Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402507.roa
File:                     AS402507.roa (raw, json)
Hash identifier:          9OstJ271ETr3i8fv2nabH4E19BKrJRmohpMkspQfvGk=
Subject key identifier:   72:57:EF:27:1F:C6:E5:E1:C2:40:C6:30:86:4A:0F:10:BC:2F:9D:71
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       23C474398723464FC507C2E7E06917CDE79DC5F6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402507.roa
Signing time:             Fri 05 Jun 2026 13:10:32 +0000
ROA not before:           Fri 05 Jun 2026 13:05:32 +0000
ROA not after:            Fri 04 Jun 2027 13:10:32 +0000
asID:                     402507
IP address blocks:        104.234.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 15:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c4:74:39:87:23:46:4f:c5:07:c2:e7:e0:69:17:cd:e7:9d:c5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  5 13:05:32 2026 GMT
            Not After : Jun  4 13:10:32 2027 GMT
        Subject: CN=7257EF271FC6E5E1C240C630864A0F10BC2F9D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:90:df:d6:8d:54:ee:e5:34:00:1d:99:7e:
                    22:9c:74:50:dc:aa:4e:43:da:61:a6:e2:a8:2b:14:
                    ef:d2:a3:e1:cd:02:9c:0c:10:9b:19:bd:11:8f:0c:
                    a2:ed:73:31:d7:7c:b4:c1:2a:4a:88:18:15:ed:ae:
                    88:d0:42:65:ed:08:74:67:84:b2:39:da:d7:dc:45:
                    c4:de:4f:00:00:c4:71:bd:35:e7:01:d0:9f:26:f5:
                    3e:07:c2:bb:fa:1c:9c:c4:4f:00:39:29:4d:88:d3:
                    f8:c7:77:f6:a9:56:ea:bf:04:9a:f1:b7:da:ee:bf:
                    22:ee:13:07:8b:91:2c:b3:33:24:0b:62:38:89:3f:
                    a0:ab:73:bb:38:01:a6:23:35:26:31:b0:db:11:37:
                    b4:98:cc:e0:8d:1f:db:1f:0a:fe:ea:2e:d9:0f:ee:
                    ba:e2:89:86:db:49:4f:8a:bf:04:b5:a7:37:27:18:
                    df:1f:d5:6b:93:48:a5:49:0e:c7:4c:55:8a:75:58:
                    31:62:36:b7:d4:37:6c:26:58:29:1a:f1:41:9e:62:
                    d5:db:90:e3:d0:88:e3:f3:6c:08:e9:f3:86:4a:d2:
                    f8:05:1f:a5:42:e2:77:c9:63:96:12:60:8d:8d:d4:
                    a0:5d:71:3d:ca:72:3c:fb:1b:55:b2:29:2f:f9:91:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:57:EF:27:1F:C6:E5:E1:C2:40:C6:30:86:4A:0F:10:BC:2F:9D:71
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402507.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:35:c6:c5:bf:6a:2f:dc:e7:58:94:f9:cb:a6:3f:6b:c0:
         59:ec:25:1f:d6:dc:ff:39:5b:71:a1:be:90:0f:10:a2:80:52:
         ee:d5:d7:79:42:75:85:d3:87:1e:92:c9:c1:99:f5:d2:01:b3:
         81:ee:fa:c5:1f:73:c7:fc:56:8a:03:75:69:cc:0c:09:97:80:
         4f:0e:01:53:aa:65:0a:61:c8:a7:da:d6:38:f8:d3:cd:17:6d:
         83:26:c1:44:fe:eb:9f:66:29:79:d2:b3:5c:11:a4:de:1f:04:
         0c:a8:60:14:36:b6:52:0c:01:e5:35:00:41:a1:d7:38:72:ab:
         63:06:f7:a9:5e:95:e6:9b:d8:2d:bc:6b:fd:46:bc:1d:22:d8:
         65:78:90:04:d8:e8:b6:23:ce:32:7f:5a:06:3c:e9:a1:e6:ef:
         10:86:92:e0:9f:b8:6f:fa:34:bd:7e:78:96:50:ae:03:84:bf:
         82:70:4d:69:88:34:90:e4:1b:7b:c4:82:67:03:2c:ab:44:6e:
         4e:fa:5f:e8:e0:62:88:a9:13:a5:80:bb:f7:7e:d7:0b:4d:16:
         2c:aa:a3:e3:bf:db:56:30:88:a0:57:a4:72:4a:62:cf:72:77:
         94:c0:94:2e:a2:35:51:cb:77:e7:02:9d:e3:1e:9c:df:0e:f1:
         0d:ca:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:18 2026 by rpki-client