Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402215.roa
File:                     AS402215.roa (raw, json)
Hash identifier:          39ZgZdXATQNGtFa/vslDNF7tyCGC/0dVHe/OPZ68KMU=
Subject key identifier:   07:5B:EC:EC:E2:2D:16:D9:54:89:6F:2B:F2:5A:A6:AF:E3:3F:F9:BC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       48297F786A71FB48BDD6431FB2C3EFAB833ACDE2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402215.roa
Signing time:             Wed 27 May 2026 05:37:31 +0000
ROA not before:           Wed 27 May 2026 05:32:31 +0000
ROA not after:            Wed 26 May 2027 05:37:31 +0000
asID:                     402215
IP address blocks:        104.234.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 14:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:29:7f:78:6a:71:fb:48:bd:d6:43:1f:b2:c3:ef:ab:83:3a:cd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 27 05:32:31 2026 GMT
            Not After : May 26 05:37:31 2027 GMT
        Subject: CN=075BECECE22D16D954896F2BF25AA6AFE33FF9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:e0:07:c8:32:d0:d4:ad:78:f7:4f:71:ed:
                    9c:19:7f:3a:70:14:12:0d:49:83:cb:d7:1f:cf:67:
                    80:05:83:a6:d9:50:21:25:0f:7e:93:e2:5c:86:e4:
                    40:c2:4b:e4:59:83:67:59:67:53:bd:ea:c7:5e:8f:
                    03:1b:42:2d:05:b5:a5:a2:98:18:ad:b7:94:00:03:
                    ce:19:c0:94:87:cb:d8:89:76:a9:44:4a:af:00:67:
                    6b:ed:d7:c6:69:57:f8:4c:03:bb:76:97:f2:ff:aa:
                    69:8b:9d:1e:96:6f:29:b9:1d:a1:e6:57:14:26:82:
                    d0:0a:c3:03:7c:82:f9:b4:58:0b:98:c2:17:ce:a2:
                    4f:d2:a4:eb:55:7b:9b:41:23:21:8c:76:5d:d9:61:
                    06:92:33:e1:57:1d:84:7f:39:5c:76:89:fd:b3:1d:
                    bb:4d:83:0d:66:ce:a7:ca:56:12:fb:cc:5a:fe:d8:
                    8d:7d:3e:a6:17:68:01:d0:5c:21:2b:3c:a7:a4:a0:
                    b2:db:37:ad:5c:09:eb:73:bd:f0:14:d8:1c:ba:ac:
                    c7:a5:4c:00:2f:a4:20:0e:45:03:56:c3:37:32:8c:
                    35:dd:f3:78:1f:d5:53:43:0c:4b:f0:04:ce:13:0b:
                    25:11:59:fa:78:92:13:71:90:58:d0:fd:78:8b:7b:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:EC:EC:E2:2D:16:D9:54:89:6F:2B:F2:5A:A6:AF:E3:3F:F9:BC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:46:a9:1e:0d:ff:81:98:21:19:04:24:9c:4b:da:2f:c7:ed:
         ca:f2:60:55:55:64:ab:c7:7e:ff:5a:da:9d:9b:ec:47:a2:77:
         a4:a8:30:bc:77:ef:66:20:e5:c7:8c:4a:ed:ba:11:85:62:bb:
         11:fd:fc:6a:09:41:79:06:cc:f8:50:96:fd:d1:67:ed:86:1d:
         fc:88:fd:fc:d1:a3:b1:ce:bd:57:3f:54:3f:96:67:fa:d3:65:
         83:97:23:d1:c9:a1:fa:65:5f:a7:9e:00:fd:83:49:bf:34:19:
         67:4f:bc:ac:5b:f9:9e:ee:d1:1c:23:f8:93:e9:07:75:58:5b:
         ea:dd:92:54:2f:db:91:a4:d4:85:f5:96:58:64:fe:7f:75:db:
         a1:cb:e2:02:3f:5c:71:25:c6:4d:a5:8e:1f:c9:68:0e:69:24:
         3b:f7:35:a4:e7:a2:b4:b9:17:75:90:03:f1:37:04:68:ab:d2:
         65:dd:ae:5f:6e:32:47:bb:62:d1:bf:f9:34:dc:f0:95:96:be:
         3f:27:da:8c:8c:db:7c:f9:a0:8a:2e:c7:c5:35:10:bb:55:b3:
         37:60:fd:61:5d:f4:f2:13:44:fb:72:a0:75:b3:a5:20:d0:ae:
         c3:ce:89:37:9e:3d:2d:76:f5:76:21:15:f1:b9:5c:4b:8a:75:
         2c:99:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:54 2026 by rpki-client