Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11117.roa
File:                     AS11117.roa (raw, json)
Hash identifier:          sBwnnLTYVAtb/Q7PPXl9jojYa09OlzVBpdy4oifMbNY=
Subject key identifier:   A1:20:8F:C0:D0:D2:D1:15:30:96:0E:7B:61:BF:4F:EA:B1:B1:2C:28
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5C235E83D524894CF8E24691245C309A0F9C9968
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11117.roa
Signing time:             Sat 29 Aug 2026 04:25:54 +0000
ROA not before:           Sat 29 Aug 2026 04:20:54 +0000
ROA not after:            Sat 28 Aug 2027 04:25:54 +0000
asID:                     11117
IP address blocks:        104.234.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:5e:83:d5:24:89:4c:f8:e2:46:91:24:5c:30:9a:0f:9c:99:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 29 04:20:54 2026 GMT
            Not After : Aug 28 04:25:54 2027 GMT
        Subject: CN=A1208FC0D0D2D11530960E7B61BF4FEAB1B12C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:1c:a9:1d:25:38:aa:33:29:4b:ba:11:bc:
                    31:12:36:c9:5d:6a:11:c1:d1:8b:70:c6:af:8c:e7:
                    5b:bc:85:94:a4:fb:a3:e7:47:84:b7:c5:d1:bb:dc:
                    1b:27:20:ea:2d:b5:fe:99:67:15:35:12:45:18:98:
                    ba:4e:dd:c6:fc:c2:99:8d:6e:6c:ad:88:34:09:c6:
                    08:fb:11:46:88:e9:a3:07:7c:99:05:26:51:79:56:
                    a3:1d:e9:f9:67:8d:45:cc:dd:2a:fe:7c:09:54:57:
                    8e:d2:6b:c2:db:fa:98:05:b2:85:82:ca:77:8f:ae:
                    ff:d9:1c:07:f1:47:fd:c4:16:64:7e:20:b9:90:8f:
                    3b:10:10:16:75:7f:77:ac:5d:5b:b0:64:d3:07:9c:
                    95:da:3e:d0:7e:9a:2e:c3:ce:c0:d8:b5:a3:e4:c2:
                    23:c6:a7:db:a4:b0:d2:46:55:4c:d5:06:d6:43:5d:
                    4d:ff:1a:51:ff:fa:e8:5a:a6:8f:4b:f6:8d:0a:86:
                    46:80:86:e4:3c:2a:75:03:cc:08:4b:00:75:75:ae:
                    b1:97:b9:d3:cb:f3:c1:0e:a6:91:cf:e6:4e:b8:aa:
                    25:c7:be:64:71:e3:ba:e5:2b:46:85:38:33:01:68:
                    0c:61:5b:f6:a5:f7:93:0c:05:f6:03:e0:1f:54:90:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:20:8F:C0:D0:D2:D1:15:30:96:0E:7B:61:BF:4F:EA:B1:B1:2C:28
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0d:bc:53:80:93:7d:4b:0e:47:59:80:27:2d:a8:49:7f:ca:
         29:11:d4:54:2d:3d:8d:b3:13:11:27:fe:a2:81:6a:93:fb:bb:
         96:6f:1b:e4:b9:4e:36:52:41:e9:1c:5e:88:63:da:84:5b:a2:
         79:80:18:ac:24:29:0b:07:35:21:d5:8b:12:e3:31:75:68:86:
         0e:19:e6:4f:83:4f:73:cb:2a:0c:de:79:fa:80:03:4a:43:05:
         2b:46:34:58:55:62:ac:35:fa:01:37:59:f9:62:02:66:2d:e4:
         7b:8d:77:80:fc:2f:c8:4c:c8:9b:f1:4d:ea:f7:88:85:fe:d2:
         75:de:ca:6a:ac:e2:eb:b4:7e:48:6d:8d:c6:f4:13:70:94:1e:
         1a:2e:32:ed:58:db:7e:d3:cb:42:22:fb:9f:e8:ad:81:e3:96:
         1b:5f:92:4a:fc:72:15:46:9f:bf:52:0e:7e:40:c2:ab:a1:39:
         fa:bc:a1:26:c3:42:81:ee:c6:21:43:57:f5:50:2c:f9:10:3d:
         b9:c1:21:cd:df:72:03:ce:2f:d5:62:66:f5:83:48:8b:90:91:
         f1:f8:be:43:d1:e0:b5:d5:6d:be:7e:8a:55:25:d3:1b:50:51:
         68:02:c6:93:81:82:2e:9c:75:25:09:f4:4f:36:0e:9b:5b:f6:
         31:35:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:54 2026 by rpki-client