Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa
File:                     AS401443.roa (raw, json)
Hash identifier:          eKO1HPDSiP410FTdpYZZamHxU8Y4GShHuYtWh2CjLMI=
Subject key identifier:   97:90:71:5D:D1:49:4E:7A:04:14:DB:D0:99:E7:3E:6B:9E:D6:16:E8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       523EA7709CD46AAA3DD7D744186DB03EAD1AFA3B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa
Signing time:             Thu 10 Sep 2026 13:36:20 +0000
ROA not before:           Thu 10 Sep 2026 13:31:20 +0000
ROA not after:            Thu 09 Sep 2027 13:36:20 +0000
asID:                     401443
IP address blocks:        104.234.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3e:a7:70:9c:d4:6a:aa:3d:d7:d7:44:18:6d:b0:3e:ad:1a:fa:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 10 13:31:20 2026 GMT
            Not After : Sep  9 13:36:20 2027 GMT
        Subject: CN=9790715DD1494E7A0414DBD099E73E6B9ED616E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:fe:a5:8f:9d:3b:2c:e7:b0:ea:16:d8:a9:
                    dc:23:99:d8:5b:fb:9c:7a:f5:49:76:56:aa:4b:a2:
                    56:23:34:96:37:f1:98:c4:bd:d6:42:70:c4:6b:29:
                    d4:a1:7f:0d:cd:d9:f7:97:59:8f:4a:5b:b6:4c:77:
                    ef:56:19:6a:23:a7:9d:96:6c:3f:5a:4d:45:fc:11:
                    7a:25:f6:c1:07:2e:dc:54:b0:30:14:e0:1e:37:51:
                    86:b2:a5:ce:90:36:c2:ee:72:e8:fa:75:75:b0:da:
                    c4:79:53:28:8d:66:61:b1:84:2f:e7:ee:01:d1:c7:
                    59:3e:03:97:b9:2f:80:d5:2c:68:a8:3e:a0:f9:b0:
                    03:04:7a:68:67:9f:1d:e7:6c:3e:50:f0:8f:5c:88:
                    1f:61:b4:2e:55:d9:02:7b:1c:77:79:05:e5:de:18:
                    ed:fd:3c:e7:66:8d:7b:72:ea:fb:33:3e:57:90:00:
                    ff:b4:cc:e4:86:72:76:03:42:d3:1d:be:83:74:06:
                    39:dc:e8:4b:f7:26:e5:2d:c9:27:87:b2:47:c0:10:
                    85:50:b8:4d:c9:27:f6:01:b9:19:3a:a6:50:f4:e7:
                    3f:74:38:d6:a3:e3:86:97:36:e7:44:4a:bd:6d:e8:
                    80:af:8f:4e:60:60:61:01:63:c8:9d:d3:a2:0d:44:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:71:5D:D1:49:4E:7A:04:14:DB:D0:99:E7:3E:6B:9E:D6:16:E8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:a6:9d:03:94:df:6c:96:e9:75:ca:ff:58:7c:82:6e:7b:
         76:cc:a8:2a:b1:f1:28:92:69:22:55:11:06:70:45:56:25:77:
         9b:8a:1f:32:66:82:81:39:db:37:c7:6e:92:ea:09:51:89:aa:
         2a:4e:d0:78:90:c9:78:76:45:ef:c0:f9:af:e2:26:ae:61:c2:
         ae:ce:74:5d:8e:8f:5d:93:4f:f5:fd:cc:39:5d:05:81:e8:a2:
         c4:24:2d:12:5d:3a:00:85:82:1f:c3:33:bd:57:6a:b8:fe:d4:
         b0:a7:ad:f6:e4:56:69:68:82:3b:7d:84:a4:8d:59:35:d5:35:
         20:30:06:30:cb:22:3f:4d:63:50:24:ae:fa:bc:99:25:16:e4:
         ec:3b:e3:37:de:8f:33:46:dc:b3:22:56:42:a7:43:67:2e:f5:
         e7:0b:29:67:88:75:f2:7c:4e:59:67:bd:e3:38:09:d9:ec:bf:
         cd:c9:9e:03:10:82:ac:45:4b:1e:2f:2d:b3:4b:4c:3c:40:d9:
         8e:3d:c6:3c:ec:91:8e:19:df:d2:41:10:57:d7:27:d4:56:d3:
         ee:ce:ae:7c:7a:ff:43:29:d4:96:64:01:d2:55:a8:7e:17:4e:
         29:f6:e6:23:9d:18:87:5e:8f:57:e8:da:f9:73:6f:b2:18:56:
         03:3b:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:42 2026 by rpki-client