Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          lJcOe/lSdFTdqM4Dx7Hpz5bXID9WXQp7JW0x5OGuvRw=
Subject key identifier:   86:39:BE:6A:B3:A8:3D:63:DB:B1:1C:5B:14:07:D5:65:2F:0F:CB:06
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       41910CE7A47F3D61B1009F3D3A19DEEE4A1B2D93
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152179.roa
Signing time:             Fri 18 Sep 2026 12:26:33 +0000
ROA not before:           Fri 18 Sep 2026 12:21:33 +0000
ROA not after:            Fri 17 Sep 2027 12:26:33 +0000
asID:                     152179
IP address blocks:        104.234.229.0/24 maxlen: 24
                          206.53.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:91:0c:e7:a4:7f:3d:61:b1:00:9f:3d:3a:19:de:ee:4a:1b:2d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 18 12:21:33 2026 GMT
            Not After : Sep 17 12:26:33 2027 GMT
        Subject: CN=8639BE6AB3A83D63DBB11C5B1407D5652F0FCB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:fd:d4:a7:e7:e4:d0:30:24:3b:09:ce:c8:
                    47:c5:9e:8d:3c:0a:8f:86:c7:12:df:00:de:67:a8:
                    bd:57:ab:c0:82:49:1f:52:62:4f:e8:94:79:a9:a8:
                    6c:e2:f1:d1:8d:2d:d0:86:8e:db:a3:bb:d7:ba:60:
                    1d:94:7a:41:5c:b6:f4:f8:3d:d8:2b:c5:c2:38:3a:
                    27:ec:3d:cc:a4:50:08:04:29:a8:f9:54:34:3d:b6:
                    fc:c4:a6:e0:69:a4:87:d4:dc:32:dc:70:c1:37:30:
                    31:9f:9f:17:bf:0c:49:16:e2:24:bf:bb:9a:9b:4e:
                    46:9f:9e:f1:b7:39:96:2b:40:27:33:22:c5:cd:2e:
                    23:e7:ca:8f:c4:86:42:76:5e:20:e2:06:f4:b5:02:
                    51:fe:8b:aa:15:43:15:74:1a:8f:97:5e:53:c1:24:
                    b6:64:5d:a8:88:8b:0e:e4:ec:8a:a7:c0:65:ce:be:
                    42:31:5d:6f:bf:02:24:62:54:95:a7:f9:ef:65:13:
                    77:8c:03:ed:e5:6c:b0:d0:26:b2:ad:73:6f:2e:3e:
                    6d:b2:4a:b0:f2:7f:bd:c5:2d:f4:a5:8b:7a:5a:d5:
                    c7:f0:fd:ee:95:b0:42:20:16:c9:77:58:ed:4b:25:
                    11:c7:67:2d:5a:59:2b:4e:71:aa:07:bc:d5:a7:c7:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:39:BE:6A:B3:A8:3D:63:DB:B1:1C:5B:14:07:D5:65:2F:0F:CB:06
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.229.0/24
                  206.53.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:56:44:20:c6:46:fc:52:0f:46:61:d9:d7:74:3f:08:3d:16:
         ca:02:bd:f5:7b:8d:fb:2c:72:3c:9d:2a:a9:a1:63:8f:f5:0f:
         d0:93:1b:02:e9:21:a7:41:1b:7d:f2:b3:98:48:51:95:5a:95:
         af:41:1e:94:cf:dd:db:72:0e:4e:0d:bd:53:54:6b:51:7a:0c:
         41:f1:dc:08:db:03:1f:a5:44:f8:f9:32:f7:9e:8d:71:66:81:
         4f:ae:d1:a8:a1:ed:54:a5:d8:03:44:46:49:10:cd:e3:9d:62:
         09:e5:65:21:04:5b:2a:fc:4a:9d:d9:75:fb:a4:4b:a0:43:8a:
         79:07:90:ae:c2:6d:21:1c:cf:13:73:c3:0a:72:8c:6f:71:fe:
         b3:e0:03:78:37:32:4e:bd:c1:37:10:54:d6:7b:3c:6d:3d:3a:
         92:1b:ec:6b:2b:19:d5:6e:11:fc:f2:23:50:c7:c6:d2:50:67:
         ad:7b:80:32:db:2e:1a:4b:4f:fa:55:f7:ca:46:38:44:50:89:
         cb:b1:69:c2:64:bf:4b:66:b5:a9:94:ae:46:45:f3:b7:1c:72:
         32:12:02:ae:10:2c:bd:cc:77:32:b5:42:b3:bc:5b:51:39:10:
         d4:91:ff:5f:44:b8:b2:86:c9:49:4b:2d:1e:1e:f4:11:f3:10:
         b4:b4:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:57:08 2026 by rpki-client