Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139642.roa
File:                     AS139642.roa (raw, json)
Hash identifier:          GWEAN0TtwBfzDNzD3j3lcSo1ahA2tdWXHQQ9gCJDtt0=
Subject key identifier:   9B:5C:6C:62:70:C7:3D:A8:F2:85:DB:B9:61:7D:6F:0C:7F:14:3A:C4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6476AF386197FBE000848D57C66A3B5E529DDC51
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139642.roa
Signing time:             Fri 16 Oct 2026 07:55:54 +0000
ROA not before:           Fri 16 Oct 2026 07:50:54 +0000
ROA not after:            Fri 15 Oct 2027 07:55:54 +0000
asID:                     139642
IP address blocks:        104.234.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 03:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:76:af:38:61:97:fb:e0:00:84:8d:57:c6:6a:3b:5e:52:9d:dc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 16 07:50:54 2026 GMT
            Not After : Oct 15 07:55:54 2027 GMT
        Subject: CN=9B5C6C6270C73DA8F285DBB9617D6F0C7F143AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:61:33:cd:49:eb:52:b0:9f:b1:42:5a:32:
                    52:27:dc:7d:33:50:7e:ae:ba:77:15:20:1d:7a:87:
                    1f:30:0b:38:05:74:9f:a4:57:78:af:0d:bd:d9:07:
                    41:80:1a:fa:78:e5:a0:00:22:0b:3a:bc:ef:48:75:
                    b2:8e:da:81:92:b8:5a:1c:86:fc:57:fd:c1:19:c2:
                    f6:c8:18:00:d3:3a:5d:a6:07:d1:ff:7b:1b:b2:f2:
                    a8:0d:93:b5:62:17:d0:e1:07:28:bf:47:d2:11:95:
                    d2:be:53:a8:ac:88:fb:2a:cf:a5:cd:5e:c5:07:a1:
                    6d:53:71:ca:c9:5e:41:ed:da:1e:4c:d5:f7:50:22:
                    db:f5:4a:c2:79:47:4b:14:45:1f:ba:98:1b:d0:5c:
                    74:ed:bb:82:82:69:80:20:52:8f:8b:7e:09:99:14:
                    9f:0c:e2:c6:2b:35:e1:ac:20:70:c0:cb:9c:46:56:
                    0e:a6:09:11:46:f6:92:9f:d6:2a:d2:0b:cc:73:66:
                    ab:4d:93:4f:4c:21:33:09:dd:93:39:e5:98:01:b0:
                    b4:15:39:b0:6b:09:1b:91:80:49:66:9f:d0:dc:e9:
                    9d:1c:dd:3a:b7:e0:ba:bc:77:e9:91:1d:82:e8:78:
                    c6:3a:cd:3d:c2:45:e5:08:96:f3:9d:d0:c0:72:4d:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5C:6C:62:70:C7:3D:A8:F2:85:DB:B9:61:7D:6F:0C:7F:14:3A:C4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139642.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:eb:ce:58:0b:80:86:a1:60:33:79:2f:8b:d0:0a:17:d2:
         39:ec:b8:5f:c2:26:73:5a:ba:ff:04:73:fa:23:d3:9b:a9:0a:
         08:06:37:21:44:93:11:3e:b0:7a:20:a1:bc:af:92:20:28:9f:
         0f:2f:e6:e0:b1:c6:b8:ed:4b:5b:f7:8b:f5:b4:0e:1a:2d:f1:
         b9:97:c8:79:d5:dd:e3:2c:0b:c7:ea:5d:26:0d:b5:b2:4c:15:
         85:99:6b:bb:c8:1d:f7:f1:30:e6:ac:60:41:55:8f:58:0b:bc:
         b0:2d:5d:09:df:6f:28:80:23:33:2f:cf:cd:6e:02:a1:1a:f5:
         3f:44:b5:00:fd:be:42:f6:5a:81:6c:c0:e7:c4:b0:da:07:58:
         46:6f:ae:3c:1f:41:99:88:ac:b5:38:b1:48:17:89:26:e9:1f:
         48:23:71:bf:38:e5:8b:43:96:24:7c:0d:1b:ac:7e:31:f2:98:
         56:7c:fe:35:85:f2:36:96:44:ac:c3:02:5a:60:08:00:e5:58:
         db:2e:21:a7:76:36:aa:b2:1a:f5:da:55:32:91:4e:ac:c0:cf:
         be:3b:f9:d8:f0:c6:68:e5:29:57:ec:93:ea:e0:92:50:69:1b:
         f4:19:01:6d:f7:0f:43:fc:f4:0b:82:df:b0:27:6c:e1:75:bf:
         f7:f2:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:04:02 2026 by rpki-client