Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          wRVt7ihuGGWZ1Hj9Y6YU4a8/4X4a25+GJTUES6S2fdg=
Subject key identifier:   4E:4D:37:7D:8F:3D:3F:66:C0:D7:45:B7:62:62:17:A1:9C:19:2A:66
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4E26E73CF46714015793BD619A9C8250286640EF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa
Signing time:             Thu 02 Oct 2025 00:30:38 +0000
ROA not before:           Thu 02 Oct 2025 00:25:38 +0000
ROA not after:            Thu 01 Oct 2026 00:30:38 +0000
asID:                     19437
IP address blocks:        104.234.162.0/24 maxlen: 24
                          104.234.166.0/24 maxlen: 24
                          104.234.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 07:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:e7:3c:f4:67:14:01:57:93:bd:61:9a:9c:82:50:28:66:40:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  2 00:25:38 2025 GMT
            Not After : Oct  1 00:30:38 2026 GMT
        Subject: CN=4E4D377D8F3D3F66C0D745B7626217A19C192A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:f7:a8:5c:45:50:86:68:ab:43:98:0e:45:
                    8b:cd:31:e9:f7:f2:6f:e5:03:96:56:37:f7:e3:bf:
                    77:1d:16:31:b4:f9:0f:fb:70:cc:26:a8:ef:2a:a5:
                    23:7a:2c:68:fb:c3:ec:88:22:87:fa:2a:fd:fd:55:
                    1d:de:db:74:0a:67:e3:97:0d:a8:a9:a1:65:55:8d:
                    78:7a:db:90:02:3f:46:85:73:62:00:ef:53:71:5a:
                    90:52:50:ea:fd:cf:ff:e6:19:86:25:86:37:1a:06:
                    d1:cf:d6:e5:7d:ef:3f:ab:ea:65:9f:23:83:0f:af:
                    77:49:b8:cb:39:78:e7:91:d9:1e:04:c5:12:b2:6a:
                    c2:0f:ad:2c:7e:f7:f3:95:07:e9:7f:67:33:45:36:
                    77:2f:a5:20:59:22:9b:e2:dd:b4:fe:ef:8d:57:16:
                    4a:52:c9:4e:f8:34:98:37:a6:8c:43:65:53:b4:5b:
                    b6:e9:35:2d:f9:35:b5:91:59:2b:d1:c6:c2:4d:cb:
                    f6:45:17:73:7f:5d:b9:c8:9b:1f:57:04:1a:64:90:
                    23:16:10:b4:36:8f:7f:59:f9:b0:1e:90:2b:d2:70:
                    0a:17:55:15:c5:b8:09:13:90:51:35:60:9b:9f:e6:
                    16:41:50:24:d9:22:08:08:26:8b:17:e4:99:07:85:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4D:37:7D:8F:3D:3F:66:C0:D7:45:B7:62:62:17:A1:9C:19:2A:66
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.162.0/24
                  104.234.166.0/24
                  104.234.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:65:df:73:6a:de:81:d6:45:bb:3e:c6:ff:dc:a8:bf:87:cf:
         f7:b6:e8:50:5c:e6:ef:14:a6:a4:85:7b:35:73:e2:d2:3d:0d:
         fb:85:67:68:5f:8a:d1:3f:ba:79:57:78:a5:6e:91:8d:0b:86:
         5d:cd:cb:75:3f:d8:f1:5f:be:c2:bf:26:86:25:dc:df:96:13:
         fc:19:de:62:4f:13:b2:27:39:bf:16:89:41:17:fb:b4:0e:0a:
         67:8e:0c:81:36:93:16:ab:00:2a:85:47:7d:ec:29:cf:aa:14:
         84:ce:09:39:fb:f2:6c:be:a9:6d:9c:0a:c0:64:56:da:a2:81:
         10:99:ee:38:47:37:69:40:8d:f4:d5:38:41:b2:cd:e8:15:60:
         e7:a5:3e:07:de:f5:f9:39:b9:d8:4a:fb:7a:bb:97:e5:f7:e0:
         65:91:d0:f7:a7:c6:27:44:95:1c:7f:4d:08:53:6d:e1:50:91:
         af:72:62:44:13:ec:08:6b:6e:94:8b:2e:93:0a:47:aa:94:35:
         76:0f:53:a8:ad:2b:75:d1:2c:ca:36:fd:6a:dc:19:95:21:97:
         db:d3:15:55:d5:d1:31:ea:6f:33:f1:3d:ba:b6:49:86:81:b4:
         c1:e1:9b:6e:6c:9d:4e:bf:a9:33:bb:3d:0f:59:12:63:dd:0b:
         87:96:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:44 2025 by rpki-client