Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219498.roa
File:                     AS219498.roa (raw, json)
Hash identifier:          5CTnJwALSopHoUN0RXJ2T6sg0pOfWXB40PY/mQSZaqQ=
Subject key identifier:   7E:0E:3B:F4:89:1F:B2:7B:9E:80:39:6F:83:8E:F6:04:97:26:C3:D7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5318E9100D3C885A0F1AECF8F8E344FD73CC6A4B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219498.roa
Signing time:             Wed 28 Oct 2026 19:42:25 +0000
ROA not before:           Wed 28 Oct 2026 19:37:25 +0000
ROA not after:            Wed 27 Oct 2027 19:42:25 +0000
asID:                     219498
IP address blocks:        104.234.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 12:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:18:e9:10:0d:3c:88:5a:0f:1a:ec:f8:f8:e3:44:fd:73:cc:6a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 28 19:37:25 2026 GMT
            Not After : Oct 27 19:42:25 2027 GMT
        Subject: CN=7E0E3BF4891FB27B9E80396F838EF6049726C3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:80:16:11:b6:b4:be:00:73:b5:92:be:fd:
                    ba:46:18:78:dd:da:aa:c6:ba:8c:ba:1b:18:8e:70:
                    1d:8f:b3:62:3b:2d:04:9b:4a:7f:de:b6:31:40:c6:
                    f9:59:f9:e2:14:9d:6a:8e:41:1c:77:f5:ed:57:86:
                    10:d7:df:f7:5a:82:5a:87:9c:8d:41:e7:35:e1:08:
                    43:4a:85:eb:b3:c3:fe:8a:b2:6c:db:87:b3:d9:17:
                    d1:08:71:88:ef:e2:fe:31:f0:02:bc:7f:3d:d0:aa:
                    41:d4:50:62:af:87:50:8f:58:ad:b1:18:a3:7f:c0:
                    ae:0c:73:8f:24:01:bd:6d:94:c1:7e:cc:1c:3c:7f:
                    ce:97:22:b6:27:8c:19:0f:fc:9f:e9:b0:76:a5:50:
                    27:f7:c8:e1:d8:25:dd:51:f6:a3:7c:8c:79:da:34:
                    fc:f6:84:0d:31:83:a9:f1:10:66:e5:9b:1a:98:02:
                    d3:ce:99:97:e2:4c:3d:fc:aa:4a:7c:71:16:58:7e:
                    3a:35:5e:a9:51:23:be:c1:f7:a7:49:d8:ab:4e:38:
                    3d:84:53:f7:0f:ef:b6:a2:f9:0a:02:72:af:fa:83:
                    be:12:c3:65:3f:e8:bf:c4:ab:05:1e:d2:a2:d3:54:
                    ed:42:8c:b2:e6:4f:78:4a:55:ca:fa:d0:90:14:60:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:3B:F4:89:1F:B2:7B:9E:80:39:6F:83:8E:F6:04:97:26:C3:D7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219498.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4c:66:62:e7:67:29:59:25:a6:f1:13:69:52:6e:a7:32:1a:
         e3:f0:e6:8c:31:f5:65:d8:96:8b:65:17:17:43:00:35:93:6c:
         e6:52:0c:20:37:37:28:f4:19:0a:02:e5:13:c1:a3:5e:6e:28:
         54:7a:8b:fc:89:df:b5:a4:e3:e7:26:a9:4e:a6:71:02:68:8c:
         88:d6:fc:e6:1a:b3:72:84:1f:07:92:9e:57:3e:7e:26:41:09:
         dc:3f:c7:2e:23:23:a1:ec:22:49:93:4e:74:55:96:6d:ed:1c:
         79:9d:61:b1:36:6e:79:aa:b7:a3:27:be:2c:29:77:79:9d:62:
         85:fe:13:21:84:8e:b2:65:99:b9:4d:5c:90:8f:32:79:f6:75:
         3f:ca:4e:11:5c:eb:b0:37:89:eb:b2:99:91:16:4d:a8:c1:09:
         c6:05:af:18:d4:af:04:3e:15:56:6f:7e:23:31:be:c3:5a:d1:
         8c:5e:1c:ce:0c:57:65:42:81:63:f7:a0:34:ce:0c:3c:13:25:
         dd:9c:3d:48:67:63:b5:7a:b0:1d:5c:56:0a:44:d6:d0:dc:2d:
         d8:77:ee:88:aa:ea:e1:d9:ce:1b:63:5a:30:64:7f:43:85:5c:
         5d:94:f1:4b:18:cf:34:14:22:ec:5d:b8:a8:45:c7:e9:b5:3e:
         47:2b:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:00:42 2026 by rpki-client