Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197974.roa
File:                     AS197974.roa (raw, json)
Hash identifier:          uaVqjwYpHorlOaHfU21p8WGVNAqH4B0kIqkgBp3HI5k=
Subject key identifier:   EC:E0:39:2E:E6:00:52:B9:E1:67:31:AC:A1:DE:01:6A:59:37:CD:35
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4D9ECA23497BD699149FD9DD8504C3B6A036DABD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197974.roa
Signing time:             Tue 18 Aug 2026 09:56:58 +0000
ROA not before:           Tue 18 Aug 2026 09:51:58 +0000
ROA not after:            Tue 17 Aug 2027 09:56:58 +0000
asID:                     197974
IP address blocks:        104.234.77.0/24 maxlen: 24
                          104.234.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9e:ca:23:49:7b:d6:99:14:9f:d9:dd:85:04:c3:b6:a0:36:da:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 18 09:51:58 2026 GMT
            Not After : Aug 17 09:56:58 2027 GMT
        Subject: CN=ECE0392EE60052B9E16731ACA1DE016A5937CD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:70:34:78:ad:a8:0f:eb:07:87:26:9f:ff:
                    ef:86:d6:46:00:26:d4:9d:97:bb:c4:18:93:9e:2a:
                    37:47:ab:93:48:70:ed:63:2c:99:0b:e5:84:bb:7c:
                    57:f9:15:f9:17:ef:c2:01:83:cf:af:34:3e:1a:43:
                    aa:0d:cb:89:0f:27:2d:b0:64:15:b4:c4:50:56:e5:
                    05:ec:4e:78:a9:f6:5a:2c:28:d1:b5:f8:49:d3:80:
                    2d:e8:38:e3:7c:09:02:2b:aa:97:62:fa:fb:ac:e2:
                    c4:5b:ac:11:da:58:ef:87:7f:23:0e:78:d6:62:d2:
                    65:22:27:a8:a3:83:5b:e4:af:7c:1e:0a:95:ce:e0:
                    be:a7:f0:23:1a:70:62:cc:43:1b:c6:9e:b5:bb:a5:
                    49:64:ab:e1:d1:ae:cc:74:1c:c9:51:a2:1d:53:43:
                    fe:cd:a1:b2:bc:55:56:ed:dc:f4:13:a9:8d:b4:a3:
                    0e:a5:ae:ea:65:b2:f7:4d:cd:1b:54:35:5a:16:27:
                    b4:e9:ff:c9:e5:45:3e:4b:12:02:0b:c9:41:5c:db:
                    14:b1:50:95:ba:c4:cc:92:4a:90:76:18:d0:41:4e:
                    9c:8d:a1:43:64:88:46:01:c7:7b:ee:43:fa:a7:cf:
                    d6:14:fb:8c:29:ec:f1:31:60:4f:2a:34:34:04:52:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E0:39:2E:E6:00:52:B9:E1:67:31:AC:A1:DE:01:6A:59:37:CD:35
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.77.0/24
                  104.234.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:99:df:df:92:ce:0b:4c:64:45:00:a4:d7:b2:c3:93:17:
         03:52:31:1e:e2:2b:c3:ca:c0:03:28:f3:14:08:e3:4b:85:6f:
         a1:2b:f0:12:0a:fd:b5:ec:ce:70:92:ad:3c:71:1b:96:fc:b6:
         6e:fe:14:64:cc:98:68:3e:6c:4b:d5:5a:9a:f1:7e:af:1b:66:
         f1:04:5a:42:98:26:3f:d1:db:fe:b3:34:86:bd:12:02:f8:a0:
         39:28:c4:c3:1d:a2:01:e4:ea:63:3f:40:e8:16:97:b1:fb:42:
         d4:0e:d6:ca:da:cd:2f:25:b0:bc:2f:8c:8a:ba:94:e2:be:75:
         08:b7:88:9c:ea:d2:f3:a8:23:2a:c2:5b:36:0a:0f:8c:96:a8:
         df:7c:05:fe:38:63:e4:69:48:00:eb:ba:17:d8:06:bf:9d:1d:
         85:db:a7:58:d9:e9:bf:07:4e:15:55:11:4f:3b:21:36:79:8d:
         24:76:b8:11:12:0e:b6:05:af:e8:59:16:22:b0:6a:5f:c5:54:
         ee:01:e8:2a:37:0d:b3:dd:14:db:2f:25:3d:4e:f1:22:bf:1a:
         c0:54:7a:1c:38:b8:dc:7d:7b:08:ad:39:ba:70:f9:f8:42:e9:
         d7:48:0c:15:d2:33:52:62:e1:4f:99:fa:2c:b3:82:26:2b:88:
         08:0c:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:53:30 2026 by rpki-client