Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          8zDOZ+D7ZSfwlSa86vlBW1DjJ95Zdf9pR//uW15rhZ0=
Subject key identifier:   03:46:68:F4:20:63:32:39:29:1D:F6:F8:53:EA:6A:78:09:64:C5:5C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6207052C4EAE76C2A2883A1E39873868FBB1484A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
Signing time:             Wed 28 Jan 2026 13:33:42 +0000
ROA not before:           Wed 28 Jan 2026 13:28:42 +0000
ROA not after:            Wed 27 Jan 2027 13:33:42 +0000
asID:                     174
IP address blocks:        104.234.12.0/24 maxlen: 24
                          104.234.247.0/24 maxlen: 24
                          206.53.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 18:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:07:05:2c:4e:ae:76:c2:a2:88:3a:1e:39:87:38:68:fb:b1:48:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 28 13:28:42 2026 GMT
            Not After : Jan 27 13:33:42 2027 GMT
        Subject: CN=034668F420633239291DF6F853EA6A780964C55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:2b:6c:93:05:20:56:4a:a5:61:da:20:6e:
                    55:2c:17:b9:31:76:62:5a:ac:56:40:6b:16:8e:3e:
                    aa:18:05:9f:95:f1:c1:fb:c8:a5:bf:43:f8:84:75:
                    75:37:03:9c:55:cb:fe:02:b3:24:84:12:87:9e:51:
                    f6:79:cf:de:13:77:f1:ee:99:9f:09:86:cc:a5:64:
                    ea:54:98:80:26:4b:25:6c:e4:f1:b7:1b:be:6c:6f:
                    a2:48:09:c0:7c:3f:76:18:3a:2c:3f:25:6f:93:ac:
                    8c:92:00:6c:37:51:da:42:1b:8c:f3:f6:3c:0b:1e:
                    f6:f7:6d:17:b2:4f:b5:43:31:5d:be:d2:bd:9a:d4:
                    1d:bc:ba:18:ab:7e:d3:a0:49:85:32:ee:f0:77:a3:
                    3c:68:77:78:39:b1:ab:5a:e3:84:cf:09:d2:c3:7b:
                    72:74:cf:3b:bf:a5:23:66:88:9f:a5:f1:10:dc:97:
                    02:42:f6:b1:21:4f:0f:12:99:7c:77:ba:97:60:18:
                    9f:12:8a:cc:92:ba:62:31:b1:7f:8c:df:a2:82:99:
                    c7:c8:b9:5d:f0:bc:3b:58:5c:8d:f5:bb:49:68:a2:
                    96:49:82:0b:6c:56:e8:76:41:ee:04:90:1d:84:14:
                    e3:a2:80:1b:aa:1f:ce:c1:80:d6:0f:ce:98:72:20:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:68:F4:20:63:32:39:29:1D:F6:F8:53:EA:6A:78:09:64:C5:5C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.12.0/24
                  104.234.247.0/24
                  206.53.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:08:f9:01:5b:0e:27:4c:3b:e7:b3:47:df:73:e2:a2:6c:f5:
         13:ce:dc:0b:e7:71:ff:c5:2a:97:db:9b:ee:2f:f5:c9:80:d2:
         a3:dc:12:70:c6:35:a6:df:07:84:3b:a8:27:30:89:f3:19:db:
         d1:30:67:f2:f1:ba:b8:f6:e6:69:a4:fa:26:a8:cb:57:e2:87:
         db:ba:b0:1a:81:b4:28:10:de:da:fa:54:f9:a1:0b:0b:13:82:
         d5:f7:eb:cf:32:ea:b7:5f:73:82:ae:cb:02:ae:65:4e:73:a3:
         77:14:c8:32:ab:56:65:49:10:04:60:10:97:37:8f:a3:93:a7:
         50:01:e3:a6:dc:9b:47:13:8d:e5:6b:86:d2:0e:1f:2b:a9:88:
         4b:d2:9d:b5:7e:7a:69:69:aa:ea:01:65:46:02:d8:3d:7d:9e:
         85:96:f7:a2:23:e2:91:ce:7b:40:34:6f:bb:10:3e:0d:5a:a2:
         41:00:92:db:58:ea:96:6c:5f:f9:2c:19:e3:54:59:f3:dc:68:
         f0:c3:1c:f0:46:d3:a3:68:cf:6b:d1:99:5e:dd:a7:92:2f:17:
         47:b1:be:a2:45:0d:77:6e:2d:df:02:c9:2d:e5:fe:e3:6a:1c:
         cc:82:4f:3f:66:4b:2e:2a:29:4f:60:9b:de:97:16:90:4c:d6:
         0c:6a:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:24:54 2026 by rpki-client