Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218661.roa
File:                     AS218661.roa (raw, json)
Hash identifier:          MYqtwgceWteMyJsb3n2wjJs3hwRHlTytGuRB8Lzt7DU=
Subject key identifier:   9B:C9:FF:6B:A0:B2:59:8F:7F:12:38:56:58:9D:A9:74:1D:08:29:10
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7AA71DB64E86228FB9AA8D3E1D1FD9F3C2DCDDB1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218661.roa
Signing time:             Fri 25 Sep 2026 05:21:13 +0000
ROA not before:           Fri 25 Sep 2026 05:16:13 +0000
ROA not after:            Fri 24 Sep 2027 05:21:13 +0000
asID:                     218661
IP address blocks:        104.234.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a7:1d:b6:4e:86:22:8f:b9:aa:8d:3e:1d:1f:d9:f3:c2:dc:dd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 25 05:16:13 2026 GMT
            Not After : Sep 24 05:21:13 2027 GMT
        Subject: CN=9BC9FF6BA0B2598F7F123856589DA9741D082910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:2c:8b:f8:3f:ff:cb:e9:13:c9:63:6c:36:
                    5d:de:d8:b5:57:8f:84:a7:dc:cf:99:11:01:5a:1a:
                    b1:66:ba:cb:31:20:e6:05:88:19:25:2e:08:94:36:
                    e7:ac:67:75:98:5e:23:79:3e:68:81:d2:2a:a8:97:
                    14:33:20:bd:09:64:bb:d5:ce:e9:4e:54:8a:5f:57:
                    64:0a:a2:1f:3a:a1:da:7b:38:71:34:5e:4b:99:6f:
                    3d:e0:00:bd:7b:9c:8e:5a:7b:d2:f0:25:0d:a4:84:
                    a2:25:91:f8:87:a4:de:7d:f2:bb:be:f3:d5:50:f9:
                    06:88:ed:d8:6d:31:62:0b:26:83:47:3e:12:8b:b4:
                    cc:b1:1b:bf:c1:ef:33:16:e0:60:5b:a2:e4:94:24:
                    72:c7:0a:72:ac:c4:2a:02:a8:b9:fa:1a:7c:61:4c:
                    ce:55:00:84:59:1b:00:b6:ea:2c:75:ab:41:1f:de:
                    10:f7:3d:17:29:03:6f:0c:9b:25:b4:20:04:ef:35:
                    0f:cc:11:c6:36:5b:b5:8f:7e:3e:a7:77:b7:5a:94:
                    d9:e1:9f:51:bd:3d:3f:83:43:63:6d:24:96:c3:74:
                    bb:f6:bb:6a:0d:b1:83:b9:a1:d9:5c:52:69:5f:a5:
                    53:81:7b:eb:4e:49:51:99:ea:fb:bf:7b:55:c2:10:
                    c4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C9:FF:6B:A0:B2:59:8F:7F:12:38:56:58:9D:A9:74:1D:08:29:10
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:60:90:aa:d0:1a:72:65:6a:19:51:0e:b1:2f:33:bf:28:03:
         db:1a:b0:ad:d2:b6:a5:b0:f4:5f:0f:c0:23:6f:f4:a1:7d:1b:
         84:6c:fd:d5:71:ba:ed:d8:38:39:37:08:6d:e6:56:a8:15:d0:
         26:00:13:01:0a:83:42:04:b8:83:f8:9a:b1:4a:aa:21:db:7b:
         92:b8:22:80:07:2a:11:07:9e:7a:a3:17:d4:ab:d3:23:79:00:
         b2:16:47:5b:76:c2:70:71:38:96:47:a1:bc:44:ae:15:72:1d:
         49:95:01:ea:72:86:bb:d5:14:0d:37:8b:44:9f:2f:d0:47:eb:
         a4:5a:01:2b:f5:d6:d8:8f:d9:ed:8d:26:5f:3c:73:47:56:c7:
         05:0c:5f:a8:cb:5f:f4:15:2c:8f:c1:04:9f:1b:66:ec:42:bb:
         46:31:06:04:e8:59:68:4f:a7:97:d9:37:50:d3:9a:f3:b7:82:
         b9:31:0c:71:71:c6:62:19:99:66:94:d0:24:27:1d:42:a3:64:
         7e:81:d8:b7:96:88:1b:81:b0:a2:3c:9d:c9:b4:ae:ce:e7:92:
         5c:db:23:06:8a:32:8f:b2:88:56:37:32:69:92:e3:99:f5:f3:
         97:5b:d6:45:6e:de:8b:86:8d:80:72:8f:04:30:ed:4b:c9:9f:
         eb:6c:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:58:53 2026 by rpki-client