Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137410.roa
File:                     AS137410.roa (raw, json)
Hash identifier:          wSJiInISvAOFoncg2nzFQobSnon9xV+YMiftiz57uTQ=
Subject key identifier:   F8:BE:EA:B5:C2:1D:2A:7D:E4:2F:0E:CE:77:EE:55:CE:D1:23:57:D4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7DBDBD5414FF9CBCDAB899C335E503C687746C43
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137410.roa
Signing time:             Wed 04 Nov 2026 09:15:07 +0000
ROA not before:           Wed 04 Nov 2026 09:10:07 +0000
ROA not after:            Wed 03 Nov 2027 09:15:07 +0000
asID:                     137410
IP address blocks:        104.234.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 01:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bd:bd:54:14:ff:9c:bc:da:b8:99:c3:35:e5:03:c6:87:74:6c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov  4 09:10:07 2026 GMT
            Not After : Nov  3 09:15:07 2027 GMT
        Subject: CN=F8BEEAB5C21D2A7DE42F0ECE77EE55CED12357D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:81:d9:8b:bd:19:10:1a:2b:bc:5e:11:e5:
                    e5:1d:f5:b3:27:29:b5:5c:94:16:01:80:66:de:dc:
                    08:c2:bb:5e:2a:91:3c:36:1a:9c:8b:4f:a9:46:b1:
                    3e:a2:36:bc:f4:ef:a8:ce:53:38:f6:ba:f8:a3:22:
                    d5:b8:94:2c:a1:8b:e8:09:bd:98:21:31:36:1c:9c:
                    ed:4b:b8:52:64:94:1e:fc:5c:c6:3c:80:29:42:ea:
                    a5:f0:c1:31:4a:84:7f:25:6f:f3:53:c4:ad:77:01:
                    0b:c7:de:ab:3b:1e:b5:34:2d:e8:45:37:3a:fb:a4:
                    50:78:fc:ea:cc:ba:a6:0a:49:b2:33:7f:dc:f9:b7:
                    bc:8b:72:7e:54:b7:f7:68:25:87:6e:1a:1a:53:13:
                    8f:90:d2:72:59:f0:48:86:aa:90:dc:89:ed:02:37:
                    64:02:1b:b9:b6:6e:38:ae:c9:87:e2:40:27:41:57:
                    31:9f:5c:6e:28:2e:3c:20:c6:96:9e:ee:cc:c9:4c:
                    29:91:21:0b:cc:41:0d:df:57:bc:b4:f8:9e:79:ee:
                    1e:2a:2e:84:93:3c:b8:76:6a:82:b2:90:2a:fa:94:
                    ff:8c:14:a1:12:05:e8:2a:2e:b5:9d:2c:73:8b:0f:
                    9d:b7:39:4a:8b:0d:47:63:6d:2b:90:9e:ad:cb:cc:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:EA:B5:C2:1D:2A:7D:E4:2F:0E:CE:77:EE:55:CE:D1:23:57:D4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137410.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:dc:11:15:18:bc:35:86:21:1c:ba:8c:9d:04:f4:76:df:
         49:1b:bd:93:fd:f3:6e:fc:26:7f:8f:fa:68:47:08:32:cd:6a:
         15:36:ba:72:60:69:a6:b7:70:95:66:2a:04:d4:f7:a3:89:82:
         99:d6:ab:d0:aa:23:02:12:98:1e:1c:0d:cd:1a:0e:95:0b:a8:
         78:01:1f:e9:f2:48:24:f8:ea:c9:72:83:c2:cf:18:e4:81:84:
         cc:0d:46:b3:1e:4f:90:14:2f:cf:ff:f4:cc:22:cd:03:6f:e3:
         68:50:76:5b:a2:8d:1f:dd:78:d3:ad:fd:81:70:3b:3d:fa:f3:
         90:56:2c:5b:4d:d9:4a:21:f9:24:a5:2e:bb:d9:cc:92:e6:c6:
         e9:19:0d:93:07:99:48:fb:cb:c5:0c:b8:02:61:3f:50:eb:6b:
         ae:19:39:a3:07:ad:d1:a4:8f:81:ce:cb:08:c7:57:3b:a3:37:
         1b:0e:8c:76:6a:65:06:da:2c:67:d3:96:57:46:bd:ac:b4:45:
         e9:d9:08:85:74:f4:9a:5a:79:af:81:d8:9b:06:41:54:0e:61:
         1a:f3:5e:b9:a3:a0:25:c1:63:f1:61:92:82:ad:27:64:18:58:
         22:1a:1d:fe:04:25:a4:d2:ee:c8:64:c0:c2:36:2f:c8:f5:4a:
         c3:f2:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:11 2026 by rpki-client