Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134677.roa
File:                     AS134677.roa (raw, json)
Hash identifier:          zrDE9ZBCAC+ty5n6P51+6S+J3DD5HodU2YGfpa2qBRU=
Subject key identifier:   FD:8C:DA:1A:2F:87:8A:01:89:1C:BF:6F:28:35:E9:BB:79:AC:68:E2
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       37531C82DB25CCFEE3E3ABEBBADFBF7499867A5F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134677.roa
Signing time:             Thu 09 Oct 2025 03:46:04 +0000
ROA not before:           Thu 09 Oct 2025 03:41:04 +0000
ROA not after:            Thu 08 Oct 2026 03:46:04 +0000
asID:                     134677
IP address blocks:        104.234.26.0/24 maxlen: 24
                          104.234.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:53:1c:82:db:25:cc:fe:e3:e3:ab:eb:ba:df:bf:74:99:86:7a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  9 03:41:04 2025 GMT
            Not After : Oct  8 03:46:04 2026 GMT
        Subject: CN=FD8CDA1A2F878A01891CBF6F2835E9BB79AC68E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:05:4a:d6:19:58:1a:80:6b:07:51:93:88:
                    46:36:74:54:28:a7:be:82:3d:cb:57:5a:72:b7:59:
                    69:06:55:c1:74:a1:ec:bc:6e:59:93:f9:da:0e:b3:
                    ab:81:31:6a:25:58:a9:a5:c2:dc:7f:f5:f7:50:cc:
                    07:1f:14:af:09:d4:e0:39:c2:66:48:b4:36:23:be:
                    37:5e:c8:dc:ea:be:74:da:98:75:8c:03:8f:7c:62:
                    1b:a4:0e:7f:43:18:00:ce:79:b5:02:31:6c:5d:e5:
                    6f:58:f5:17:ec:62:a9:be:8a:fe:04:71:e0:5b:41:
                    db:0c:03:2e:a9:20:b5:a8:c8:01:d9:5d:88:3f:f4:
                    44:e4:72:83:a4:3f:a2:e6:52:de:66:a9:16:3f:b1:
                    ee:d9:8d:38:fc:77:92:42:fc:ee:28:fe:b2:0c:22:
                    f2:1b:05:da:53:9c:da:1c:18:7d:b5:06:41:0f:d2:
                    40:d3:e6:88:d8:0b:65:15:45:84:35:70:51:c5:de:
                    08:b1:c3:35:42:d1:09:83:61:74:6e:b4:81:27:6d:
                    d8:4a:ae:a7:f5:87:66:1a:a5:04:0a:b7:b1:e1:ff:
                    94:52:b0:1b:f4:2a:d9:3e:b9:0f:55:73:9f:26:df:
                    ac:62:8e:62:f3:0d:ae:93:88:1c:b9:ae:91:5b:57:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8C:DA:1A:2F:87:8A:01:89:1C:BF:6F:28:35:E9:BB:79:AC:68:E2
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134677.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.26.0/24
                  104.234.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:bb:87:c7:98:21:c9:78:c5:9e:40:9f:70:f0:4a:46:6b:95:
         13:d4:55:8b:7c:61:2d:2f:f1:bf:75:92:23:20:a6:1b:5f:20:
         b6:c6:64:a0:ef:df:38:fc:11:f6:ef:27:34:3e:6f:d4:11:57:
         1d:02:83:5f:7d:a3:9f:c7:dc:5b:ba:a9:3b:ed:58:da:a6:26:
         35:a7:5a:9f:fb:99:f3:b5:88:13:7a:6c:b7:54:e2:98:6c:7e:
         e2:3a:d0:85:6d:b3:6e:ed:5d:d3:7d:37:45:18:54:75:97:53:
         89:4d:86:aa:23:7a:a4:57:4d:78:54:41:e9:c2:b2:48:17:1b:
         b2:8a:c6:31:d8:65:b9:b8:c9:2e:ab:3c:cc:77:f7:f9:b5:60:
         d4:1e:b1:1e:d1:6c:4b:8e:98:e2:7a:c5:19:40:e0:d8:2b:91:
         a0:3f:d1:4f:67:a6:39:4e:32:03:80:fa:aa:e2:d7:c8:c3:e7:
         36:b7:35:0e:34:44:fd:3d:36:ea:5d:71:b2:d8:19:ed:c6:7b:
         80:a2:1b:a1:3a:14:63:90:ed:4f:a7:d2:99:6f:07:19:74:aa:
         82:9c:71:5e:fa:9a:3d:32:35:ee:39:1e:70:a3:ad:69:4e:fe:
         a4:e4:df:b3:cf:0c:77:24:fc:19:d2:4c:f1:1d:0f:4f:ae:f5:
         2e:91:5d:90
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUN1McgtslzP7j46vrut+/dJmGel8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDA5MDM0MTA0WhcNMjYxMDA4MDM0NjA0
WjAzMTEwLwYDVQQDEyhGRDhDREExQTJGODc4QTAxODkxQ0JGNkYyODM1RTlCQjc5
QUM2OEUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/4FStYZWBqA
awdRk4hGNnRUKKe+gj3LV1pyt1lpBlXBdKHsvG5Zk/naDrOrgTFqJVippcLcf/X3
UMwHHxSvCdTgOcJmSLQ2I743Xsjc6r502ph1jAOPfGIbpA5/QxgAznm1AjFsXeVv
WPUX7GKpvor+BHHgW0HbDAMuqSC1qMgB2V2IP/RE5HKDpD+i5lLeZqkWP7Hu2Y04
/HeSQvzuKP6yDCLyGwXaU5zaHBh9tQZBD9JA0+aI2AtlFUWENXBRxd4IscM1QtEJ
g2F0brSBJ23YSq6n9YdmGqUECrex4f+UUrAb9CrZPrkPVXOfJt+sYo5i8w2uk4gc
ua6RW1cNqQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFP2M2hovh4oBiRy/byg16bt5
rGjiMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzNDY3Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqGgMEAGjqrjANBgkqhkiG9w0B
AQsFAAOCAQEAk7uHx5ghyXjFnkCfcPBKRmuVE9RVi3xhLS/xv3WSIyCmG18gtsZk
oO/fOPwR9u8nND5v1BFXHQKDX32jn8fcW7qpO+1Y2qYmNadan/uZ87WIE3pst1Ti
mGx+4jrQhW2zbu1d0303RRhUdZdTiU2GqiN6pFdNeFRB6cKySBcbsorGMdhlubjJ
Lqs8zHf3+bVg1B6xHtFsS46Y4nrFGUDg2CuRoD/RT2emOU4yA4D6quLXyMPnNrc1
DjRE/T026l1xstgZ7cZ7gKIboToUY5DtT6fSmW8HGXSqgpxxXvqaPTI17jkecKOt
aU7+pOTfs88MdyT8GdJM8R0PT671LpFdkA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:40 2025 by rpki-client