Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa
File:                     AS270764.roa (raw, json)
Hash identifier:          PIwl7vnH0JHhhLwDqR1PNbgLa3ib2o7UXa41VXUQrU4=
Subject key identifier:   8C:C4:77:80:E7:8A:4C:89:E1:A0:EE:93:A8:9A:F4:B3:BA:AF:76:20
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       25F183AA1B9AEC2E692564D684D76996A5005B06
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa
Signing time:             Tue 07 Jul 2026 00:36:09 +0000
ROA not before:           Tue 07 Jul 2026 00:31:09 +0000
ROA not after:            Tue 06 Jul 2027 00:36:09 +0000
asID:                     270764
IP address blocks:        104.234.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 14:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:83:aa:1b:9a:ec:2e:69:25:64:d6:84:d7:69:96:a5:00:5b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  7 00:31:09 2026 GMT
            Not After : Jul  6 00:36:09 2027 GMT
        Subject: CN=8CC47780E78A4C89E1A0EE93A89AF4B3BAAF7620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:33:ef:3b:bb:22:72:af:e3:c3:21:d7:33:
                    27:dc:d1:b7:11:fb:d3:82:f6:15:0e:48:f7:e5:ea:
                    26:99:d1:a4:70:ec:a0:7a:60:5d:a0:24:33:aa:12:
                    31:e0:44:8c:60:11:e6:8a:05:e6:81:74:22:0a:64:
                    21:9d:b1:f1:a5:e0:fc:80:05:a0:ac:13:03:90:e0:
                    b0:c1:e9:ab:9f:99:b3:a4:03:20:71:9f:3a:36:2d:
                    6c:ab:75:31:2a:9d:3b:82:87:ef:96:0d:ef:13:30:
                    6e:31:59:c4:fa:92:93:1a:02:1b:cb:b8:59:35:32:
                    da:f7:9e:d3:a0:c5:98:e5:3d:cd:0b:ce:48:11:8b:
                    86:c4:38:f6:62:bc:72:eb:2d:09:4f:48:68:02:7f:
                    22:7e:5f:8e:05:31:6d:f4:a8:5a:4e:ef:de:d1:cf:
                    cc:3a:a9:d3:89:7e:d4:33:6b:aa:f1:0e:6a:f4:97:
                    2b:be:5b:97:c4:67:42:05:66:ba:28:f0:25:63:02:
                    62:74:4b:b1:82:c7:e1:90:d2:65:ea:e2:17:a5:c4:
                    10:d4:b7:5c:74:46:93:14:ed:4d:b1:23:d3:59:c1:
                    2d:a0:fa:8a:ab:a1:9e:9b:19:bd:9e:8a:3e:c8:28:
                    6e:ac:3a:91:dd:13:b2:0e:c9:85:b1:d5:69:32:f3:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C4:77:80:E7:8A:4C:89:E1:A0:EE:93:A8:9A:F4:B3:BA:AF:76:20
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:3a:9e:d3:ee:1d:60:47:48:66:3d:31:e4:e8:22:14:df:
         85:84:7d:0d:95:02:72:39:c3:8c:df:87:1a:b2:f4:5e:93:6d:
         10:2f:df:fa:88:46:cf:25:30:5b:89:cd:d8:15:c8:2f:5b:43:
         7c:be:af:e8:c5:06:e9:9a:fd:fc:39:c2:05:bd:f0:4d:19:1b:
         8b:33:bc:06:71:90:a8:49:76:59:84:a8:5e:d0:37:cd:d4:f0:
         73:62:bc:3e:e4:b3:a3:e2:97:f2:fd:a6:78:b7:09:fe:06:7f:
         41:12:0e:64:8b:2c:9f:0c:09:f6:2a:b9:14:c9:be:79:df:fa:
         11:38:86:0e:be:8c:f2:fd:eb:ea:ec:47:94:c1:43:65:e0:5d:
         99:61:51:1b:55:e4:75:60:f4:60:5f:47:2c:82:1a:f8:6b:6a:
         10:e7:99:29:19:d5:4e:26:53:71:04:80:07:39:30:53:93:96:
         19:d7:34:0e:f2:57:3f:b8:09:cb:5e:fb:93:a5:49:86:39:67:
         99:ca:21:1a:88:22:78:b5:ae:75:a7:dc:33:c2:9e:af:5d:09:
         01:9a:20:b7:93:e3:ca:d8:a4:e9:90:ae:79:bc:21:a2:de:2d:
         04:2e:38:bc:74:0e:0a:09:f1:8d:db:58:6b:2e:1d:49:5d:41:
         69:b2:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:01:44 2026 by rpki-client