Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152726.roa
File:                     AS152726.roa (raw, json)
Hash identifier:          09Obltpqsgp3S0l4EW32rukVdgrhWjjM/xgyvMAwqlI=
Subject key identifier:   BA:AC:F9:0F:25:86:50:84:7C:06:97:D3:E8:2A:B2:28:66:21:F4:A4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5403A83551B6AE322F61CAD14BAA9BAD0387702E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152726.roa
Signing time:             Sat 10 Oct 2026 11:32:55 +0000
ROA not before:           Sat 10 Oct 2026 11:27:55 +0000
ROA not after:            Sat 09 Oct 2027 11:32:55 +0000
asID:                     152726
IP address blocks:        104.234.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:03:a8:35:51:b6:ae:32:2f:61:ca:d1:4b:aa:9b:ad:03:87:70:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 10 11:27:55 2026 GMT
            Not After : Oct  9 11:32:55 2027 GMT
        Subject: CN=BAACF90F258650847C0697D3E82AB2286621F4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:0a:db:85:a1:d5:8b:8d:90:93:d1:bf:94:
                    28:b7:b4:93:88:45:da:ff:61:f3:96:f2:b6:cb:ab:
                    3b:85:db:0f:3b:dd:02:c1:fc:44:4f:5b:5f:9f:38:
                    a9:29:d6:83:36:ba:3e:19:45:cd:95:03:44:88:ca:
                    df:42:af:92:a7:69:6e:21:66:92:29:67:fa:5b:be:
                    aa:58:ac:61:81:c5:a7:df:4b:ce:62:46:86:b5:40:
                    f7:03:45:38:ec:42:1f:bc:64:eb:bb:09:55:fb:7f:
                    70:fc:8e:98:c5:97:9c:a9:83:8d:fd:dc:2b:1f:4a:
                    d1:da:2a:87:62:00:11:f1:ee:42:d8:53:9c:e6:2b:
                    e9:d7:31:d5:df:b0:6e:ee:ec:8e:af:cc:b3:8f:59:
                    9a:9d:d5:7c:12:b1:ed:7e:67:58:60:88:4e:9c:c3:
                    3f:2d:94:3e:03:6d:c0:30:0f:68:4c:53:69:f8:f4:
                    52:68:d7:0c:f7:09:af:ef:95:d0:19:03:8d:7f:cc:
                    d1:ac:b6:2b:c6:35:11:0a:ee:3b:53:18:ea:45:e0:
                    f2:6b:63:99:2d:5b:02:ad:9d:1c:f6:ed:18:19:d5:
                    8f:a0:ff:c5:03:91:4a:4b:77:dc:39:4f:2d:17:30:
                    39:e4:62:9c:e2:3a:d0:54:b9:45:59:83:7c:46:5c:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AC:F9:0F:25:86:50:84:7C:06:97:D3:E8:2A:B2:28:66:21:F4:A4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:26:4f:50:37:31:24:7d:f2:cb:38:00:2e:9e:59:20:78:7e:
         cd:b1:c9:53:9e:72:54:50:9d:53:62:f3:af:4c:fb:71:e4:8f:
         79:be:6d:17:a3:29:14:40:00:a6:c0:98:0b:0d:f9:72:12:3d:
         5b:db:d4:34:f6:27:60:13:01:36:4f:b3:43:63:ba:a2:52:ec:
         ed:89:68:d5:a8:25:16:a2:b1:c6:6e:81:68:dc:0f:7f:de:8f:
         0c:4c:5c:81:fd:71:9a:04:2a:6f:43:54:0b:d3:19:3d:0d:73:
         fe:9e:29:b9:a9:44:b2:de:10:46:cc:e4:19:8d:f7:0b:ce:4c:
         18:16:19:5b:7e:66:d1:9c:c6:63:79:bb:0b:bf:7f:cd:b1:b9:
         2b:bf:3e:e3:1e:dd:14:75:f6:32:d8:78:d5:94:fc:9c:e6:35:
         25:22:0d:08:5a:86:2f:67:71:ea:e3:45:bf:cd:09:37:0b:31:
         90:44:9e:0d:f7:ba:73:ed:fd:2e:e7:15:61:e1:84:3a:1c:a1:
         c1:c1:89:cb:94:6d:f6:22:08:4c:24:89:39:0d:7b:1d:52:87:
         d9:cb:e1:42:2e:4e:76:40:08:d4:f2:09:de:af:71:f7:45:9c:
         d8:21:ca:82:19:8b:19:61:10:50:a8:28:92:67:5c:44:53:99:
         32:24:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:27 2026 by rpki-client