Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS274468.roa
File:                     AS274468.roa (raw, json)
Hash identifier:          Ov3gbKBidkEJy4QMIU/2TeDDcrSSFuBceKyzO+KabUo=
Subject key identifier:   5E:EE:8B:94:C7:E5:74:09:4A:FF:5D:78:5C:AF:36:65:04:E0:FF:37
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       465F13D11D39791D8F939D817EAE13F1B3CA2682
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS274468.roa
Signing time:             Tue 09 Jun 2026 10:36:05 +0000
ROA not before:           Tue 09 Jun 2026 10:31:05 +0000
ROA not after:            Tue 08 Jun 2027 10:36:05 +0000
asID:                     274468
IP address blocks:        104.234.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5f:13:d1:1d:39:79:1d:8f:93:9d:81:7e:ae:13:f1:b3:ca:26:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  9 10:31:05 2026 GMT
            Not After : Jun  8 10:36:05 2027 GMT
        Subject: CN=5EEE8B94C7E574094AFF5D785CAF366504E0FF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:9b:74:c6:cf:0c:e2:b6:8a:b6:cf:de:0c:
                    bc:22:36:22:ae:42:5a:ed:28:b2:28:d9:cf:b0:4d:
                    bb:75:b5:c1:59:72:4f:52:39:8a:03:45:8e:22:47:
                    b5:5c:fa:ec:f1:1e:b3:52:8e:44:cd:6c:24:7c:79:
                    8c:41:5c:ec:02:5a:7b:bf:26:c4:81:f8:5a:fa:1e:
                    7d:06:29:30:e7:3b:48:39:1c:61:7c:f8:eb:68:a9:
                    0c:e7:f9:ce:03:2a:71:df:31:6d:11:bb:b7:8b:8e:
                    41:0c:1b:e8:e4:89:a9:32:f5:7e:53:33:ec:2d:be:
                    9b:48:e4:d1:f3:36:7c:b3:38:66:d4:3f:3e:cc:c3:
                    ee:50:bc:98:12:20:15:f8:db:18:c6:5b:29:6d:e9:
                    6b:d2:fa:d0:d1:44:3c:74:8b:22:a0:4f:83:ab:ec:
                    8d:6c:d4:3e:8f:f4:c6:76:2a:87:8b:f8:64:f6:63:
                    f3:0f:47:a2:ed:f8:09:75:5d:c4:c4:2f:b5:32:87:
                    f9:21:e7:b0:83:30:f7:a2:11:3d:29:07:fd:68:98:
                    d8:dd:8d:92:77:ab:0f:6f:f0:91:15:2d:ff:b5:8d:
                    25:a7:9f:2f:0f:6d:ac:72:7f:db:5a:9c:37:1b:58:
                    41:03:94:a7:fe:7a:aa:47:45:15:39:ec:8c:c6:11:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EE:8B:94:C7:E5:74:09:4A:FF:5D:78:5C:AF:36:65:04:E0:FF:37
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS274468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:7f:c5:8a:9b:bd:f1:e6:09:a8:0b:b2:4e:2b:f5:fd:de:f5:
         10:0b:a8:3d:cb:05:d5:36:76:d6:e6:e3:7a:c1:00:f5:82:ea:
         83:c9:67:0a:96:e1:43:f4:72:04:93:96:a5:0c:e7:5f:b6:32:
         3d:7b:9e:5d:68:b9:84:6f:4c:b3:6c:8c:c6:8a:db:a3:7f:7d:
         b9:56:9f:25:ad:1a:83:2e:4e:e1:36:35:d3:88:dd:6f:b3:a5:
         4b:73:c9:28:eb:2d:88:b1:a4:3d:17:f2:3c:6f:5d:0b:43:34:
         f0:08:78:0a:ae:78:e3:b4:bc:02:80:8a:97:d0:0b:d6:59:b4:
         80:b7:6b:ba:7e:42:b3:89:ca:17:8e:c1:03:32:1f:db:1e:48:
         8b:a0:27:de:67:eb:c2:91:a5:6f:54:c2:81:d7:c9:8f:db:4e:
         e5:28:f0:bf:0d:9d:7f:38:3a:d8:a3:e4:5f:d8:70:8c:9f:5d:
         7d:ef:76:a8:62:78:41:17:3e:96:97:13:54:40:a7:eb:a8:7c:
         9b:90:3d:19:1d:80:fe:7d:5f:b5:47:66:99:1e:8f:57:3b:22:
         b9:79:f5:c3:b7:24:88:03:83:03:f0:47:20:99:e2:ee:6f:59:
         2f:4f:a1:33:59:b0:2a:5c:61:5b:d6:16:98:9e:dc:d4:45:62:
         1f:4a:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:18 2026 by rpki-client