Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS136725.roa
File:                     AS136725.roa (raw, json)
Hash identifier:          xS6ZVTKbJ4hrfwfz8IOP0PlUBoGNJypk/hdt0cd2Bew=
Subject key identifier:   60:50:C6:1B:B3:03:5E:CC:D7:80:10:32:AD:F1:B4:97:37:F1:4D:17
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       61CBB708E0671822895635D29CB6E7632D7DA904
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS136725.roa
Signing time:             Mon 06 Jul 2026 08:05:06 +0000
ROA not before:           Mon 06 Jul 2026 08:00:06 +0000
ROA not after:            Mon 05 Jul 2027 08:05:06 +0000
asID:                     136725
IP address blocks:        104.234.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:b7:08:e0:67:18:22:89:56:35:d2:9c:b6:e7:63:2d:7d:a9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  6 08:00:06 2026 GMT
            Not After : Jul  5 08:05:06 2027 GMT
        Subject: CN=6050C61BB3035ECCD7801032ADF1B49737F14D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:4c:62:ef:aa:b2:5e:6f:55:5e:5f:47:b7:
                    09:20:b7:d6:5d:e7:06:33:29:b9:a9:a6:d1:6b:8f:
                    65:ff:cd:e0:96:07:8d:50:65:fc:cb:b4:c9:37:62:
                    36:85:fb:0b:97:a3:da:70:ae:0b:2e:18:32:d5:fc:
                    de:0b:d0:92:41:61:cf:a4:18:52:8e:f5:88:6e:76:
                    19:54:70:dc:be:93:c6:36:b2:5a:dc:33:9c:d2:c6:
                    af:ea:68:f6:45:35:b3:7a:8e:40:44:47:7e:72:b1:
                    92:ca:fc:80:09:16:aa:0b:80:dd:74:cf:f9:4f:98:
                    bc:b1:f4:1b:81:21:59:11:9c:7f:c3:d1:9a:7f:51:
                    4c:2c:ce:b3:c7:3c:da:b4:18:a5:12:c7:1c:01:99:
                    34:b6:29:28:d0:84:9e:b7:c3:db:d9:ad:9c:bd:47:
                    9f:07:6d:ff:2f:80:f4:7d:9b:b4:57:80:56:b1:97:
                    e6:5e:c1:d2:56:63:a1:81:67:30:8e:bd:d4:5d:45:
                    98:18:eb:55:7e:47:19:d7:7c:9e:35:eb:d4:dd:26:
                    88:80:01:e4:ce:9c:3c:44:9f:91:7b:98:0e:0e:ea:
                    88:fe:ce:04:44:a2:2e:5c:4b:40:66:a7:8d:87:96:
                    2a:80:b5:77:e8:f0:5e:84:e9:c6:5e:a5:00:9a:c1:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:50:C6:1B:B3:03:5E:CC:D7:80:10:32:AD:F1:B4:97:37:F1:4D:17
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS136725.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:85:53:8b:0b:78:87:ff:46:07:78:5f:85:89:ca:19:a2:43:
         ee:69:b3:01:df:08:04:3b:0d:ae:d1:c4:3f:ca:a2:b0:87:a7:
         06:2d:98:5e:d0:cd:2f:94:57:db:f9:74:a0:9f:b8:f3:52:82:
         9f:dc:1a:fc:ed:fe:56:75:9b:99:ed:76:41:13:eb:f5:ad:a1:
         f3:4b:97:26:10:a5:55:31:b2:8c:31:4a:cc:7d:72:b0:e0:78:
         f8:fe:5f:1b:19:3f:4f:86:46:99:aa:eb:ec:34:f9:f1:b4:38:
         d5:7d:83:39:d7:bb:f9:60:18:f6:86:59:93:db:28:8e:f1:e1:
         47:7f:ec:d6:b6:1c:61:8c:80:07:e3:46:d6:19:ea:be:4a:5d:
         7c:e6:cf:9d:b0:34:9e:37:3a:1f:74:66:6c:f7:28:f9:4f:02:
         3b:2b:21:a8:7d:65:09:fc:ae:a7:16:5f:c1:ff:e3:e7:4a:94:
         d7:65:7a:53:bb:51:02:e8:74:8f:82:6a:f6:64:f4:12:18:ac:
         49:71:62:4c:21:a1:45:4f:c6:54:51:2c:ff:0e:1b:e1:17:ff:
         2f:14:7e:3c:4b:35:2d:88:c3:2f:d0:89:c4:44:12:d0:37:bf:
         cc:2d:e1:f0:f4:e3:4b:d9:e1:84:dd:42:53:dc:49:35:0a:e2:
         02:9a:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:47:07 2026 by rpki-client