         c5:d4:6e:30:52:b9:49:8a:ee:40:83:07:a0:5f:5b:45:de:47:
         63:ba:5d:d7:3c:74:9d:50:8c:e7:e1:08:4c:92:16:69:10:73:
         ce:12:f6:02:61:37:ca:75:04:5e:67:cf:b9:73:31:6b:90:d9:
         eb:0a:17:5f:3e:82:89:92:d4:46:76:6c:5b:2c:65:96:3e:27:
         2f:1b:ef:be:76:af:a6:d6:3d:0e:d4:c2:a8:40:47:88:79:f8:
         54:25:6b:d6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUMKzyIiNaw0EAwCNm8j+ZzSGpihAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDE2MTcwMzMwWhcNMjcxMDE1MTcwODMw
WjAzMTEwLwYDVQQDEyg1MDc1RDY0ODg0MjMyNDFGN0VGQzQwMjg4NDY2M0MyMjY5
QzU3QkRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgxmTAKMSszn
fYXy8Q2ojzQOJlZM6VCvPSRi4XO8Xc/xiqx4V9ABdaNk2SStzJMlteK+whnCirpq
RlcjSgoQiiQIL0TN2yAa/4jDZYgQxjvePHyg55q7mmT71F7+2E1XwUSFbgSUkX5i
CfS7r6dgYbTwfuF/VXujZp8gxT+ya9gS2WV6/0KkBQ0hrjZybzZKe14Iy48g5UAU
BqvdtzaUjBORWyNltV0mfaAk7AzTovHwUQpwsV9LW5Q1TQfEFxLjQ3L0BIinvZra
0anGCVnpd3vqcoCYpJJnX7Nt3QtsXFo5Mo6e6J0mOKjDoH6dZ4RJqFzf0AoPpSRI
P0ualnc65wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFB11kiEIyQffvxAKIRmPCJp
xXveMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5Njk4Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqNjANBgkqhkiG9w0BAQsFAAOC
AQEAnHq/mudfNh80WTjzN06AdBcaMePeQqTs4JyR3yIxFFs0pftwctfPgmtgbhEe
saWeOW0/CUYTHoewYZ98sC0kWAr1v2MgJhcGP8iGYf+hb7YNSIorN70mBAGsml8l
IoGHB/NRSRvegSSuADkVizS3joJa9kfjdo2VrG0NxLiyTs2PnpQGu8rK9fjXksIR
gPMy7UkNOTnLMfldQNcbKAnA9HLfxdRuMFK5SYruQIMHoF9bRd5HY7pd1zx0nVCM
5+EITJIWaRBzzhL2AmE3ynUEXmfPuXMxa5DZ6woXXz6CiZLURnZsWyxllj4nLxvv
vnavptY9DtTCqEBHiHn4VCVr1g==
-----END CERTIFICATE-----
Generated at Tue Oct 20 14:41:28 2026 by rpki-client