Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa
File:                     AS13737.roa (raw, json)
Hash identifier:          /ud6XHuPiRy7qimJJ2iy2oMiTpzs3j92I4ytKLQpwT0=
Subject key identifier:   3D:AA:FE:A7:02:5D:E1:10:2B:69:F7:ED:12:DA:9B:91:80:03:75:4D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1961D53061B3D5F4CD9256C43EEF0BE7AEB8C529
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa
Signing time:             Tue 17 Mar 2026 22:35:54 +0000
ROA not before:           Tue 17 Mar 2026 22:30:54 +0000
ROA not after:            Tue 16 Mar 2027 22:35:54 +0000
asID:                     13737
IP address blocks:        104.234.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:61:d5:30:61:b3:d5:f4:cd:92:56:c4:3e:ef:0b:e7:ae:b8:c5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 17 22:30:54 2026 GMT
            Not After : Mar 16 22:35:54 2027 GMT
        Subject: CN=3DAAFEA7025DE1102B69F7ED12DA9B918003754D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:73:89:50:59:b4:a3:14:05:f3:a5:30:4a:
                    de:f3:9c:7c:7c:5b:7a:d5:4c:a9:4d:bf:56:40:b3:
                    bc:ed:53:42:70:c4:e8:1b:6d:bd:f4:f5:42:41:f4:
                    0c:34:13:7d:98:9d:40:b3:83:b1:2a:19:ee:58:8a:
                    cb:9a:8c:1a:7d:d3:8f:da:b4:36:44:71:8b:89:1e:
                    79:81:b6:0e:33:ab:11:1d:ae:05:12:92:40:b2:bf:
                    49:4e:4b:80:f0:a3:f4:d2:e8:45:42:e0:df:13:23:
                    d1:7f:5a:ce:24:60:22:43:68:8f:5d:9c:a2:9b:6a:
                    51:2b:f9:bf:4c:45:68:76:e5:ef:ae:44:ce:27:97:
                    d8:dd:39:88:bd:db:fd:4b:3e:bd:0c:3f:48:75:f3:
                    a2:e7:38:58:53:5c:c7:9b:b0:56:5f:3e:fb:b9:df:
                    dc:0f:33:7e:cd:83:1a:8d:93:5b:7b:3d:cd:ca:52:
                    5d:a1:6a:2d:aa:19:43:20:af:8a:6e:b5:3f:7a:25:
                    b4:ec:1f:8b:ee:62:92:47:66:d0:e5:e7:db:11:b7:
                    76:9c:4c:27:65:e4:fc:9e:a5:91:86:cf:d1:b0:78:
                    70:a3:71:ed:29:ca:03:df:6f:8e:7f:b4:13:f5:54:
                    9c:d3:c1:f3:95:fc:88:9e:6b:c3:4a:de:b8:d7:c1:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:FE:A7:02:5D:E1:10:2B:69:F7:ED:12:DA:9B:91:80:03:75:4D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:80:42:03:be:16:2a:0d:a1:db:05:a2:53:4e:59:54:d3:e9:
         17:00:bc:be:e3:66:16:07:0d:77:02:0f:e7:07:43:0c:99:bd:
         65:68:a5:d1:51:57:c8:9a:42:02:30:5a:d1:fd:71:f1:43:8e:
         ef:62:c6:53:a7:83:b4:4c:a8:4b:26:88:79:de:6e:71:02:a2:
         a1:10:55:04:e9:17:40:e2:4b:c8:ab:24:aa:37:b0:d0:b2:aa:
         02:d4:66:2c:e5:28:a0:73:47:db:24:2e:81:d0:6a:ea:a1:05:
         b8:34:8f:cd:aa:e8:7f:5c:d1:c0:63:7f:d8:cb:20:a1:41:e9:
         23:87:7f:17:88:44:b2:d7:89:95:b7:46:66:3f:ca:fd:c6:6c:
         63:10:af:a0:83:e9:ee:f8:e3:6b:8e:ad:4f:8a:66:f5:28:cc:
         f0:18:06:cc:07:82:88:a2:64:1a:9b:83:0d:45:ee:2d:17:6b:
         a3:02:b2:62:44:d7:71:e6:b9:cb:04:54:20:fc:a6:6e:bb:ea:
         37:d7:73:4b:d8:4f:b1:a4:57:80:f0:23:ea:12:77:b5:ea:20:
         81:2c:cf:64:a2:75:f1:eb:00:82:8f:19:b9:df:e1:71:ec:c7:
         f5:c6:30:06:29:c0:a2:61:3a:77:b3:22:14:35:ca:17:28:49:
         3c:3d:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:45:22 2026 by rpki-client