Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153671.roa
File:                     AS153671.roa (raw, json)
Hash identifier:          Oj5gzl+680HrRx6LB5yYni5zTssRXq1oSV+KNqB+EjU=
Subject key identifier:   E0:B0:C4:DE:69:D5:60:C6:38:7D:16:6C:9C:1E:2C:DD:EF:8C:89:F7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       51206C4027FFA07CAAEDAB7FF6A6A081B31BFD00
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153671.roa
Signing time:             Fri 10 Apr 2026 08:26:04 +0000
ROA not before:           Fri 10 Apr 2026 08:21:04 +0000
ROA not after:            Fri 09 Apr 2027 08:26:04 +0000
asID:                     153671
IP address blocks:        104.234.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:20:6c:40:27:ff:a0:7c:aa:ed:ab:7f:f6:a6:a0:81:b3:1b:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 10 08:21:04 2026 GMT
            Not After : Apr  9 08:26:04 2027 GMT
        Subject: CN=E0B0C4DE69D560C6387D166C9C1E2CDDEF8C89F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:28:b4:10:ee:ed:18:eb:fe:e8:cc:d0:e7:
                    b5:44:b7:4c:92:1f:64:dc:72:37:b2:07:95:25:da:
                    be:5e:d1:69:a1:74:57:0d:ec:9a:8a:96:06:41:a9:
                    b2:c6:33:ba:91:62:af:22:ee:ed:ef:3b:1b:8d:9c:
                    86:88:4b:9d:ab:1f:fd:88:87:69:3f:e5:af:31:6c:
                    44:48:a0:be:0f:22:a3:87:31:fd:3f:39:db:21:2f:
                    8c:24:9a:46:c4:c5:19:66:29:5a:fa:0a:ca:4a:6a:
                    05:01:0d:30:5a:7a:6f:a4:1f:56:e9:f3:d2:38:39:
                    6a:88:0d:8f:1d:ef:46:89:63:70:58:3a:a9:30:1d:
                    ad:de:93:40:56:4a:42:24:85:5e:50:a8:29:28:b2:
                    25:87:88:c2:97:4c:e6:aa:82:57:86:13:0c:62:fe:
                    ec:b8:0d:37:8b:64:90:90:6f:5e:48:54:91:7c:aa:
                    b1:f0:01:ca:09:3e:61:90:d6:51:63:c7:cd:57:a2:
                    f4:b8:3d:d6:a6:25:c8:7a:5c:14:5d:fe:13:60:88:
                    7d:49:dd:93:69:98:c6:42:86:f0:c3:d5:0e:11:12:
                    22:c8:95:47:06:a7:28:57:bf:ea:03:90:1e:80:12:
                    d8:58:f7:69:f0:f4:bc:3c:28:ad:c3:1c:e7:29:8b:
                    a7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B0:C4:DE:69:D5:60:C6:38:7D:16:6C:9C:1E:2C:DD:EF:8C:89:F7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153671.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:32:fa:e7:0c:ec:e4:bb:d7:f7:8f:6f:93:d9:30:1f:4b:
         bc:8c:73:16:49:a1:9e:ef:86:f5:83:ee:df:9d:e9:51:3e:30:
         d6:0d:d0:45:0d:e5:bf:2e:67:51:ab:42:78:33:81:35:8f:1c:
         96:41:83:9f:1f:84:39:fa:2e:d5:8d:2a:6b:2d:ad:be:7f:7c:
         45:ff:b6:1d:23:77:10:53:0a:e0:60:07:a3:ef:b6:62:0b:25:
         34:b6:43:5c:58:97:11:cf:33:e6:8a:f4:a4:f8:34:6d:f1:11:
         3c:b0:ae:4c:5c:c8:6d:c0:91:76:f7:2e:cb:a7:51:52:d5:00:
         95:8f:48:9e:55:c4:7d:86:cf:3c:ab:9d:2e:f3:d2:0d:a8:55:
         72:2e:46:c9:00:14:a4:c3:44:3b:b6:db:17:c1:75:9a:76:61:
         c0:8c:92:1f:f6:ed:4a:42:98:8b:dd:65:bd:f8:17:1f:10:10:
         b4:a2:e9:c5:cb:35:b6:e8:ce:a8:3a:3a:ef:ef:9d:b6:19:72:
         bf:87:12:86:c7:0c:f0:ed:d1:23:23:70:97:95:88:0e:f8:ac:
         bb:3f:c6:d0:cd:bb:86:a3:19:7a:40:0c:ff:29:e2:43:c6:e6:
         7d:14:09:ce:06:90:d3:28:28:55:7a:58:ef:b8:6e:d1:c0:f5:
         b5:37:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:03:00 2026 by rpki-client