Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS17497.roa
File:                     AS17497.roa (raw, json)
Hash identifier:          vflXw0wCCqdrdeAxK6TOj4BoF/ruP/BG2KmPE2onC5Y=
Subject key identifier:   E1:8F:1D:A6:21:03:0F:F6:AB:EC:0B:FB:C2:66:62:21:ED:75:28:1D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       28F3341FF5D3EAE9AE6BA18A500095B92CD82B9B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS17497.roa
Signing time:             Thu 16 Apr 2026 09:41:01 +0000
ROA not before:           Thu 16 Apr 2026 09:36:01 +0000
ROA not after:            Thu 15 Apr 2027 09:41:01 +0000
asID:                     17497
IP address blocks:        104.234.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f3:34:1f:f5:d3:ea:e9:ae:6b:a1:8a:50:00:95:b9:2c:d8:2b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 16 09:36:01 2026 GMT
            Not After : Apr 15 09:41:01 2027 GMT
        Subject: CN=E18F1DA621030FF6ABEC0BFBC2666221ED75281D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:a3:f7:d3:9a:e6:05:d2:45:ec:53:bf:68:
                    79:70:80:56:c4:91:e9:09:3b:d2:89:31:73:d5:ab:
                    63:10:c9:cd:52:e6:47:c7:73:3d:f4:f1:1a:de:98:
                    76:b5:57:b3:6a:4b:e6:cc:4a:40:8b:a5:db:a8:e2:
                    28:4c:d1:21:91:2a:5c:ae:5e:9d:eb:13:9d:02:ba:
                    d6:87:2a:a5:fd:bf:6c:ca:66:3f:1d:dd:f7:da:0c:
                    00:21:01:a6:4e:97:7b:c9:4e:b8:af:bc:64:1a:a3:
                    e1:6a:61:04:f5:fa:e9:c5:76:48:17:42:8b:d4:84:
                    f9:72:4d:91:02:51:24:10:ec:d5:d4:b3:9c:28:34:
                    db:a1:cc:bf:7d:d8:16:d0:72:5b:a0:c2:50:a5:c0:
                    4e:86:36:6c:21:9e:28:4d:59:d9:35:ff:fc:ad:14:
                    c8:e6:e4:50:7d:4c:98:8e:bb:4d:93:54:0e:5b:40:
                    60:3a:36:e0:f8:00:1e:89:93:e4:2f:a8:0f:43:2c:
                    a0:a8:a9:d1:74:6a:ce:96:4b:20:40:7a:d4:14:4b:
                    92:af:fb:18:0d:81:07:ee:38:85:a6:ad:29:ca:f5:
                    b0:28:27:9d:c2:48:2f:03:7d:9a:c1:52:75:48:42:
                    72:c0:52:1f:c3:e6:87:d0:b4:ca:5c:84:81:2d:75:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:1D:A6:21:03:0F:F6:AB:EC:0B:FB:C2:66:62:21:ED:75:28:1D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS17497.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:72:7a:99:ac:b4:78:49:26:8c:30:e2:54:f0:4a:5e:a7:
         d9:f0:18:8f:98:3c:c1:f7:86:d2:c2:d8:24:95:51:04:64:cf:
         fe:d3:2f:7e:65:8b:87:53:33:87:ce:1e:28:32:c0:2b:d6:4c:
         20:87:16:1c:db:0c:0d:31:33:7f:3a:9b:c3:2b:14:d3:76:7b:
         a6:bc:89:73:7d:27:84:0e:60:2f:56:d5:83:8d:90:59:df:57:
         4c:29:1f:f9:8a:ce:52:de:af:6d:d1:74:c7:7e:c9:67:a8:2d:
         74:fc:81:b2:3a:60:2e:57:2d:81:ed:d6:b0:bb:2d:9c:25:63:
         c1:c1:f7:b2:dc:45:96:6b:c1:4f:fc:cf:ce:d5:48:be:f7:ac:
         fb:e8:ec:58:18:c9:55:ba:49:15:38:fd:c8:79:f5:78:3d:3a:
         19:d1:e0:84:9b:be:38:14:0b:d0:34:43:e3:58:8f:09:6b:50:
         13:8b:16:6d:42:19:08:6b:b1:19:89:35:ff:96:dc:c5:68:21:
         5b:0d:db:6e:07:3a:bc:a4:25:74:5a:86:92:44:23:76:91:a8:
         d8:59:1b:cf:8e:76:4a:58:31:25:4d:79:68:8b:a5:6b:e9:e2:
         78:ee:c6:fe:98:06:7b:da:85:ff:e6:98:0c:56:e3:5a:e8:d2:
         ba:32:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:59 2026 by rpki-client