Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          jGnznuIVXXA0l1wUFklHSUP4anIWtvy4bt3GEQCw0wg=
Subject key identifier:   96:81:54:B3:A0:43:5C:59:9B:77:AC:49:72:27:56:C5:E8:C1:02:BE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1F0E671AE9E1426354ADB0B8FAC044304B483BFB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa
Signing time:             Thu 01 Oct 2026 17:36:20 +0000
ROA not before:           Thu 01 Oct 2026 17:31:20 +0000
ROA not after:            Thu 30 Sep 2027 17:36:20 +0000
asID:                     5065
IP address blocks:        104.234.121.0/24 maxlen: 24
                          104.234.164.0/24 maxlen: 24
                          104.234.185.0/24 maxlen: 24
                          104.234.218.0/24 maxlen: 24
                          104.234.221.0/24 maxlen: 24
                          104.234.248.0/24 maxlen: 24
                          104.234.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:67:1a:e9:e1:42:63:54:ad:b0:b8:fa:c0:44:30:4b:48:3b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  1 17:31:20 2026 GMT
            Not After : Sep 30 17:36:20 2027 GMT
        Subject: CN=968154B3A0435C599B77AC49722756C5E8C102BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:55:5b:b0:74:f7:3e:54:27:74:1d:d6:18:
                    58:64:90:c4:a7:8d:29:19:70:25:32:96:30:ba:a2:
                    fa:47:28:a0:80:06:ec:be:27:6d:66:cb:d3:b0:0e:
                    f1:17:f6:3d:0a:5c:c7:24:5a:05:81:3d:2b:1a:aa:
                    09:80:ea:31:5c:38:56:95:fb:60:64:85:76:62:a3:
                    39:02:b5:3a:0d:b1:96:77:1e:87:69:57:f2:81:1a:
                    56:f9:d3:1f:e7:13:6f:c4:b8:4f:fd:af:c3:63:ee:
                    ac:ed:3a:75:e1:9c:2e:f0:00:3b:8f:77:c7:87:47:
                    fb:5e:ad:33:59:50:f2:2b:6f:26:9d:38:60:9e:47:
                    3f:a9:11:79:38:9c:75:8b:ab:13:ff:cb:b7:1e:1d:
                    c4:e1:18:94:ee:ee:b6:18:d8:2b:1b:a5:d8:63:8f:
                    1c:d1:1c:e3:98:01:c4:32:32:9f:17:6b:a0:23:32:
                    99:2b:1d:f3:b8:80:48:ec:6b:0a:b1:04:7d:33:c9:
                    5e:04:60:95:95:6b:58:c2:74:b8:48:01:01:ee:8c:
                    b0:f3:aa:71:9f:b7:3c:75:3d:77:43:1a:d0:7f:9d:
                    8b:97:22:1d:e2:e9:4d:18:4b:62:e7:45:6f:af:d7:
                    bf:d6:85:c5:60:b5:25:4e:c9:84:bb:a6:2d:31:11:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:54:B3:A0:43:5C:59:9B:77:AC:49:72:27:56:C5:E8:C1:02:BE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.121.0/24
                  104.234.164.0/24
                  104.234.185.0/24
                  104.234.218.0/24
                  104.234.221.0/24
                  104.234.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:bb:83:29:20:e0:89:e6:eb:19:90:93:64:f6:18:e8:44:93:
         a2:ee:28:73:00:86:63:46:d3:05:6c:93:24:3f:f3:d9:05:24:
         9b:b7:f3:d2:43:5f:ae:ec:20:f4:f3:7a:f5:17:8c:02:91:fa:
         5b:5f:4e:28:f7:9c:43:e4:1a:93:d3:63:58:74:b8:1d:76:f6:
         ba:7e:1f:13:8e:b4:67:b4:3b:80:16:fd:fb:c8:2f:8a:74:52:
         bd:99:b8:00:30:0b:09:57:6f:98:03:46:6a:91:94:db:c2:7c:
         51:8e:b4:8f:0e:1b:b1:74:fc:c4:6f:6e:1d:db:53:74:5c:3e:
         cd:7a:16:d6:2c:70:9b:36:f6:61:21:27:5e:4f:66:2c:2f:cc:
         90:91:10:c4:c1:db:2b:90:ac:e5:b8:75:0e:6b:7e:0b:db:09:
         26:02:bb:43:8c:b1:71:f5:ce:9a:f8:6b:71:30:8a:30:e4:af:
         65:c9:b8:27:ac:e3:da:f5:bf:89:38:95:ac:e9:75:e5:93:24:
         5e:06:35:c2:31:1c:92:d5:c0:6b:3d:0d:4c:d5:40:47:8e:c4:
         93:34:d8:1a:b9:0e:c8:15:b9:35:aa:a1:a6:b4:91:98:d5:14:
         4f:77:da:2c:68:0c:19:d9:1d:2f:33:4d:08:ae:c5:a1:2b:79:
         ed:7f:19:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 14:44:39 2026 by rpki-client