Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401476.roa
File:                     AS401476.roa (raw, json)
Hash identifier:          LN/68XVZMbwspgSIf08HnnubPJ03mYLbEhZNq6yupF4=
Subject key identifier:   7C:06:46:2E:DC:10:77:31:47:C5:E5:EC:79:41:2C:78:5D:57:C5:B3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       42396CA8732AE716764CB6050B4F0AFF38BAEDDB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401476.roa
Signing time:             Tue 01 Sep 2026 13:36:20 +0000
ROA not before:           Tue 01 Sep 2026 13:31:20 +0000
ROA not after:            Tue 31 Aug 2027 13:36:20 +0000
asID:                     401476
IP address blocks:        104.234.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:39:6c:a8:73:2a:e7:16:76:4c:b6:05:0b:4f:0a:ff:38:ba:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  1 13:31:20 2026 GMT
            Not After : Aug 31 13:36:20 2027 GMT
        Subject: CN=7C06462EDC10773147C5E5EC79412C785D57C5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:1c:87:21:bb:9a:e9:c8:53:82:c0:e6:b7:
                    98:8e:0f:31:84:ca:9a:df:c9:76:b4:65:19:67:10:
                    9d:3a:04:fd:a8:bb:df:67:aa:90:31:a6:88:39:ea:
                    bd:e7:09:82:db:57:0d:d7:63:37:4d:3d:ce:72:7b:
                    f2:1d:85:b5:4d:b8:5f:e8:b5:11:c0:75:5f:b1:aa:
                    57:80:52:b7:9e:c6:68:d2:35:01:0a:3f:27:ab:f2:
                    00:a1:0a:ee:43:93:85:10:f3:d2:8a:cc:23:01:f5:
                    42:ef:64:53:be:9b:5c:5f:1b:d6:47:3e:6f:da:1f:
                    f0:23:10:5d:c5:9a:d6:c9:33:0c:f3:b8:83:99:28:
                    53:14:7c:89:a6:a2:c4:c5:72:49:95:6b:fd:c9:13:
                    1e:a9:b0:5d:55:c8:f6:78:9d:c9:87:bb:b3:93:4b:
                    40:6a:18:97:92:19:e0:cf:21:ea:82:ea:16:e1:c6:
                    13:90:4e:d7:64:ed:08:f1:89:7a:07:f7:e9:0e:7c:
                    62:21:41:7c:20:56:4e:e8:81:c7:ff:47:e2:35:8e:
                    5d:11:8d:e0:94:95:05:81:48:1b:ee:94:d8:d6:34:
                    e3:b8:a0:36:dc:db:20:f2:87:58:ee:48:fd:76:fa:
                    f6:b8:25:b2:00:a2:8e:e4:9e:fd:60:b8:6a:7e:57:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:06:46:2E:DC:10:77:31:47:C5:E5:EC:79:41:2C:78:5D:57:C5:B3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401476.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:20:84:8d:c1:4f:54:4d:58:61:92:e8:fe:b2:38:1c:49:
         7e:60:49:f6:40:11:1b:4b:80:c9:b0:41:ac:63:be:b7:d2:d0:
         47:50:c9:f8:4e:cd:f7:77:2d:e9:c9:56:19:17:cb:64:d5:f4:
         33:88:46:5e:57:87:0b:47:9e:94:4f:8b:96:1e:b6:f5:c8:a4:
         61:4e:2a:45:57:1d:09:15:1c:d7:18:dd:5f:67:df:4b:fc:08:
         db:86:63:43:af:56:a8:82:2f:bf:bc:de:fd:42:3b:f4:9a:37:
         83:6f:46:14:f1:05:c6:75:51:92:64:67:f5:1d:9d:8b:98:7c:
         ce:90:02:4c:f2:14:dc:8a:44:0a:e0:c3:a3:ce:bf:b3:25:9e:
         f4:cf:83:1c:21:e5:f7:1a:c6:d2:38:a2:6c:5e:f1:06:6a:08:
         80:c5:86:81:3c:ec:b0:4d:e3:a5:78:3e:1a:57:e9:22:2e:26:
         8d:55:7f:6d:1b:23:41:b6:6c:28:0e:bf:1c:5c:f1:98:7a:62:
         85:8d:f9:b4:1d:6a:c7:94:46:0b:84:6a:c6:99:fa:f9:be:c1:
         04:2b:d0:a8:b0:99:a4:99:1a:4b:6a:b5:b3:0e:4c:25:56:e2:
         ed:95:71:55:02:11:26:1e:c5:32:7c:95:80:3b:d1:a6:48:80:
         33:54:d8:63
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUQjlsqHMq5xZ2TLYFC08K/zi67dswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwOTAxMTMzMTIwWhcNMjcwODMxMTMzNjIw
WjAzMTEwLwYDVQQDEyg3QzA2NDYyRURDMTA3NzMxNDdDNUU1RUM3OTQxMkM3ODVE
NTdDNUIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknIchyG7munI
U4LA5reYjg8xhMqa38l2tGUZZxCdOgT9qLvfZ6qQMaaIOeq95wmC21cN12M3TT3O
cnvyHYW1Tbhf6LURwHVfsapXgFK3nsZo0jUBCj8nq/IAoQruQ5OFEPPSiswjAfVC
72RTvptcXxvWRz5v2h/wIxBdxZrWyTMM87iDmShTFHyJpqLExXJJlWv9yRMeqbBd
Vcj2eJ3Jh7uzk0tAahiXkhngzyHqguoW4cYTkE7XZO0I8Yl6B/fpDnxiIUF8IFZO
6IHH/0fiNY5dEY3glJUFgUgb7pTY1jTjuKA23Nsg8odY7kj9dvr2uCWyAKKO5J79
YLhqfleVGwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHwGRi7cEHcxR8Xl7HlBLHhd
V8WzMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQwMTQ3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqdjANBgkqhkiG9w0BAQsFAAOC
AQEAorAghI3BT1RNWGGS6P6yOBxJfmBJ9kARG0uAybBBrGO+t9LQR1DJ+E7N93ct
6clWGRfLZNX0M4hGXleHC0eelE+Llh629cikYU4qRVcdCRUc1xjdX2ffS/wI24Zj
Q69WqIIvv7ze/UI79Jo3g29GFPEFxnVRkmRn9R2di5h8zpACTPIU3IpECuDDo86/
syWe9M+DHCHl9xrG0jiibF7xBmoIgMWGgTzssE3jpXg+GlfpIi4mjVV/bRsjQbZs
KA6/HFzxmHpihY35tB1qx5RGC4Rqxpn6+b7BBCvQqLCZpJkaS2q1sw5MJVbi7ZVx
VQIRJh7FMnyVgDvRpkiAM1TYYw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:13:15 2026 by rpki-client