Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264409.roa
File:                     AS264409.roa (raw, json)
Hash identifier:          MVdlHy6QSzq0Q+IuKr2w+0BIoZ3QP8esZViHI4JpYdY=
Subject key identifier:   92:BE:D0:0B:DB:76:66:6D:08:F8:81:6E:E3:4A:1F:1C:39:B5:FD:DD
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6A73FD1341E734BA123D3312F24AF3A265BA9E58
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264409.roa
Signing time:             Tue 03 Mar 2026 14:35:53 +0000
ROA not before:           Tue 03 Mar 2026 14:30:53 +0000
ROA not after:            Tue 02 Mar 2027 14:35:53 +0000
asID:                     264409
IP address blocks:        104.234.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Mar 2026 20:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:fd:13:41:e7:34:ba:12:3d:33:12:f2:4a:f3:a2:65:ba:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar  3 14:30:53 2026 GMT
            Not After : Mar  2 14:35:53 2027 GMT
        Subject: CN=92BED00BDB76666D08F8816EE34A1F1C39B5FDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:08:47:17:d7:90:52:da:ff:21:72:d8:5d:
                    08:00:14:56:3b:b2:66:b3:23:d9:d5:f9:f3:b0:aa:
                    7d:26:7c:15:08:0a:b5:b8:d0:96:bc:e9:19:1b:1d:
                    95:0e:54:80:d3:f9:5c:84:63:a3:c0:d1:b2:d9:80:
                    64:81:9a:9a:e7:8e:71:e2:e8:01:c3:80:44:48:15:
                    f2:dd:de:d1:dc:4e:9d:21:ad:e0:d8:2f:d1:0e:d2:
                    51:fa:22:4e:da:ac:6c:d8:49:66:25:ae:c9:cc:c8:
                    8f:80:bc:44:a6:f5:2d:5a:17:6e:5d:d3:4c:9f:e4:
                    2b:b0:f8:2f:7e:09:8f:f7:61:24:e5:ab:db:e1:11:
                    82:50:69:4a:68:8b:81:e1:cf:00:fe:51:50:f7:f8:
                    b7:6c:2a:35:8e:cd:3c:b8:62:45:56:40:e2:a6:3d:
                    65:70:1e:1b:43:90:f1:0e:45:86:d2:f5:b8:09:d8:
                    06:0a:17:f6:6c:12:0d:3c:18:e2:44:9a:0d:2c:da:
                    68:03:9d:97:f6:2e:d9:24:31:34:80:39:a1:7c:68:
                    5f:7c:e6:a8:04:67:51:51:b3:cf:af:75:02:9d:4e:
                    08:03:f0:63:61:a7:10:9a:0d:94:38:a8:9d:c5:d0:
                    e7:e2:9b:79:af:ff:2e:b8:27:3b:95:43:5a:62:7e:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BE:D0:0B:DB:76:66:6D:08:F8:81:6E:E3:4A:1F:1C:39:B5:FD:DD
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:a3:b5:e4:79:36:68:a6:90:8a:a9:78:28:cb:b9:59:7d:
         5a:be:b2:05:eb:46:eb:61:dd:6a:bc:6a:3b:66:c0:16:e8:98:
         c3:c3:d3:87:61:81:05:51:e4:f6:a5:37:10:64:55:77:e5:95:
         5d:77:fd:16:83:ce:ed:7c:86:af:d4:7d:f9:c3:17:9b:93:b3:
         e5:22:ee:13:f4:6b:b2:94:16:da:c6:a3:be:11:07:36:cd:4a:
         2f:6e:41:c6:6e:83:dd:27:41:e1:ee:fe:08:fa:43:a9:1a:38:
         2a:0c:96:73:40:b9:f8:0c:a7:f9:f4:22:6e:80:e7:8e:0e:cd:
         df:c3:8a:db:83:f5:b4:f0:a0:a4:ad:c5:5c:91:11:91:9b:a5:
         f2:05:51:89:e0:52:0c:9e:d2:f4:32:93:89:a8:53:2c:a5:e3:
         c4:2c:70:48:92:a0:9f:71:e0:86:bb:1d:10:a0:b8:68:6e:d1:
         c5:fc:31:8a:09:a2:36:8e:30:0f:7f:3b:05:a0:bb:df:08:27:
         53:5c:81:36:ff:63:df:17:c4:5a:e9:70:a4:91:68:6b:75:4c:
         5f:f7:7a:67:b4:37:57:23:82:93:f0:02:b9:32:69:34:24:12:
         5f:81:92:20:c3:f9:cb:8e:ab:f8:54:6c:d1:31:e7:e5:83:a9:
         09:f9:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 07:24:54 2026 by rpki-client