Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149513.roa
File:                     AS149513.roa (raw, json)
Hash identifier:          a8CXg8WIXhIuumGTAj1cgi0zZUNwN5nb3WQxayMUaOE=
Subject key identifier:   A5:EA:6C:09:54:93:D1:47:F0:20:8B:A3:C5:77:A2:5F:97:D9:6B:60
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       60C1FAE1F49FE9C55F400D5F53DE2C656D8C4AAC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149513.roa
Signing time:             Mon 29 Jun 2026 11:51:08 +0000
ROA not before:           Mon 29 Jun 2026 11:46:08 +0000
ROA not after:            Mon 28 Jun 2027 11:51:08 +0000
asID:                     149513
IP address blocks:        104.234.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 08:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c1:fa:e1:f4:9f:e9:c5:5f:40:0d:5f:53:de:2c:65:6d:8c:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 29 11:46:08 2026 GMT
            Not After : Jun 28 11:51:08 2027 GMT
        Subject: CN=A5EA6C095493D147F0208BA3C577A25F97D96B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:af:14:b1:88:9d:ca:cd:99:1f:db:a5:52:
                    97:68:43:15:72:76:4f:0f:64:a7:bd:07:46:3b:de:
                    2c:2b:6d:17:31:f4:2d:fa:45:8f:a9:c1:0c:03:5d:
                    52:dc:12:77:62:16:0b:00:b8:c7:2d:64:85:9f:25:
                    88:ce:2d:4e:00:a8:c7:7a:c0:07:02:99:48:58:60:
                    43:5a:0f:1c:50:60:10:0b:9f:7d:ac:91:93:b0:4c:
                    8f:d5:28:22:58:b9:89:b0:10:0e:a9:2b:24:00:3f:
                    6f:6f:9e:75:b5:63:4b:02:52:26:fe:f2:f0:66:d1:
                    4f:b9:8f:a1:2f:ac:9f:6a:e0:77:2d:06:00:cf:b2:
                    4d:71:d1:ab:3e:2a:64:9d:7f:c0:81:4d:a7:37:30:
                    be:86:31:ca:67:1a:e2:36:62:3d:f1:c6:15:78:9c:
                    5f:63:7d:fb:eb:88:10:85:f5:b0:11:52:e5:af:89:
                    bd:1e:5e:1c:bd:7a:bf:e5:7e:ef:e4:b0:17:af:02:
                    b6:42:d2:9e:bc:5f:95:78:f3:47:cd:8c:8a:8d:29:
                    65:e0:8c:9a:ff:83:1d:8c:e3:59:8d:ee:e8:81:e8:
                    df:61:9e:cc:b7:d2:8e:95:73:c2:bc:b4:f6:b8:b1:
                    2f:60:9a:61:d3:bb:bd:7e:c2:5e:b3:ef:6b:2d:cd:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EA:6C:09:54:93:D1:47:F0:20:8B:A3:C5:77:A2:5F:97:D9:6B:60
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:a4:ce:21:87:ee:e7:ae:d1:88:c1:56:99:fe:06:2b:4d:
         6e:3e:7f:82:5a:61:3a:4b:f5:1a:4f:0b:a5:82:cd:a2:60:f2:
         04:78:73:89:ad:f4:77:ef:3e:1d:bb:a6:63:34:e8:ca:23:88:
         c2:70:9a:73:d0:9b:f8:2f:34:62:b2:fd:e5:f7:82:6a:ed:f8:
         a7:f0:a8:a9:0b:8b:c9:b3:46:3b:5c:ed:85:b8:99:63:2f:5a:
         de:bd:dc:9b:67:f6:d6:a5:e6:9b:a7:58:22:a8:5f:cf:96:04:
         d4:ab:b7:f2:eb:ea:27:9a:00:c4:a3:52:21:f6:68:c8:c9:a7:
         51:08:85:45:cf:e9:ac:4a:f0:50:22:76:ab:dd:99:3c:72:5d:
         eb:c9:ae:04:68:1f:dc:23:d6:ca:8a:6c:10:9e:bd:a3:84:bc:
         84:f2:95:15:05:a5:65:81:57:0d:40:86:cc:e0:94:7a:95:d0:
         63:68:30:f7:57:27:82:36:c9:9e:11:1c:5a:18:44:7d:01:50:
         74:8a:58:9c:61:33:8d:8f:0f:a5:7d:78:9e:1c:7b:85:4b:c1:
         01:8b:9f:49:17:4a:5c:fe:86:97:b2:6f:d7:2e:41:eb:f5:51:
         ce:58:13:43:0a:f0:9a:92:39:e8:f2:a9:bf:0e:52:7c:00:77:
         0a:05:83:29
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUYMH64fSf6cVfQA1fU94sZW2MSqwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNjI5MTE0NjA4WhcNMjcwNjI4MTE1MTA4
WjAzMTEwLwYDVQQDEyhBNUVBNkMwOTU0OTNEMTQ3RjAyMDhCQTNDNTc3QTI1Rjk3
RDk2QjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XGvFLGIncrN
mR/bpVKXaEMVcnZPD2SnvQdGO94sK20XMfQt+kWPqcEMA11S3BJ3YhYLALjHLWSF
nyWIzi1OAKjHesAHAplIWGBDWg8cUGAQC599rJGTsEyP1SgiWLmJsBAOqSskAD9v
b551tWNLAlIm/vLwZtFPuY+hL6yfauB3LQYAz7JNcdGrPipknX/AgU2nNzC+hjHK
ZxriNmI98cYVeJxfY33764gQhfWwEVLlr4m9Hl4cvXq/5X7v5LAXrwK2QtKevF+V
ePNHzYyKjSll4Iya/4MdjONZje7ogejfYZ7Mt9KOlXPCvLT2uLEvYJph07u9fsJe
s+9rLc2r5QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKXqbAlUk9FH8CCLo8V3ol+X
2WtgMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE0OTUxMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWjqJDANBgkqhkiG9w0BAQsFAAOC
AQEAfHSkziGH7ueu0YjBVpn+BitNbj5/glphOkv1Gk8LpYLNomDyBHhzia30d+8+
HbumYzToyiOIwnCac9Cb+C80YrL95feCau34p/CoqQuLybNGO1zthbiZYy9a3r3c
m2f21qXmm6dYIqhfz5YE1Ku38uvqJ5oAxKNSIfZoyMmnUQiFRc/prErwUCJ2q92Z
PHJd68muBGgf3CPWyopsEJ69o4S8hPKVFQWlZYFXDUCGzOCUepXQY2gw91cngjbJ
nhEcWhhEfQFQdIpYnGEzjY8PpX14nhx7hUvBAYufSRdKXP6Gl7Jv1y5B6/VRzlgT
QwrwmpI56PKpvw5SfAB3CgWDKQ==
-----END CERTIFICATE-----
Generated at Sun Jul 5 10:20:18 2026 by rpki-client