Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19318.roa
File:                     AS19318.roa (raw, json)
Hash identifier:          y9R4Prn6lkTdVxy8d6lcYHxk2g0FUcb5C+UBeQb2+1Q=
Subject key identifier:   E0:4C:86:DB:22:F1:76:43:B4:54:1C:17:87:0B:56:C1:B6:A6:3C:33
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       481D9709C1CB967671A3BDDB8BC438544F0D2668
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19318.roa
Signing time:             Fri 10 Oct 2025 17:15:58 +0000
ROA not before:           Fri 10 Oct 2025 17:10:58 +0000
ROA not after:            Fri 09 Oct 2026 17:15:58 +0000
asID:                     19318
IP address blocks:        104.234.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1d:97:09:c1:cb:96:76:71:a3:bd:db:8b:c4:38:54:4f:0d:26:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 10 17:10:58 2025 GMT
            Not After : Oct  9 17:15:58 2026 GMT
        Subject: CN=E04C86DB22F17643B4541C17870B56C1B6A63C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:df:98:b6:28:26:9b:23:bb:f9:5a:c0:7e:
                    df:c9:05:72:3d:d4:c7:72:54:49:f8:9e:36:ce:e9:
                    db:57:04:e0:a2:f2:7e:13:9f:d7:0b:be:b3:36:58:
                    20:38:46:74:2e:ff:27:a7:a3:bd:ca:63:f0:8d:af:
                    0c:79:d0:f4:09:39:22:c7:f2:24:86:26:39:83:34:
                    fd:5b:7c:a8:3f:d9:08:4f:4e:64:d5:32:e0:64:f7:
                    9a:cd:65:64:dd:8c:6c:be:fe:f4:38:fc:32:5d:d7:
                    8f:a7:16:73:10:a5:68:31:1b:b6:44:30:49:5c:22:
                    f8:a8:55:2a:07:17:e5:fc:5e:f2:f7:70:fe:14:f2:
                    26:0e:c2:09:d4:64:a6:79:0f:e7:97:fb:5f:a3:29:
                    0b:1f:6e:94:04:05:c1:81:ce:54:42:d4:59:e9:64:
                    38:db:21:08:3e:fc:f3:d7:a1:ae:f1:41:e4:83:42:
                    74:57:cc:43:99:fa:74:c5:79:2d:a7:0f:85:38:d6:
                    d8:18:16:46:26:5e:f3:78:aa:12:90:73:a5:32:70:
                    e5:ba:d3:3d:80:57:f3:79:40:f7:4d:08:d1:1d:27:
                    8b:29:26:b3:e0:ba:fa:77:fe:c8:47:45:e7:0d:85:
                    c0:7f:d0:dc:42:4c:c3:f4:75:c8:da:2e:62:25:3e:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:86:DB:22:F1:76:43:B4:54:1C:17:87:0B:56:C1:B6:A6:3C:33
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d6:5c:a7:87:ab:72:0f:a1:72:4f:47:52:ba:1e:68:96:a6:
         5f:12:79:70:8d:6d:f8:cf:80:e4:79:bb:91:a6:e7:00:2c:bc:
         7f:4f:5c:9d:39:a4:5d:aa:86:25:71:95:e0:96:11:a8:8a:0f:
         aa:fa:6c:21:68:2a:ac:aa:c5:33:dd:7b:79:41:2f:28:28:09:
         ad:bb:14:4a:a0:44:b2:ce:e4:c0:2d:71:6c:7f:b7:5c:a5:3f:
         34:3d:b0:82:e8:b6:12:b3:37:49:a4:94:28:5a:20:d7:c8:36:
         24:94:d2:68:ac:be:ef:72:b8:de:e4:cd:b2:55:3f:9a:93:11:
         69:ef:67:89:8b:2f:cb:a7:8e:2a:4b:67:a6:96:53:77:81:cc:
         70:f3:28:14:bc:24:56:39:2f:26:4e:26:61:02:67:80:d4:62:
         40:4a:b2:0b:b9:a3:9b:a8:44:55:67:ce:a0:74:0a:7a:95:64:
         b4:2a:94:6b:18:98:b6:83:ff:ff:9e:d8:4f:46:31:40:ae:c4:
         6b:75:5f:1a:ed:92:20:e6:ac:7d:ed:58:c0:15:2d:34:db:68:
         29:c0:da:9c:09:e1:1d:d9:82:1f:00:7e:bf:57:d6:b9:b9:ca:
         fb:bc:5d:f8:8a:6b:ee:22:d9:12:31:68:65:7a:fd:97:06:4a:
         86:53:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:56:53 2025 by rpki-client