Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa
File:                     AS134176.roa (raw, json)
Hash identifier:          r6D6zumGgArwguKEobyd9L5S/U196uQjEhlsLaFGjRU=
Subject key identifier:   E0:81:B7:2E:9B:CF:CA:4D:53:9E:A2:C2:7B:97:9D:B2:6D:0F:19:BA
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1128B8E38BD9013313469F2E29953BF435832AEF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa
Signing time:             Sun 19 Apr 2026 07:35:59 +0000
ROA not before:           Sun 19 Apr 2026 07:30:59 +0000
ROA not after:            Sun 18 Apr 2027 07:35:59 +0000
asID:                     134176
IP address blocks:        104.234.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 05:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:28:b8:e3:8b:d9:01:33:13:46:9f:2e:29:95:3b:f4:35:83:2a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 19 07:30:59 2026 GMT
            Not After : Apr 18 07:35:59 2027 GMT
        Subject: CN=E081B72E9BCFCA4D539EA2C27B979DB26D0F19BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:e2:b0:a1:82:2b:06:99:ff:6d:ce:43:8e:
                    92:a1:43:7c:0c:7f:f6:1b:74:2a:4f:15:b5:fb:79:
                    08:28:b4:b2:f4:e2:92:26:50:5e:db:01:f4:83:5c:
                    ae:4e:97:60:79:ca:df:ee:34:f7:f7:e8:b8:bf:bd:
                    3e:3b:74:1b:3f:9a:60:fb:e7:b3:45:ad:20:8e:ef:
                    bc:09:18:2f:9b:0d:66:5c:e7:5a:34:96:0d:ce:79:
                    57:0f:0a:ad:f7:59:1a:47:0b:7e:39:2e:66:23:18:
                    83:0a:56:c4:8d:8e:c4:5f:86:47:10:6d:04:ed:9a:
                    02:88:bf:c2:87:55:d3:04:59:96:cb:cd:17:8c:29:
                    5e:00:36:47:57:c9:35:c4:9a:41:aa:0c:9b:1b:39:
                    7b:e2:4e:14:c6:71:69:9d:74:20:85:15:27:f8:30:
                    15:90:c3:f9:44:24:a0:ac:0e:51:89:c0:d6:1b:24:
                    63:3a:9e:e4:20:4f:75:1d:3f:ca:b3:11:55:cb:df:
                    32:ed:64:13:ec:fc:8f:4a:68:7c:e1:f7:ad:38:47:
                    ea:fc:d3:03:ec:7f:60:0d:eb:53:2e:d7:b5:ce:d8:
                    59:41:40:a1:07:d6:f6:63:aa:56:c0:04:c7:c1:7d:
                    27:00:f3:fb:92:50:39:c4:74:0a:13:45:5b:8b:8c:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:81:B7:2E:9B:CF:CA:4D:53:9E:A2:C2:7B:97:9D:B2:6D:0F:19:BA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3c:24:85:0e:33:ef:1f:08:27:22:fb:12:d3:cb:22:59:9d:
         7d:8a:b7:d0:a3:09:19:c1:a0:c3:5b:ee:f1:f8:07:e6:13:e6:
         bc:b8:24:8c:e4:28:7c:ef:eb:16:b1:2c:7b:ae:bb:fb:f7:a6:
         da:9d:0d:d0:ae:27:87:f5:eb:ed:a3:50:bb:a5:bd:c6:13:96:
         3b:74:56:af:f4:ad:83:8a:43:cc:f3:58:ac:a6:00:a7:f2:f1:
         b9:69:d5:71:e0:77:16:ba:a7:8f:10:f0:27:ce:6c:11:86:07:
         ab:21:e5:9c:a2:10:8f:be:61:5d:b9:8f:06:04:b2:64:74:18:
         e7:38:1b:92:12:88:be:2c:36:ab:18:22:05:cc:c1:2a:98:7c:
         86:9f:7e:91:a2:20:c8:d9:c3:64:51:32:15:f7:90:e7:94:94:
         ef:39:7b:60:00:d6:96:27:e5:44:6f:c9:8a:f2:8e:fc:1b:0d:
         4c:c1:38:59:9c:fe:a5:a2:16:ad:ba:9f:f4:ca:75:9d:e7:05:
         3a:99:04:66:a6:c6:9a:58:c4:45:86:3e:4f:40:3b:e4:14:61:
         6a:34:eb:05:31:ab:7e:31:3e:2a:71:03:cb:2d:00:5e:80:2a:
         6f:2f:ab:ea:62:d0:d0:3e:33:05:23:ef:68:fa:0a:37:1f:68:
         93:67:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 16:51:28 2026 by rpki-client