Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198087.roa
File:                     AS198087.roa (raw, json)
Hash identifier:          jxdIODCfXHVZNtYtlD8ypHkbeaKwyT2tREkNlc++ikc=
Subject key identifier:   28:C9:38:06:5E:AC:3B:88:15:8B:F5:D7:B0:5E:29:3C:22:D0:75:46
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       25E6C092D0B2B89AE85CB6053B71F2ABFFA1AD9F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198087.roa
Signing time:             Fri 03 Apr 2026 09:28:30 +0000
ROA not before:           Fri 03 Apr 2026 09:23:30 +0000
ROA not after:            Fri 02 Apr 2027 09:28:30 +0000
asID:                     198087
IP address blocks:        104.234.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e6:c0:92:d0:b2:b8:9a:e8:5c:b6:05:3b:71:f2:ab:ff:a1:ad:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  3 09:23:30 2026 GMT
            Not After : Apr  2 09:28:30 2027 GMT
        Subject: CN=28C938065EAC3B88158BF5D7B05E293C22D07546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:8a:7d:c4:07:24:88:53:9d:b4:47:00:cf:
                    de:7f:e2:f1:3a:2d:a0:65:5b:94:32:5f:24:40:13:
                    a4:63:bb:84:25:de:fb:92:06:1b:75:2b:c6:b7:9b:
                    a5:40:e9:3b:41:e3:b5:c4:79:72:6f:18:e4:54:3a:
                    eb:40:67:21:1f:de:2d:a1:74:ee:e4:d0:cd:d0:3c:
                    df:75:ec:7d:d8:10:ef:5b:dc:12:a6:f7:28:db:9b:
                    bc:bc:b5:82:2b:17:e5:76:d4:b9:96:52:c9:00:ae:
                    05:ea:00:28:c3:6f:89:00:4b:a5:d1:31:58:75:69:
                    cd:c8:ba:df:bf:18:55:1d:dd:f2:01:9e:1c:7c:75:
                    93:0c:6a:9d:49:b3:0b:22:b8:ec:9a:3d:fa:a1:95:
                    e8:9b:db:2d:15:e0:bd:02:04:79:cd:28:40:17:05:
                    c2:ab:4f:e4:a3:6e:71:b7:3b:5b:a2:b3:a4:51:45:
                    56:6b:1f:79:ff:de:85:d1:29:ec:93:ed:d6:ea:5e:
                    40:e5:e9:c1:3f:3d:93:e9:98:4e:49:84:a6:c1:6f:
                    9b:35:60:d7:c4:27:76:db:dc:ba:fd:6f:d2:a7:c6:
                    5e:ff:c8:3a:0d:fd:b5:e9:77:4f:48:61:76:44:fc:
                    28:0a:51:1a:5a:f3:81:49:46:5e:a1:cb:c0:57:fd:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:38:06:5E:AC:3B:88:15:8B:F5:D7:B0:5E:29:3C:22:D0:75:46
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198087.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:aa:f3:b6:5c:17:5a:2f:63:ee:3b:26:dc:eb:30:19:da:10:
         7b:9c:1a:bf:41:10:55:78:0a:8b:39:05:16:c2:fc:fe:c6:c6:
         c1:5f:07:3c:17:1a:30:ce:1f:8f:9d:65:92:85:da:4c:9f:9d:
         9e:65:1b:ff:d2:dc:b4:94:db:a9:0e:74:f7:cd:17:af:76:cf:
         07:04:7e:5d:73:15:f2:54:cc:a9:11:b5:38:4f:9b:e0:5a:d1:
         2c:8f:ab:87:b7:b4:cb:91:c4:08:92:09:7f:0e:94:4d:3f:49:
         fc:ab:d5:f6:bd:37:92:7c:8e:f9:46:6d:00:51:31:ff:68:f6:
         45:2a:70:fe:ae:cd:fc:59:8e:a1:70:a5:2b:29:58:e2:0f:48:
         28:ce:85:a6:3c:f7:85:2a:98:c0:48:8e:39:64:7d:a1:c7:5e:
         a8:db:cc:9a:f1:c4:dd:b9:17:9e:45:0c:85:e4:04:e3:b1:2f:
         c7:73:9f:51:44:57:ef:ac:a5:d2:a7:0b:d7:6b:82:3e:02:20:
         16:03:f0:3d:ea:60:5d:40:79:28:54:6e:af:91:d4:4a:a3:82:
         98:36:e2:5d:b6:68:c4:1b:b2:17:2a:51:fd:be:4e:56:b2:3b:
         ad:fc:3e:8b:87:d4:66:92:2b:07:b6:53:81:cb:9f:24:38:b0:
         49:20:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:57 2026 by rpki-client