Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa
File:                     AS396163.roa (raw, json)
Hash identifier:          4U7TY8lnuXIpVYOl15Ov+wG4Afg7R4TPDeUPxw7mxAk=
Subject key identifier:   55:DF:66:0D:BC:7D:97:CB:68:CC:2D:9F:E6:99:CE:60:57:05:CD:23
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0FD3A830D7534A951D86301E87B3DBE878FD31BC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa
Signing time:             Tue 07 Jul 2026 22:36:09 +0000
ROA not before:           Tue 07 Jul 2026 22:31:09 +0000
ROA not after:            Tue 06 Jul 2027 22:36:09 +0000
asID:                     396163
IP address blocks:        104.234.21.0/24 maxlen: 24
                          104.234.31.0/24 maxlen: 24
                          104.234.51.0/24 maxlen: 24
                          104.234.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d3:a8:30:d7:53:4a:95:1d:86:30:1e:87:b3:db:e8:78:fd:31:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  7 22:31:09 2026 GMT
            Not After : Jul  6 22:36:09 2027 GMT
        Subject: CN=55DF660DBC7D97CB68CC2D9FE699CE605705CD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:08:24:3d:ef:2b:17:9b:89:0a:88:71:c2:
                    bc:4f:94:29:49:11:de:26:f2:1a:ec:c6:69:d8:9f:
                    ef:ea:5b:29:3e:70:5e:66:78:45:2a:54:59:15:ec:
                    52:3c:93:d3:05:e7:5c:c7:be:31:f1:6a:69:38:42:
                    08:2a:68:30:43:d2:7d:d1:6c:b7:e6:2d:67:ed:bc:
                    33:70:46:ad:44:30:65:6c:8a:ff:e2:75:2d:4f:c4:
                    64:a9:f1:0d:e8:7c:3a:3f:f5:44:b0:6b:1a:e8:81:
                    b5:a6:af:f3:18:84:eb:9a:e4:15:e0:db:8a:99:26:
                    35:4f:ca:61:8d:b0:c8:66:d0:92:8c:da:39:f3:04:
                    75:ad:d0:ef:35:3f:4d:38:e1:3f:ca:72:f1:f9:52:
                    d1:89:d9:b2:aa:f2:97:17:6c:2f:2c:a5:e3:31:8e:
                    b6:9d:b1:08:36:be:39:be:1c:15:39:f1:00:14:28:
                    5d:f8:85:d7:7a:44:69:2d:35:7f:f9:c6:24:4f:f0:
                    52:98:2b:20:f3:74:92:df:44:5b:ee:cd:4a:dc:e6:
                    a1:04:ed:b7:6f:2f:bf:95:2a:1a:dc:7c:ca:2c:1e:
                    40:e7:e8:07:ed:73:d4:1c:c1:e2:e1:c3:07:b4:a7:
                    76:36:52:9c:25:eb:2d:8c:35:ae:14:1a:80:b8:b5:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DF:66:0D:BC:7D:97:CB:68:CC:2D:9F:E6:99:CE:60:57:05:CD:23
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.21.0/24
                  104.234.31.0/24
                  104.234.51.0/24
                  104.234.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:f3:46:b5:8c:e3:84:59:7e:25:41:09:72:e3:97:08:92:
         02:45:bf:c4:85:60:a1:5f:a6:cd:c2:b1:f8:75:94:58:f6:73:
         9a:03:90:20:b4:f5:ca:8c:8b:db:4d:40:66:62:0b:c9:13:ec:
         40:d1:76:1c:ff:1b:ad:5b:ac:b0:c7:b6:07:8b:5c:02:43:1d:
         31:ee:f7:47:15:d0:df:0f:16:34:a0:76:b5:47:00:ab:2f:89:
         5b:b9:f0:96:8f:a2:c8:51:9a:f1:e6:6f:7f:2a:fd:24:5a:25:
         48:fa:02:61:75:25:0a:54:63:38:9f:04:cd:c0:fb:5a:a1:57:
         eb:72:d7:83:9c:3a:fd:c7:b4:85:5e:8e:0b:8f:db:cc:13:53:
         5b:63:1a:ff:2c:89:76:cf:11:a2:1a:31:4a:f7:8e:f6:e5:f8:
         02:53:79:7f:4c:6d:32:82:52:30:70:1a:8b:f8:8d:29:0a:94:
         44:5d:74:60:ae:ff:2b:1d:c6:89:64:08:b9:28:fb:bb:a5:a6:
         11:5b:1f:a4:44:d8:a7:4c:74:27:bf:58:a9:88:c9:63:18:b6:
         4f:46:4c:63:e0:72:3b:51:7a:14:5f:80:40:3e:03:e1:ef:e6:
         de:33:5d:79:55:98:cb:6c:cf:86:73:f4:1d:d2:16:11:c2:21:
         27:fc:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:49:28 2026 by rpki-client