Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
File:                     AS137409.roa (raw, json)
Hash identifier:          kvdH4Ev46P9CP+rVfPkwapOoJ7OdjXRZHA4kNhnZVug=
Subject key identifier:   E1:CA:8F:40:02:A3:B7:53:D6:AE:E0:EE:ED:C8:C1:5B:2B:6A:14:29
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2BA21622BC7E189E33F356AD2EA85229270902ED
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
Signing time:             Thu 06 Aug 2026 05:38:18 +0000
ROA not before:           Thu 06 Aug 2026 05:33:18 +0000
ROA not after:            Thu 05 Aug 2027 05:38:18 +0000
asID:                     137409
IP address blocks:        104.234.71.0/24 maxlen: 24
                          104.234.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a2:16:22:bc:7e:18:9e:33:f3:56:ad:2e:a8:52:29:27:09:02:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  6 05:33:18 2026 GMT
            Not After : Aug  5 05:38:18 2027 GMT
        Subject: CN=E1CA8F4002A3B753D6AEE0EEEDC8C15B2B6A1429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:f0:0e:c1:65:f5:c5:4b:29:ae:25:cc:44:
                    60:a3:7d:ad:40:54:80:9e:5f:d8:c4:ed:6f:fe:12:
                    77:84:d0:c8:d9:f7:a4:ea:83:c4:0d:12:71:27:8c:
                    17:84:8b:43:48:79:29:51:32:a9:e4:02:05:98:8b:
                    d1:3b:70:07:1c:61:33:01:df:c1:ac:05:56:4f:d1:
                    4d:19:8d:48:f1:66:62:00:6c:39:bd:60:5a:dc:c5:
                    12:99:0b:9a:98:13:2b:32:ac:39:b6:5a:b1:4c:0e:
                    71:30:9a:40:2b:83:bc:13:cb:7f:52:80:67:b6:a0:
                    51:96:0c:a8:6a:b0:f2:1f:77:58:72:39:21:08:3a:
                    67:b7:3a:06:a5:f4:ff:ad:b8:bb:b6:a9:f6:0b:90:
                    e8:da:83:c5:fd:fe:7b:92:03:4e:41:f5:57:38:04:
                    16:11:1c:6b:aa:69:b8:79:a0:06:d8:05:4d:a3:c8:
                    56:58:4d:40:2f:13:39:fa:01:c7:93:d5:c4:41:7d:
                    70:2a:dc:ce:34:c8:eb:12:d0:a6:68:af:26:9c:b9:
                    eb:04:39:24:20:5a:6f:ca:c2:48:22:50:7c:12:8b:
                    d2:fb:f9:33:6f:20:07:11:66:39:da:91:23:95:4d:
                    6f:34:1d:5b:b4:26:ce:06:be:4a:04:e3:25:a9:ad:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:8F:40:02:A3:B7:53:D6:AE:E0:EE:ED:C8:C1:5B:2B:6A:14:29
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.71.0/24
                  104.234.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:f0:0a:ae:6e:01:8e:b4:9a:c9:07:75:d6:3c:c9:05:5e:
         eb:30:cb:ee:d9:1b:43:72:c7:1e:6b:db:33:ed:b7:20:ab:04:
         28:f4:5c:fb:4b:b5:03:f7:b0:80:bf:4c:94:6b:f3:91:c3:e7:
         0b:01:53:c5:0c:e5:91:40:ae:14:82:91:74:c1:70:f1:c5:b1:
         e2:bb:08:da:c8:f0:b2:1d:56:bd:25:3e:b8:7b:5b:48:50:90:
         63:91:34:6f:21:96:33:8d:5f:bc:0b:46:48:aa:d2:49:d7:42:
         1e:e0:e2:e2:a8:35:c6:1e:9c:93:45:45:9a:35:88:33:63:21:
         c3:95:fd:b3:a8:3e:bc:c0:43:c4:94:70:66:5a:0c:f9:74:fc:
         ea:b3:0e:09:c9:06:7b:d7:dd:98:1f:c1:14:76:cb:60:d2:73:
         d5:7d:81:7a:60:d8:ef:cb:f9:b5:9f:d7:4f:ba:45:47:00:54:
         3e:9e:d1:7c:2a:ab:c6:7a:6c:a6:d6:0b:ba:cc:f0:6f:13:69:
         c8:d9:9f:39:69:c8:67:e7:40:46:ab:95:6b:80:29:e9:8a:71:
         e2:9f:b0:8b:86:1f:dc:a6:6f:98:c9:2d:ab:72:dc:af:b2:c0:
         87:25:66:a5:3f:ea:46:9f:0c:2b:0c:c3:c8:6a:0f:84:c8:6c:
         d5:74:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:33:40 2026 by rpki-client