Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401081.roa
File:                     AS401081.roa (raw, json)
Hash identifier:          +/7hDpcgYLp15A2GkgKTMp+wSPrmHvBGfIOxS/37QIc=
Subject key identifier:   8C:64:52:0C:8A:CD:53:A4:44:E3:3B:99:68:ED:D5:E4:99:96:B9:1E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0FEBD37A4B34AE71A91715357C32C50F50CA9CD0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401081.roa
Signing time:             Wed 07 Oct 2026 07:36:20 +0000
ROA not before:           Wed 07 Oct 2026 07:31:20 +0000
ROA not after:            Wed 06 Oct 2027 07:36:20 +0000
asID:                     401081
IP address blocks:        104.234.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 16:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:eb:d3:7a:4b:34:ae:71:a9:17:15:35:7c:32:c5:0f:50:ca:9c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  7 07:31:20 2026 GMT
            Not After : Oct  6 07:36:20 2027 GMT
        Subject: CN=8C64520C8ACD53A444E33B9968EDD5E49996B91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:00:da:c7:b2:65:f4:4e:eb:03:78:90:6b:
                    c0:e6:0a:76:18:f2:e9:67:80:fe:bf:11:de:fe:1a:
                    07:2e:f4:0f:ab:9b:d0:b9:d0:73:1f:ab:28:10:60:
                    4e:cf:8f:30:31:27:93:65:b9:1e:6e:b3:cd:aa:49:
                    3a:44:9c:c8:0b:d8:08:8c:f7:79:b7:63:ab:ef:90:
                    8e:18:99:ad:e3:7d:b2:e0:34:9a:72:ce:74:07:b8:
                    39:42:e7:a0:7f:e8:54:ff:a4:58:ff:5e:8a:c9:f6:
                    51:cd:39:2a:19:4e:f6:7d:d7:1a:7a:3e:bc:0e:ec:
                    f3:ea:80:80:51:e3:bb:0a:2b:72:68:42:51:f3:8c:
                    5d:53:7b:60:ee:cb:67:5c:f6:b4:d1:a5:73:fe:6b:
                    66:7d:39:ff:40:85:bc:2d:c2:31:f7:66:46:37:93:
                    6f:59:d9:f8:fb:b0:d4:df:27:22:ba:49:81:50:8e:
                    8a:d8:85:9d:27:9d:6a:08:a3:f1:55:69:02:72:ac:
                    a8:3f:0a:64:a9:d5:9c:99:6d:5e:a8:96:e6:4d:64:
                    02:47:6f:60:7a:5a:76:57:41:bf:90:f4:6f:f2:55:
                    4b:7c:b1:1c:57:4c:1a:4c:57:80:72:5a:a3:66:83:
                    99:55:8c:3d:1e:68:bb:6f:c4:7f:61:50:64:48:a8:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:52:0C:8A:CD:53:A4:44:E3:3B:99:68:ED:D5:E4:99:96:B9:1E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401081.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:19:ca:b9:97:59:dc:42:b8:f9:b4:57:b9:4b:b8:89:64:8e:
         38:f0:49:71:17:12:ab:39:40:83:ba:d3:5a:3e:38:cc:6c:29:
         fd:a6:aa:e8:6f:65:19:e6:b0:60:a7:ed:54:0c:dd:7f:99:72:
         03:86:0d:05:3e:e1:6a:4e:2d:9f:b6:e0:46:fe:cd:08:90:bb:
         1c:69:06:0c:ba:d1:ac:1f:de:5b:f4:c6:36:43:19:48:c6:52:
         46:97:6e:5a:c7:aa:5a:b0:16:6b:61:4c:c0:0e:fb:f5:a2:3e:
         c1:f3:24:fc:90:d9:80:78:fe:f1:93:4b:f3:f4:c2:de:01:93:
         09:81:80:c0:35:e3:29:86:90:55:b8:67:cf:97:1c:8a:a7:9b:
         e4:6d:0d:4a:da:f1:aa:8e:c1:f1:12:e3:f5:c0:1a:4e:55:b3:
         b9:06:e6:19:99:ef:d1:9f:3f:66:41:6c:18:09:98:05:d8:ee:
         fb:6c:f2:b5:6a:c1:10:88:b3:bc:d6:88:44:6f:7c:4a:2b:28:
         53:5c:9c:84:42:aa:4c:67:05:23:5d:c2:bb:81:ec:18:f9:b4:
         36:d3:17:5c:7e:f8:74:b8:b4:c7:32:ed:7d:c5:c3:ee:e1:3c:
         ef:3a:08:54:73:cd:2e:b9:9c:ee:a8:84:4a:fc:ff:5e:8d:5a:
         4c:f9:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:12:41 2026 by rpki-client