Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64199.roa
File:                     AS64199.roa (raw, json)
Hash identifier:          FBKnf2j/xNBQZY18FW8GTQuBm6BCz6CFaFFKKYY4aGY=
Subject key identifier:   8D:8F:1D:A1:D1:D5:DB:AE:D9:0D:E4:73:3F:AB:0E:B2:96:F6:4E:FE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       543653DF607D7F4E5DD727C48B7F7C7699FC658C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64199.roa
Signing time:             Wed 23 Sep 2026 19:36:20 +0000
ROA not before:           Wed 23 Sep 2026 19:31:20 +0000
ROA not after:            Wed 22 Sep 2027 19:36:20 +0000
asID:                     64199
IP address blocks:        104.234.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 14:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:53:df:60:7d:7f:4e:5d:d7:27:c4:8b:7f:7c:76:99:fc:65:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 23 19:31:20 2026 GMT
            Not After : Sep 22 19:36:20 2027 GMT
        Subject: CN=8D8F1DA1D1D5DBAED90DE4733FAB0EB296F64EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:85:68:3c:07:ab:c5:2a:b4:9c:3f:33:f4:
                    31:fa:05:3e:a5:63:3a:d6:c3:e4:0f:a4:00:ce:cb:
                    9b:8b:30:b4:9f:46:de:3d:e5:14:ac:4d:81:4d:8d:
                    3c:12:4b:4f:c6:89:83:a3:71:04:45:cc:8f:2e:26:
                    da:7b:74:d0:78:54:eb:e2:2d:0f:d9:a6:8a:7f:04:
                    43:e2:56:ac:73:1e:63:1c:40:49:7d:cf:c0:31:47:
                    52:69:93:31:a8:f5:91:25:84:da:b7:9b:99:28:b0:
                    ce:15:e9:c1:45:8b:c2:6e:a3:ec:9a:08:47:ad:a2:
                    d2:f7:cd:aa:87:b0:8e:0c:1a:ec:9c:80:0d:71:93:
                    04:55:53:9f:03:83:f2:13:da:a3:cb:d5:dc:c8:1c:
                    95:5f:39:f2:b4:0c:97:3c:fa:c4:40:8c:b0:1c:17:
                    92:31:9d:53:0d:f5:14:7b:e3:51:7a:09:6b:07:b9:
                    de:32:66:23:ba:aa:64:ca:99:a5:d0:6d:d7:50:9d:
                    62:3c:3b:43:29:40:7f:5f:21:32:f7:d2:4e:ac:96:
                    7d:5e:a1:58:c5:91:6e:d0:57:ce:9f:28:24:cf:91:
                    81:40:b9:1a:2b:d9:8c:e3:b4:77:48:cb:48:d1:d7:
                    23:cc:35:aa:3a:98:c9:b6:fe:0c:d3:16:27:32:6d:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8F:1D:A1:D1:D5:DB:AE:D9:0D:E4:73:3F:AB:0E:B2:96:F6:4E:FE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3a:c9:d4:59:bb:01:f3:a5:d0:92:38:c6:cc:cd:36:ae:b2:
         0f:a4:f4:df:a7:61:32:20:51:6f:30:f4:27:a1:08:44:71:09:
         d5:66:9f:40:a1:1e:34:67:6b:89:9c:20:4c:4e:ce:73:d9:ef:
         de:57:a8:1b:e5:77:8b:dc:76:36:93:58:df:28:fd:19:bb:19:
         a5:58:8a:0c:5d:00:bb:ce:94:94:cd:a7:6d:24:b7:d7:be:23:
         15:33:2f:01:a3:e6:ee:28:cc:b0:3d:35:96:52:f2:5e:b8:4c:
         35:cb:e9:2a:cb:08:d2:a7:0e:4e:d8:b6:61:f8:98:aa:8a:bc:
         48:59:ee:56:76:1a:f4:0d:6c:4f:1b:39:bc:62:93:15:fd:1f:
         39:e8:ce:5a:d8:d8:9f:2a:a4:b2:e8:3f:44:93:3b:89:23:7e:
         31:84:a7:c6:bb:88:3e:50:0b:ea:f6:8a:58:24:a8:98:94:9b:
         62:34:6f:ba:b8:ba:6a:55:3f:1a:92:16:6c:cd:f2:78:4f:45:
         c4:03:21:16:10:a9:80:e8:0c:ef:95:9a:07:4f:83:f8:7a:55:
         f0:f6:ed:a2:e4:bc:50:e0:94:4c:8a:6c:5f:ae:ff:91:59:e3:
         1c:77:89:57:28:87:09:fc:99:80:3f:f8:69:5c:c7:10:bd:df:
         33:26:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:50:26 2026 by rpki-client