Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197974.roa
File:                     AS197974.roa (raw, json)
Hash identifier:          FLmB3/s/DkIqPRRNg6L8HdXNALeSRlt/x0qjhVA7pQo=
Subject key identifier:   D5:20:44:FD:92:A0:F1:33:6D:C0:14:7C:B1:D4:7D:96:7A:17:D0:EA
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       017A0AC12C609AEA580FD545A2C5FD67249BB4CA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197974.roa
Signing time:             Thu 24 Sep 2026 08:12:57 +0000
ROA not before:           Thu 24 Sep 2026 08:07:57 +0000
ROA not after:            Thu 23 Sep 2027 08:12:57 +0000
asID:                     197974
IP address blocks:        104.234.77.0/24 maxlen: 24
                          104.234.159.0/24 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7a:0a:c1:2c:60:9a:ea:58:0f:d5:45:a2:c5:fd:67:24:9b:b4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 24 08:07:57 2026 GMT
            Not After : Sep 23 08:12:57 2027 GMT
        Subject: CN=D52044FD92A0F1336DC0147CB1D47D967A17D0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:b0:71:9f:c5:60:42:e4:78:52:9a:70:09:
                    0e:c6:79:dc:65:93:df:7d:91:45:e0:72:95:5a:0a:
                    36:21:69:67:e8:45:ed:2d:f4:2e:cb:6b:cf:e5:ac:
                    e5:ba:39:98:67:ce:51:39:55:fd:92:10:8d:1c:47:
                    a2:64:a0:4f:25:3f:92:3a:a2:90:a8:a0:4d:67:d3:
                    3e:5e:e3:02:1a:28:8f:f0:3c:cc:cd:0f:bf:82:d5:
                    cc:35:4f:92:ae:e9:bc:fe:6e:c8:b3:c6:d0:87:ae:
                    d2:30:d7:2a:9d:aa:a5:af:db:dc:c2:27:29:c3:1c:
                    cf:0f:31:e2:37:ed:8b:9f:42:bd:c6:36:83:b9:bc:
                    7f:86:cd:f7:aa:92:14:46:53:ac:ca:ab:05:66:68:
                    57:5b:e0:7e:80:c2:fb:ff:12:fa:8f:56:0a:b1:60:
                    68:07:d1:69:5d:41:fe:b4:43:61:af:55:2f:0b:2f:
                    7d:36:c2:42:ce:56:f0:48:1e:81:83:75:15:25:fd:
                    0e:c3:a3:a7:d6:1b:cf:54:84:ec:01:ae:46:5c:e5:
                    3a:e9:0b:96:0e:5c:4c:78:4e:93:c3:0e:64:b1:44:
                    d6:39:fd:5d:d1:72:8c:38:10:bb:8d:cd:61:0f:a8:
                    03:c2:11:8d:9a:65:a7:7f:9d:78:b2:c1:24:15:9d:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:20:44:FD:92:A0:F1:33:6D:C0:14:7C:B1:D4:7D:96:7A:17:D0:EA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.77.0/24
                  104.234.159.0/24
                  104.234.201.0/24
                  104.234.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:86:87:46:f6:58:cd:58:7f:11:61:62:8d:0e:63:b6:8b:45:
         31:73:83:71:94:e8:c2:6a:28:bc:2a:ef:54:52:f2:e9:3e:98:
         4d:40:f6:ef:0f:6b:69:c3:16:eb:c0:83:06:f8:fb:e9:be:ae:
         df:39:12:20:97:46:2a:b6:b5:bb:23:3b:eb:f9:be:64:6d:0b:
         c0:46:44:39:c9:90:c6:26:e2:55:24:3c:8f:f9:7a:0f:16:f5:
         54:cf:7f:0b:b3:06:09:9d:49:c5:a8:e0:66:58:35:90:af:89:
         05:fe:e6:1b:d6:d7:09:5a:89:5f:72:44:12:f6:cb:40:4b:1d:
         7a:7d:e7:4b:b8:d7:d5:44:a1:d1:4b:57:92:93:16:c1:77:8b:
         d1:1e:4a:8b:cd:69:9d:9a:40:cc:d0:0a:90:c3:e3:e0:74:2a:
         86:54:ad:a6:23:ad:52:3e:8c:cf:4b:b0:5a:34:c5:05:1c:66:
         fa:2b:25:33:c3:7a:85:b1:11:62:3f:de:45:97:c4:cc:e9:f3:
         75:93:3e:37:e7:f7:4e:58:26:46:38:ec:50:8f:56:fc:3a:e7:
         22:4e:69:d9:d4:66:46:ed:fe:f2:e8:fb:a4:ea:8e:f4:12:c9:
         19:99:82:11:fd:e6:99:ca:ee:74:a5:57:f4:fe:f0:8b:5d:89:
         9a:97:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:14:33 2026 by rpki-client