Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa
File:                     AS19786.roa (raw, json)
Hash identifier:          O2XN/I7uj3lYGOnqV8IMaGvU9UpKzrzSKd1QZMbp7mo=
Subject key identifier:   90:63:13:91:8D:27:F3:6E:99:B5:48:0B:65:F0:7C:55:A4:80:BF:C5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       025F596E96A7A748B713D8A21F767D2DBC9BF25C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa
Signing time:             Thu 04 Sep 2025 00:07:32 +0000
ROA not before:           Thu 04 Sep 2025 00:02:32 +0000
ROA not after:            Thu 03 Sep 2026 00:07:32 +0000
asID:                     19786
IP address blocks:        104.234.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:59:6e:96:a7:a7:48:b7:13:d8:a2:1f:76:7d:2d:bc:9b:f2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  4 00:02:32 2025 GMT
            Not After : Sep  3 00:07:32 2026 GMT
        Subject: CN=906313918D27F36E99B5480B65F07C55A480BFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:d6:fd:5d:a2:bc:22:14:60:b3:be:d0:39:
                    d3:91:ad:bc:e8:27:ca:bf:29:86:6d:92:53:60:70:
                    9e:93:82:fd:00:aa:47:47:d2:88:8b:36:d1:b3:dc:
                    87:73:86:4c:f6:6b:93:e3:c2:59:b3:6a:3e:6c:1a:
                    2b:1d:5a:ae:d7:6b:9b:4d:02:cf:df:ff:f2:47:70:
                    8e:b5:a5:fa:b3:c7:30:e3:03:61:af:9c:b3:db:7d:
                    d6:ad:6b:53:aa:70:a5:20:8a:ce:55:bc:e9:83:8f:
                    ef:f7:15:18:8d:0d:ad:42:ef:39:d6:36:fd:18:a5:
                    2a:65:36:ad:3d:d7:73:0a:5a:f6:fd:b7:4d:de:7c:
                    ac:e8:28:27:a3:bc:13:a0:a9:e4:7d:3d:4b:d6:ce:
                    fe:48:db:1e:32:84:5d:31:c4:50:36:f8:87:70:89:
                    d8:b9:4a:0f:3f:31:72:24:68:ec:b2:ee:9c:c6:68:
                    5c:7c:85:fb:97:4a:77:14:4d:1e:99:2b:b3:6c:e2:
                    e4:37:94:7e:16:5b:c3:59:6e:61:1c:38:0c:e4:5b:
                    51:a8:46:19:e5:c7:6d:9a:98:c4:9f:59:68:33:ac:
                    3b:66:71:0a:6f:4a:ca:f0:3f:ab:ab:d8:2b:cd:99:
                    b3:32:e4:10:a8:ca:a2:32:c9:be:9c:3a:68:a9:44:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:63:13:91:8D:27:F3:6E:99:B5:48:0B:65:F0:7C:55:A4:80:BF:C5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:1e:4a:4b:ba:5f:9d:a7:f7:69:ae:48:99:74:ed:fc:35:
         b9:d0:97:e9:56:67:e6:fd:05:6f:66:4b:fb:5c:8a:10:44:57:
         30:82:53:62:6e:83:33:70:5b:dc:ed:42:97:25:de:17:50:27:
         34:70:43:22:5f:a3:b1:49:cb:4b:b0:b5:e0:1b:d7:0f:67:51:
         2a:6e:48:2f:1a:eb:44:0b:31:5d:de:c7:ef:e1:51:c1:bb:71:
         8c:32:ae:0b:11:54:8d:e0:79:2c:72:49:ee:8c:94:1a:6d:89:
         dc:27:fa:de:77:81:12:83:2c:7f:ce:6a:b9:09:d9:e4:4a:44:
         1b:f5:e1:94:ab:8e:28:6a:bd:e3:e1:78:72:23:e9:52:ea:aa:
         42:35:7f:3e:cd:74:15:b0:ea:bd:9f:37:d5:a4:46:8e:f9:d5:
         3a:04:49:52:21:92:73:ee:96:0d:30:0c:9b:55:d6:6a:16:57:
         21:86:bc:19:3f:1a:89:e5:2f:d8:f7:65:ed:b5:d5:35:f0:15:
         17:41:13:45:b2:e4:95:3a:2b:f7:ed:65:ae:44:1c:cb:c9:2d:
         2d:ab:d7:05:8e:d7:01:ae:48:a9:a0:13:9e:7d:2d:56:16:1d:
         34:ab:71:b1:06:38:33:0a:83:2d:59:9a:9e:e5:d0:c0:e1:ca:
         b7:37:98:92
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUAl9Zbpanp0i3E9iiH3Z9Lbyb8lwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwOTA0MDAwMjMyWhcNMjYwOTAzMDAwNzMy
WjAzMTEwLwYDVQQDEyg5MDYzMTM5MThEMjdGMzZFOTlCNTQ4MEI2NUYwN0M1NUE0
ODBCRkM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJPW/V2ivCIU
YLO+0DnTka286CfKvymGbZJTYHCek4L9AKpHR9KIizbRs9yHc4ZM9muT48JZs2o+
bBorHVqu12ubTQLP3//yR3COtaX6s8cw4wNhr5yz233WrWtTqnClIIrOVbzpg4/v
9xUYjQ2tQu851jb9GKUqZTatPddzClr2/bdN3nys6Cgno7wToKnkfT1L1s7+SNse
MoRdMcRQNviHcInYuUoPPzFyJGjssu6cxmhcfIX7l0p3FE0emSuzbOLkN5R+FlvD
WW5hHDgM5FtRqEYZ5cdtmpjEn1loM6w7ZnEKb0rK8D+rq9grzZmzMuQQqMqiMsm+
nDpoqUS7AwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJBjE5GNJ/NumbVIC2XwfFWk
gL/FMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE5Nzg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOq/MA0GCSqGSIb3DQEBCwUAA4IB
AQA7Xx5KS7pfnaf3aa5ImXTt/DW50JfpVmfm/QVvZkv7XIoQRFcwglNiboMzcFvc
7UKXJd4XUCc0cEMiX6OxSctLsLXgG9cPZ1EqbkgvGutECzFd3sfv4VHBu3GMMq4L
EVSN4HkscknujJQabYncJ/red4ESgyx/zmq5CdnkSkQb9eGUq44oar3j4XhyI+lS
6qpCNX8+zXQVsOq9nzfVpEaO+dU6BElSIZJz7pYNMAybVdZqFlchhrwZPxqJ5S/Y
92XttdU18BUXQRNFsuSVOiv37WWuRBzLyS0tq9cFjtcBrkipoBOefS1WFh00q3Gx
BjgzCoMtWZqe5dDA4cq3N5iS
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:12:01 2025 by rpki-client