Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134677.roa
File:                     AS134677.roa (raw, json)
Hash identifier:          tLbuCutox7IgC3wkYYs4inZAbZ6UzFhOKrZ+Hy3f0Ak=
Subject key identifier:   42:91:F3:3E:C6:AA:89:B9:15:A0:81:CF:64:CF:8C:FE:C4:3F:5B:30
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0240245CF6B058BEFC612E3F6C925D3010F056AD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134677.roa
Signing time:             Thu 10 Sep 2026 04:36:20 +0000
ROA not before:           Thu 10 Sep 2026 04:31:20 +0000
ROA not after:            Thu 09 Sep 2027 04:36:20 +0000
asID:                     134677
IP address blocks:        104.234.26.0/24 maxlen: 24
                          104.234.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:40:24:5c:f6:b0:58:be:fc:61:2e:3f:6c:92:5d:30:10:f0:56:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 10 04:31:20 2026 GMT
            Not After : Sep  9 04:36:20 2027 GMT
        Subject: CN=4291F33EC6AA89B915A081CF64CF8CFEC43F5B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:77:f6:9f:ba:a7:84:2d:bb:18:92:e2:30:
                    60:57:13:b4:04:91:dc:2d:57:e1:9c:df:3d:10:8b:
                    4e:72:62:26:10:cf:ad:91:2d:6c:64:cc:c8:7c:a7:
                    8e:96:6c:ca:9b:51:9a:85:a1:60:47:37:9a:cb:02:
                    36:bf:10:69:0c:94:4e:f3:d9:56:71:0f:c2:fa:f1:
                    d9:1c:c0:33:29:d9:a5:72:57:7e:78:1e:4e:1a:5c:
                    3f:79:f2:eb:6c:6f:3f:43:e2:3b:21:b1:4c:17:2c:
                    f7:6e:87:b6:11:1a:6d:b4:a7:c2:1d:28:71:aa:1e:
                    55:6f:5d:4b:da:6b:db:a7:c8:e4:90:44:01:f4:bd:
                    b9:1c:1c:17:11:74:21:25:f4:d9:bd:26:3c:d8:ec:
                    ed:9e:98:ca:fe:49:1e:a5:b7:e0:e5:5f:72:44:24:
                    dc:16:5c:47:83:ac:7a:7e:37:af:6f:35:8a:48:84:
                    a5:a5:11:eb:63:2c:c7:40:65:dc:35:5a:db:78:a8:
                    bf:1b:a8:7f:f2:2d:54:ca:8b:f6:48:c9:bf:b4:2a:
                    ec:55:03:25:24:69:58:1e:8c:c6:be:10:f5:75:8d:
                    d4:be:75:47:8b:39:ff:4c:a9:3a:9f:5b:5f:bc:a4:
                    04:d3:96:58:9e:e3:53:bf:d6:70:ab:e0:a6:d9:2d:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:F3:3E:C6:AA:89:B9:15:A0:81:CF:64:CF:8C:FE:C4:3F:5B:30
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134677.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.26.0/24
                  104.234.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:4f:9e:07:5b:8c:38:b1:7c:24:c9:2f:59:15:41:44:8e:b3:
         de:01:a4:c5:63:0e:8e:39:b1:82:98:d3:39:07:64:2d:e0:de:
         c6:85:ab:10:2b:11:86:a3:b7:9d:6d:92:bd:d5:fe:25:62:8a:
         62:2c:47:85:0e:c6:25:3a:d0:69:6b:46:3c:b1:dc:3d:d7:96:
         74:5c:9c:c6:e6:ee:33:c5:28:26:75:a4:61:dc:11:3e:f1:6c:
         1e:22:0f:65:14:8f:9d:7f:bc:56:0e:57:ce:75:8a:b5:cb:dd:
         01:ec:df:bd:6b:31:a2:c3:e4:b1:68:7b:45:94:cf:ff:ff:54:
         8a:30:6c:83:6c:d6:a5:a2:93:3a:db:4c:1d:f8:bb:cc:1a:46:
         c3:fb:5d:a1:ec:24:04:4d:91:01:43:f0:28:4b:7e:86:b8:d4:
         a2:ab:f8:cb:32:32:97:57:23:ea:35:f9:7a:25:c2:39:fe:72:
         a7:11:7a:7e:2d:52:89:1b:28:c1:73:68:c0:27:2d:fc:d9:e7:
         2e:1d:9b:9b:cd:ed:45:fe:03:e8:9a:47:77:d9:28:f5:b6:15:
         21:2f:4d:99:09:71:4d:f2:27:14:62:64:36:09:37:81:08:cf:
         37:d3:6c:6d:c1:aa:aa:f8:bc:36:6d:30:a5:77:ac:16:ab:13:
         98:3b:3e:0b
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUAkAkXPawWL78YS4/bJJdMBDwVq0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwOTEwMDQzMTIwWhcNMjcwOTA5MDQzNjIw
WjAzMTEwLwYDVQQDEyg0MjkxRjMzRUM2QUE4OUI5MTVBMDgxQ0Y2NENGOENGRUM0
M0Y1QjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttt39p+6p4Qt
uxiS4jBgVxO0BJHcLVfhnN89EItOcmImEM+tkS1sZMzIfKeOlmzKm1GahaFgRzea
ywI2vxBpDJRO89lWcQ/C+vHZHMAzKdmlcld+eB5OGlw/efLrbG8/Q+I7IbFMFyz3
boe2ERpttKfCHShxqh5Vb11L2mvbp8jkkEQB9L25HBwXEXQhJfTZvSY82OztnpjK
/kkepbfg5V9yRCTcFlxHg6x6fjevbzWKSISlpRHrYyzHQGXcNVrbeKi/G6h/8i1U
yov2SMm/tCrsVQMlJGlYHozGvhD1dY3UvnVHizn/TKk6n1tfvKQE05ZYnuNTv9Zw
q+Cm2S13UwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFEKR8z7Gqom5FaCBz2TPjP7E
P1swMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzNDY3Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqGgMEAGjqrjANBgkqhkiG9w0B
AQsFAAOCAQEAwk+eB1uMOLF8JMkvWRVBRI6z3gGkxWMOjjmxgpjTOQdkLeDexoWr
ECsRhqO3nW2SvdX+JWKKYixHhQ7GJTrQaWtGPLHcPdeWdFycxubuM8UoJnWkYdwR
PvFsHiIPZRSPnX+8Vg5XznWKtcvdAezfvWsxosPksWh7RZTP//9UijBsg2zWpaKT
OttMHfi7zBpGw/tdoewkBE2RAUPwKEt+hrjUoqv4yzIyl1cj6jX5eiXCOf5ypxF6
fi1SiRsowXNowCct/NnnLh2bm83tRf4D6JpHd9ko9bYVIS9NmQlxTfInFGJkNgk3
gQjPN9NsbcGqqvi8Nm0wpXesFqsTmDs+Cw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:49:32 2026 by rpki-client