Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216138.roa
File:                     AS216138.roa (raw, json)
Hash identifier:          2LAuWuTznMT7y1S38xYeuAgP5CRZViuGs4L4nSaBV0Y=
Subject key identifier:   8D:97:12:A0:3C:4A:10:9D:C8:C5:04:9C:C7:DB:42:27:E7:34:4B:82
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       303D3CD83B61264029CAC5A70D92455E50839639
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216138.roa
Signing time:             Tue 09 Jun 2026 07:01:14 +0000
ROA not before:           Tue 09 Jun 2026 06:56:14 +0000
ROA not after:            Tue 08 Jun 2027 07:01:14 +0000
asID:                     216138
IP address blocks:        104.234.14.0/24 maxlen: 24
                          104.234.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3d:3c:d8:3b:61:26:40:29:ca:c5:a7:0d:92:45:5e:50:83:96:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  9 06:56:14 2026 GMT
            Not After : Jun  8 07:01:14 2027 GMT
        Subject: CN=8D9712A03C4A109DC8C5049CC7DB4227E7344B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c0:e1:a9:e5:12:ff:b4:ed:d7:01:4d:0a:c8:
                    f6:d3:72:21:9d:14:65:e2:32:89:a5:b8:d8:66:3c:
                    5a:a0:14:22:57:59:3b:ef:e3:47:f4:bc:61:df:6c:
                    c3:53:63:2e:96:be:b5:3b:fc:ae:79:68:ef:60:9b:
                    93:b6:6e:b1:7e:3f:cd:a7:78:04:fa:2e:fd:3b:cb:
                    79:6c:34:2c:02:73:e6:68:2e:5d:cc:a5:d1:84:3b:
                    2f:09:3c:cb:1a:04:66:a9:80:2a:2d:b7:02:1a:a9:
                    6b:48:30:95:63:37:29:a3:f9:12:67:e1:98:8b:7d:
                    58:0b:7a:d8:6f:96:af:c9:0b:59:b5:34:ee:a7:51:
                    d1:a2:52:39:7b:5b:44:c1:a4:b1:71:02:01:46:31:
                    de:1b:cc:e2:4b:1e:36:34:9e:a3:7c:c2:30:bd:33:
                    5a:cc:fa:91:d7:15:c4:6e:78:e5:a5:7b:7e:80:d8:
                    bc:d5:df:2d:68:e9:3e:b3:7f:80:71:43:4c:eb:38:
                    00:3a:e1:58:53:23:49:74:70:79:d6:bc:71:96:b4:
                    31:2d:d0:f6:ae:a4:e0:8a:04:58:d2:10:27:9a:a1:
                    c5:2c:e1:26:44:82:8e:ef:d7:fc:c9:a1:5a:af:c4:
                    b6:b9:b7:67:f7:67:3e:d1:15:e3:d9:c8:03:1a:09:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:12:A0:3C:4A:10:9D:C8:C5:04:9C:C7:DB:42:27:E7:34:4B:82
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.14.0/24
                  104.234.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:c2:db:27:b2:76:77:6c:3f:ba:51:12:95:11:51:d1:47:
         80:7e:a6:d5:5c:db:c7:3c:26:e5:66:1f:6b:59:60:2c:5b:d7:
         7a:97:ff:44:4f:32:9e:d9:18:7d:93:a8:81:ae:88:6a:fa:56:
         f1:13:bd:ea:cb:06:5b:06:a1:39:54:ae:be:a2:81:69:e7:6c:
         cf:7b:1e:bc:11:14:b3:98:78:8b:6a:5b:25:7d:05:b6:d9:0f:
         f9:bb:ae:21:eb:39:8a:d6:16:0d:13:4e:c0:5b:68:15:d2:ef:
         31:9b:49:9a:4d:94:d8:1f:19:0b:61:d4:80:09:2c:6f:dc:4d:
         e3:22:89:71:6c:99:dd:4e:61:26:25:98:b1:9a:5c:9d:52:50:
         e8:5b:7a:8a:1e:c0:cb:e2:f6:40:4b:97:ff:3d:f5:2e:1d:0e:
         bf:50:38:a5:f6:17:eb:b9:91:92:83:36:b3:df:95:da:4f:01:
         52:2a:d7:91:67:a4:14:5b:7d:72:69:78:81:d3:eb:4a:d2:fa:
         ec:55:fd:d1:20:18:86:45:60:b4:ef:fe:96:af:14:79:eb:d1:
         de:c1:b6:90:05:21:06:86:68:df:48:c7:b0:79:c3:5c:75:90:
         26:c5:eb:8b:b0:71:4d:e0:c3:ad:b9:fc:6b:06:d7:68:6a:c9:
         a6:cc:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:27 2026 by rpki-client