Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47690.roa
File:                     AS47690.roa (raw, json)
Hash identifier:          0BrfbL2sos/AX2W4Ey7CY0gp+7l2Gs+SxEebhcuh4OI=
Subject key identifier:   E5:86:6D:76:EB:92:58:BC:2F:67:31:4F:3B:EA:5E:15:52:E5:E3:42
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       08C06752EE2660BCD277455E3B19A3B6B4386BCB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47690.roa
Signing time:             Wed 28 Oct 2026 23:33:18 +0000
ROA not before:           Wed 28 Oct 2026 23:28:18 +0000
ROA not after:            Wed 27 Oct 2027 23:33:18 +0000
asID:                     47690
IP address blocks:        104.234.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 12:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c0:67:52:ee:26:60:bc:d2:77:45:5e:3b:19:a3:b6:b4:38:6b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 28 23:28:18 2026 GMT
            Not After : Oct 27 23:33:18 2027 GMT
        Subject: CN=E5866D76EB9258BC2F67314F3BEA5E1552E5E342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:69:1d:f0:f3:4a:cb:3f:0b:0d:6e:26:73:
                    62:0a:20:13:7c:6c:7a:26:37:68:7f:b0:46:eb:32:
                    41:99:8f:82:09:70:5c:35:67:8e:40:00:03:26:40:
                    60:60:92:eb:6d:46:db:01:76:53:45:7e:78:23:45:
                    31:c8:eb:de:6a:5a:c4:2a:ea:ac:4e:4b:94:a5:ed:
                    13:27:13:e3:2d:56:f9:2d:58:1b:a8:9d:71:33:d0:
                    67:c7:88:71:cd:26:6b:b4:bd:bd:f6:95:a0:57:cb:
                    da:50:dd:07:71:0b:27:44:1a:57:67:51:06:8a:ae:
                    46:ec:17:58:a5:7f:cf:1d:7d:9b:9a:63:d6:fc:b8:
                    65:a7:b5:ba:c9:e4:20:70:be:44:56:47:88:1e:44:
                    d4:46:6c:88:0e:08:42:38:30:22:40:d8:87:7a:28:
                    22:df:56:4d:13:bd:44:31:21:15:8b:74:6b:7f:f1:
                    78:db:1a:9f:32:24:71:02:91:d8:1d:72:a1:6f:db:
                    d0:66:6b:23:e6:80:bb:8f:fd:e2:10:3c:8c:1d:22:
                    03:db:94:64:c9:c6:6f:39:a6:99:02:2f:ca:03:ba:
                    51:53:fd:1c:71:1f:dc:23:f7:bf:09:d3:d3:5e:48:
                    83:50:1d:83:1f:a8:5e:c2:91:85:3e:e0:52:35:68:
                    59:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:86:6D:76:EB:92:58:BC:2F:67:31:4F:3B:EA:5E:15:52:E5:E3:42
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:53:d3:27:65:87:96:e8:e4:7b:18:86:3f:dc:3c:88:a7:c2:
         bb:b1:2d:34:67:1a:6c:05:55:42:cd:87:e7:14:60:b9:91:f5:
         b5:87:ab:c4:e6:f4:64:2d:e5:1f:8d:1a:5f:f7:ff:2f:1a:9c:
         ef:14:ed:64:0a:61:04:dd:bf:5c:aa:48:7b:5e:b1:94:7c:84:
         de:79:69:7d:67:6e:0d:70:68:84:27:67:5d:ca:9b:e1:ec:14:
         05:74:f9:cb:28:2c:cc:12:0d:64:b9:7b:a2:56:86:70:e4:d4:
         3e:3f:10:ae:81:1f:1c:f5:4d:7a:3d:d5:78:a4:76:97:d0:f4:
         cf:db:f2:3b:dc:6b:2f:a8:50:2e:c1:26:30:c0:92:29:a7:aa:
         e5:8a:c6:c5:c5:71:01:98:d4:5c:3a:28:78:99:6c:22:d6:e2:
         c6:ee:cc:56:98:ba:eb:b6:69:17:36:c7:11:bf:f3:1a:88:6d:
         f3:f6:c2:31:0b:e4:55:9b:8d:09:6e:a7:42:3f:16:00:3b:d2:
         ec:e3:e3:62:5d:86:f0:8a:3f:5c:fe:10:d4:af:a6:21:98:0c:
         f7:15:33:79:f9:1a:c9:70:4e:44:38:10:b4:e1:7d:80:70:b4:
         a8:95:72:78:4e:62:c1:07:26:62:78:5c:2e:98:c0:4b:7a:cf:
         2d:e8:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:00:37 2026 by rpki-client