Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS273217.roa
File:                     AS273217.roa (raw, json)
Hash identifier:          y4iZzZOnTkYR0zYRFzH0lZLWhmtd/bT2r8b19APq1Aw=
Subject key identifier:   D8:46:49:34:CD:54:08:FC:55:79:57:3E:8E:F6:D5:C2:19:C5:8F:AE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1F242CBFE079644C2F25AE3E3CA97C2C5DF516A5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS273217.roa
Signing time:             Fri 22 May 2026 13:55:33 +0000
ROA not before:           Fri 22 May 2026 13:50:33 +0000
ROA not after:            Fri 21 May 2027 13:55:33 +0000
asID:                     273217
IP address blocks:        104.234.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 15:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:24:2c:bf:e0:79:64:4c:2f:25:ae:3e:3c:a9:7c:2c:5d:f5:16:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 22 13:50:33 2026 GMT
            Not After : May 21 13:55:33 2027 GMT
        Subject: CN=D8464934CD5408FC5579573E8EF6D5C219C58FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:aa:a3:ea:e2:bd:e6:15:b3:02:f0:a5:5b:
                    da:be:63:9f:60:15:a7:90:d0:d3:d7:a9:46:cf:e6:
                    45:40:18:c6:97:82:29:2b:8b:3b:bf:c3:39:89:87:
                    df:3f:20:65:f9:7f:fa:f8:8f:aa:8d:b2:16:98:6a:
                    71:c5:f8:0a:13:12:1a:5e:c8:4b:ca:ce:9f:7f:f9:
                    13:eb:66:3d:15:cd:04:94:fe:96:64:e8:15:ac:88:
                    48:3a:e1:e6:41:f3:01:01:b4:e8:0e:ca:4b:ac:87:
                    cc:b2:b5:7d:70:11:e6:0c:bf:e2:10:3c:e5:40:97:
                    d1:98:8a:dc:e7:0c:22:35:e2:eb:99:6e:9c:3c:e3:
                    22:2c:0e:4d:a7:5f:42:cb:bc:44:41:8c:6b:28:dd:
                    74:f0:73:b0:38:61:c0:6a:e9:1b:9f:0c:4b:2a:eb:
                    8f:8e:15:01:91:6d:5c:ce:df:16:31:9c:21:35:04:
                    ae:5f:7f:42:4c:c2:0b:46:c5:d6:fe:19:81:f9:74:
                    69:17:fa:41:74:f8:c8:2a:5c:d2:39:65:a4:af:a7:
                    81:c3:93:f7:64:2d:1d:75:28:f9:fa:8b:3d:0a:34:
                    4f:e6:f4:ed:d8:64:96:8f:4d:ef:12:1f:1b:10:ea:
                    c5:b7:6c:b3:10:81:96:6b:f0:72:12:56:f2:41:73:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:46:49:34:CD:54:08:FC:55:79:57:3E:8E:F6:D5:C2:19:C5:8F:AE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS273217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:a1:ff:cd:ba:65:6b:78:28:43:63:a1:f7:d8:b3:95:f6:d4:
         90:62:1e:2c:cf:f1:50:3f:42:11:ef:11:ee:2c:d4:cc:3a:cd:
         78:a1:1d:20:81:70:1c:67:f2:2b:d3:a1:f9:74:49:54:4e:80:
         8f:4b:cb:4e:98:a4:cf:de:67:1c:09:22:d7:b9:2d:cd:39:59:
         98:ed:e5:58:51:c6:18:f9:47:90:74:1c:dc:05:e3:fc:5c:49:
         2e:1e:45:bb:5f:2a:7b:f6:42:3a:0f:c8:fb:89:3d:96:bf:d2:
         c7:f1:83:dd:ee:0d:2a:91:ef:e8:09:79:11:6c:84:2f:3f:10:
         89:6b:df:0b:88:bf:43:cc:cd:a9:57:1b:d1:8b:2f:49:71:fa:
         78:f5:ad:7a:3c:e9:47:5f:7f:f5:bb:67:f8:52:6f:28:be:19:
         86:bc:cd:77:b5:85:fd:85:f0:2a:2a:ab:68:6d:21:d0:d9:33:
         47:d7:5f:23:1d:9f:78:5c:8b:37:3c:9d:b7:9d:49:e4:90:c3:
         6d:d8:b9:c2:3f:85:77:76:f9:43:96:6e:98:37:35:58:39:9d:
         78:5f:c9:df:8d:54:25:a7:95:2b:99:78:14:da:2f:2b:91:b3:
         43:b2:bf:56:33:bc:cf:21:36:74:a9:67:b2:71:61:b4:09:b6:
         a2:1c:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:18 2026 by rpki-client