Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
File:                     AS399641.roa (raw, json)
Hash identifier:          Uoe0DYaqgXHXBdOYCUbF1YLEHQl8ub1LP6w+WEAtQKo=
Subject key identifier:   4D:8E:1D:63:22:F6:F6:1A:29:15:3E:4E:88:E6:D4:F4:45:C4:89:32
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       694E46A20261C4E1E2D3E8F9F3BFD3BCC6123BE6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
Signing time:             Fri 07 Aug 2026 21:36:19 +0000
ROA not before:           Fri 07 Aug 2026 21:31:19 +0000
ROA not after:            Fri 06 Aug 2027 21:36:19 +0000
asID:                     399641
IP address blocks:        104.234.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4e:46:a2:02:61:c4:e1:e2:d3:e8:f9:f3:bf:d3:bc:c6:12:3b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  7 21:31:19 2026 GMT
            Not After : Aug  6 21:36:19 2027 GMT
        Subject: CN=4D8E1D6322F6F61A29153E4E88E6D4F445C48932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:dc:90:81:c8:9d:69:08:69:43:23:a9:fe:
                    5a:a7:1e:5d:f3:d8:85:54:73:43:4c:b3:e1:7c:34:
                    c4:7c:d8:a2:f9:e9:02:ba:f4:7a:72:1b:c7:bc:23:
                    2d:5b:ff:10:35:5e:df:70:9b:ce:f9:55:9b:ff:12:
                    42:4a:a6:32:37:70:a6:6d:19:70:5e:5c:fd:44:c1:
                    d7:f2:24:1c:1f:59:1e:bb:e6:8e:3f:2d:7f:a3:4f:
                    93:70:1b:5a:44:15:b6:a7:f2:b5:95:4e:7e:02:22:
                    b6:b0:5a:9c:a4:16:fd:21:c2:ef:34:fb:48:ab:15:
                    2b:8c:25:94:9d:eb:b8:2e:da:6d:45:05:58:2a:22:
                    d5:96:ea:58:8e:10:30:f4:70:55:d1:75:7a:54:d4:
                    27:52:1a:2f:bf:25:37:69:e6:78:f4:62:d1:e3:7d:
                    f1:67:ce:63:c7:fa:00:5a:84:bf:43:80:b2:f1:0e:
                    04:c5:ae:d2:ad:2c:aa:95:78:26:36:91:62:8f:fc:
                    5a:fc:4a:25:ba:35:29:7c:63:66:0a:a6:27:8d:e2:
                    e8:f9:46:fc:b5:bc:97:c0:c0:0a:62:b8:50:83:22:
                    5c:20:ab:06:9f:3f:67:8f:7b:7e:c5:ba:99:00:05:
                    8f:ba:90:99:48:23:70:f6:6f:f0:f0:2a:77:15:e2:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8E:1D:63:22:F6:F6:1A:29:15:3E:4E:88:E6:D4:F4:45:C4:89:32
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:3f:74:fa:35:1c:40:b7:d3:17:ce:7e:f3:5d:26:36:f9:
         cf:05:cf:ec:2e:0e:51:11:8f:96:72:c7:8e:53:df:1b:05:56:
         8e:8e:6d:42:e3:97:b0:13:ae:b2:11:4b:53:ab:83:0a:8b:cd:
         02:87:fc:31:17:25:fc:4a:20:df:b6:5d:79:b5:d6:03:63:6e:
         5b:6b:9c:ce:d9:f0:fe:33:60:cf:fa:94:7c:f7:e6:ef:c6:05:
         1b:a8:0a:8b:df:cc:25:e0:64:33:ca:29:05:61:c0:94:b1:01:
         01:8c:0d:04:a5:9a:1a:5b:3e:31:ff:3b:db:9b:33:95:1d:dc:
         74:1e:74:ed:c4:36:db:2f:fd:d0:fc:c6:e0:51:df:4f:60:77:
         08:8d:61:76:0a:07:71:b3:db:57:bc:eb:73:e9:17:79:99:29:
         5f:a0:e5:9b:b3:ec:b0:88:22:28:3d:5e:6d:af:86:0c:7e:f4:
         cb:d9:5f:4d:79:b9:36:eb:d2:f2:2d:62:0e:9a:8f:c7:e0:a7:
         00:bf:f0:9d:b3:49:a0:8e:4b:5f:b2:8b:e1:b4:f3:18:fa:f3:
         ff:10:b7:1a:55:e2:b3:d5:76:9e:ea:cd:fc:7b:08:74:bb:90:
         b5:ba:aa:71:83:cf:b4:67:f2:5c:21:11:ce:b4:26:97:ae:7b:
         d3:22:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:07:37 2026 by rpki-client