Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272887.roa
File:                     AS272887.roa (raw, json)
Hash identifier:          GJs2QgYtttuSWtbVDnuTW7OyY3MiteYL8QUHFDPZ3Lg=
Subject key identifier:   67:9D:C2:88:80:7A:01:FD:3E:37:CD:B6:00:7B:18:A1:82:7E:6C:E6
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7A5E0F375C12C9D033687CD520E8724BA68F1F42
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272887.roa
Signing time:             Tue 17 Mar 2026 16:35:54 +0000
ROA not before:           Tue 17 Mar 2026 16:30:54 +0000
ROA not after:            Tue 16 Mar 2027 16:35:54 +0000
asID:                     272887
IP address blocks:        104.234.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5e:0f:37:5c:12:c9:d0:33:68:7c:d5:20:e8:72:4b:a6:8f:1f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 17 16:30:54 2026 GMT
            Not After : Mar 16 16:35:54 2027 GMT
        Subject: CN=679DC288807A01FD3E37CDB6007B18A1827E6CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:cb:52:63:13:68:d0:1b:74:87:c1:7e:38:
                    f1:20:76:fc:20:e4:a5:b2:d6:49:32:f7:da:5f:47:
                    c3:98:04:7f:b5:af:91:7a:e3:17:39:32:03:8b:ab:
                    9c:9d:b9:80:12:9a:80:85:e3:64:12:a1:9e:13:2a:
                    ad:33:cd:ac:ae:4a:12:8c:83:25:92:be:85:34:bf:
                    a9:17:f0:7f:bf:ea:e2:79:9c:8e:70:be:2b:cb:47:
                    09:6c:1d:23:f7:e4:30:66:15:b4:83:5e:a2:2c:00:
                    30:fe:49:99:89:b1:5f:78:6d:88:c7:2a:6d:78:11:
                    b2:34:e6:0b:f5:0b:aa:d2:a1:c2:78:1f:65:72:2e:
                    a8:94:af:4a:75:98:fc:1d:2c:37:34:d0:59:e7:d4:
                    2c:da:52:16:d9:6a:c1:1e:ff:98:3a:73:56:d2:26:
                    99:75:81:7e:88:55:7e:20:1a:7b:92:7f:ad:24:0d:
                    42:27:bb:4b:4d:5f:de:cb:06:57:13:73:5f:21:a0:
                    b3:8a:c3:57:5e:ca:6a:f8:3c:a9:5f:2e:d3:c2:14:
                    c5:54:2e:61:46:c2:1d:81:68:32:49:26:0d:ce:1e:
                    f9:1e:e7:05:37:50:a7:44:44:94:6b:cc:31:37:3c:
                    56:30:8e:e5:88:d5:f7:29:91:d8:12:a6:1f:81:66:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9D:C2:88:80:7A:01:FD:3E:37:CD:B6:00:7B:18:A1:82:7E:6C:E6
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272887.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:3b:26:95:17:c9:2a:7c:61:1e:d5:95:aa:20:61:c5:33:
         b0:44:a5:34:38:2b:87:50:e1:6e:2c:20:35:0e:90:cf:69:4a:
         20:bd:fa:cb:f9:d3:3e:1e:c1:3e:d2:c2:d4:fe:fe:18:38:2c:
         42:53:b5:9d:68:d3:cb:6f:d8:96:21:59:ce:39:14:20:75:9d:
         b6:6f:e7:3b:6a:30:cd:08:d7:35:19:38:d8:9f:36:f0:00:e7:
         e4:3f:ad:7a:47:3d:fc:10:a1:89:ac:24:10:b6:bf:f7:ee:b2:
         dd:e7:26:ee:7a:8f:de:3f:25:a7:43:05:fa:b3:0d:5b:b7:5a:
         f1:75:f8:19:ec:3b:74:cb:89:ca:54:5d:2a:e9:f4:7a:00:84:
         67:6f:92:d9:73:20:12:83:d4:7b:92:b4:1d:09:23:24:24:55:
         3b:9d:e9:e3:71:17:b3:eb:c4:30:74:c2:98:79:af:c0:45:b0:
         a8:bc:fe:3f:92:89:6a:9e:e6:d2:09:e2:f4:5f:ad:2e:a4:9e:
         06:77:57:a2:d0:15:13:27:3e:84:12:77:a1:69:2f:dd:35:5a:
         72:0d:c3:82:50:b5:ed:22:f8:fc:f2:d5:8a:09:ed:69:4e:18:
         53:ed:ce:65:07:bc:68:ce:77:a1:25:04:73:32:4e:cc:21:c6:
         66:6a:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:45:56 2026 by rpki-client