Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207208.roa
File:                     AS207208.roa (raw, json)
Hash identifier:          dszg5Zg4HVDOUlrNKKI5/fMdwP+2wqmsr93g43Hsvzw=
Subject key identifier:   A7:56:60:28:D2:1B:92:AE:E7:51:91:71:0D:F7:C0:E9:FE:4A:6D:C8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7A38E4A802426B8DA0456FB38E3183A63FDF5F32
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207208.roa
Signing time:             Mon 20 Jul 2026 15:21:52 +0000
ROA not before:           Mon 20 Jul 2026 15:16:52 +0000
ROA not after:            Mon 19 Jul 2027 15:21:52 +0000
asID:                     207208
IP address blocks:        104.234.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:38:e4:a8:02:42:6b:8d:a0:45:6f:b3:8e:31:83:a6:3f:df:5f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 20 15:16:52 2026 GMT
            Not After : Jul 19 15:21:52 2027 GMT
        Subject: CN=A7566028D21B92AEE75191710DF7C0E9FE4A6DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:fd:f8:6a:d4:77:8d:f3:1a:b9:3a:bf:f0:
                    e6:65:94:3f:52:c3:50:3d:e8:6a:f6:d0:6d:8e:cf:
                    a6:5a:a3:cc:45:82:18:5e:ee:b5:5e:97:7e:e6:9b:
                    dc:7c:f5:bc:a1:5a:42:77:49:b8:f3:60:98:e6:1a:
                    e8:f2:00:74:bd:00:d0:8b:c6:33:57:03:df:f4:00:
                    de:b1:3e:96:17:5b:fe:41:d5:1d:c2:31:a4:dc:72:
                    e4:93:0b:cd:b2:c4:f6:49:27:31:f0:e2:9d:f2:bb:
                    e9:b4:3b:89:a2:36:cd:6c:f7:03:bb:e0:2b:e0:5d:
                    2e:2d:f0:6e:8b:ec:e6:49:b0:a6:54:d1:b1:27:f3:
                    c9:15:92:c2:dc:81:bc:cf:35:35:23:37:8b:71:6d:
                    4e:c7:bb:74:c7:7c:92:d8:65:63:ff:f3:5d:d4:b9:
                    0e:42:a0:ef:6b:b2:2a:df:0d:5d:d3:53:b1:66:c9:
                    f9:75:39:01:b7:1d:c7:bc:51:8b:eb:8c:b7:f1:d9:
                    e6:6b:be:4c:18:c1:23:17:a3:66:de:ae:d4:86:d0:
                    da:ed:35:62:9c:5d:0a:6b:ec:a5:a9:bb:8e:b9:13:
                    94:76:3e:d4:5a:42:0e:76:32:29:78:93:c3:fb:de:
                    de:11:9f:cf:c7:c5:1a:cd:79:f3:7d:f7:cd:d8:99:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:60:28:D2:1B:92:AE:E7:51:91:71:0D:F7:C0:E9:FE:4A:6D:C8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207208.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:18:24:a2:cc:1a:9f:93:21:dd:b6:2d:49:21:8a:68:51:a2:
         8c:6a:5b:fa:46:6a:0d:84:d3:3e:86:b7:1b:89:18:db:c9:9f:
         11:4a:af:e8:47:20:b7:46:01:54:fa:67:b5:a8:73:16:7b:0b:
         bc:24:1b:ca:b8:47:d5:e8:35:da:72:56:d7:ef:e9:b8:42:48:
         ab:60:00:43:09:ba:fc:bc:58:91:32:e5:02:67:7f:91:c4:7d:
         ea:80:d2:6f:1a:3c:9b:b6:11:d4:2c:aa:b9:7e:e1:6a:df:d9:
         eb:74:2f:0e:e2:5e:c8:08:12:e8:52:07:f4:af:51:35:82:c8:
         a7:88:66:bf:de:cf:5f:d4:d8:dc:65:01:c8:4d:1d:92:ab:b3:
         13:1d:71:6a:d5:f4:26:33:09:d7:09:c2:dd:25:d4:ff:7b:de:
         d4:64:f9:ba:ac:ed:05:27:34:cc:e3:21:7d:90:f1:1d:5e:eb:
         bf:c5:cc:66:10:c0:fb:d2:1f:6b:4d:99:5f:f2:c2:d7:7b:60:
         c0:f9:af:5f:27:72:74:82:8c:48:9e:74:dd:3b:76:cc:5a:58:
         dd:f1:f8:6f:9a:6f:e6:52:d9:0e:6b:cf:d5:eb:b7:d2:3d:12:
         a7:d9:e1:6a:8a:7b:84:03:0b:dc:37:cf:bb:fc:68:19:52:38:
         ef:a3:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:47:08 2026 by rpki-client