Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          DvkzCTP1Cle+iCbwbFSoabCX9q7oqH3dNN7orykJOVA=
Subject key identifier:   0C:B6:B4:CB:01:92:ED:97:34:B3:04:28:75:7B:45:FB:B5:F1:99:9E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1678FED7072F41FD91F61D648BD505F6FD21ACD4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa
Signing time:             Tue 17 Mar 2026 16:35:54 +0000
ROA not before:           Tue 17 Mar 2026 16:30:54 +0000
ROA not after:            Tue 16 Mar 2027 16:35:54 +0000
asID:                     212669
IP address blocks:        104.234.230.0/24 maxlen: 24
                          104.234.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:78:fe:d7:07:2f:41:fd:91:f6:1d:64:8b:d5:05:f6:fd:21:ac:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 17 16:30:54 2026 GMT
            Not After : Mar 16 16:35:54 2027 GMT
        Subject: CN=0CB6B4CB0192ED9734B30428757B45FBB5F1999E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:6c:cd:c9:6c:b1:52:70:34:da:a4:e7:9a:
                    b5:63:ca:62:5e:ca:10:46:82:98:ee:cd:27:3d:07:
                    e3:3a:b2:96:f1:67:c1:60:c1:9e:5d:8d:9d:26:5e:
                    16:9f:bb:d1:d4:45:e3:14:c6:1a:a8:ef:77:aa:22:
                    26:c4:4c:45:3f:d2:16:e3:34:e4:ad:9a:3d:1f:ba:
                    bd:7a:21:ea:66:7a:3b:c7:48:1b:71:ac:11:6d:73:
                    2b:c7:c8:d1:89:67:dd:83:22:47:82:be:8f:09:6c:
                    ab:95:5b:45:55:29:71:2d:fc:6b:a5:77:a1:b4:28:
                    4b:9b:f8:83:72:06:18:c9:ad:b7:42:b3:19:e5:7b:
                    48:e6:fd:16:3c:65:5d:2a:69:1a:f6:3f:99:a4:ea:
                    d7:fc:57:c3:b6:cc:9b:d3:a1:82:d7:8a:d4:62:a1:
                    62:d4:1f:0c:08:b0:e9:c6:16:3e:6c:1e:9e:fe:f5:
                    9e:2d:e6:ed:32:f3:03:ef:ee:ad:9c:d0:9c:aa:a1:
                    75:ec:4e:39:c1:a3:af:62:0d:d6:53:ed:ed:50:3f:
                    f3:51:de:63:6c:5e:98:58:6b:1a:9e:9b:38:5b:37:
                    24:61:e2:26:09:16:ba:92:f3:3a:2e:3a:67:c7:73:
                    88:3b:04:a6:02:da:29:d2:66:6b:7f:a1:15:64:d0:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:B4:CB:01:92:ED:97:34:B3:04:28:75:7B:45:FB:B5:F1:99:9E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.230.0/24
                  104.234.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:ed:09:50:00:3e:9a:ba:b3:a8:56:64:2e:12:6b:a1:54:d5:
         ea:39:95:db:07:14:2d:12:2d:16:28:17:18:51:3a:e1:dc:a7:
         42:43:48:d2:71:34:91:ef:ba:92:97:fe:58:ab:8b:5c:85:2b:
         1b:7c:b4:de:47:ba:55:a9:2a:64:dc:fd:93:97:08:0f:67:6c:
         01:28:67:f0:5b:0f:03:9e:4f:98:a9:15:24:56:20:eb:e8:2c:
         b0:99:b1:64:cb:51:df:a4:8d:8b:5c:93:c7:36:e5:25:16:cc:
         65:3d:77:67:84:91:21:23:75:f6:1b:4d:f9:9b:9b:2a:0b:9c:
         d4:d5:73:cf:96:9d:52:69:73:4a:55:a3:0e:f1:cf:0d:d1:eb:
         3a:fc:ca:d9:64:09:64:a0:14:74:35:da:e4:5c:17:b0:fc:96:
         0c:bc:1f:3d:84:1b:4d:95:8d:de:15:c7:7b:3f:08:80:31:ec:
         93:ef:c4:cf:3d:23:3f:4e:fa:95:44:7a:67:90:bf:69:df:a9:
         69:1a:40:19:be:f5:b1:3f:e5:74:f1:93:b3:6a:4c:e7:c9:b0:
         87:d7:cf:ba:3c:c8:1f:8c:42:e0:3c:01:c3:0a:82:63:7f:51:
         62:8f:4d:46:7d:12:54:8e:33:c7:43:9e:03:38:ca:86:e4:ae:
         ac:2f:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:45:53 2026 by rpki-client