Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396350.roa
File:                     AS396350.roa (raw, json)
Hash identifier:          OAFpwXGiwzX0mdOVRwz3rLE7c9rjCiuDuJ1rnegrv1I=
Subject key identifier:   C4:B9:88:8B:08:8A:72:83:2F:C5:E8:74:A4:1C:CC:A0:05:F8:D0:7E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6767B5C0A151B4B2AB725940EC546ED4847CC023
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396350.roa
Signing time:             Sun 12 Oct 2025 18:34:09 +0000
ROA not before:           Sun 12 Oct 2025 18:29:09 +0000
ROA not after:            Sun 11 Oct 2026 18:34:09 +0000
asID:                     396350
IP address blocks:        104.234.74.0/24 maxlen: 24
                          104.234.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:67:b5:c0:a1:51:b4:b2:ab:72:59:40:ec:54:6e:d4:84:7c:c0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 12 18:29:09 2025 GMT
            Not After : Oct 11 18:34:09 2026 GMT
        Subject: CN=C4B9888B088A72832FC5E874A41CCCA005F8D07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:cb:4c:84:5f:fb:ab:8c:24:7f:6e:ff:52:
                    03:63:fb:d9:da:34:00:7f:e1:37:94:b0:93:a7:79:
                    02:de:cc:91:f9:e9:59:6e:fc:14:36:61:11:3c:6a:
                    39:3b:2b:89:13:15:f6:05:92:97:35:ca:22:50:62:
                    b5:a9:63:26:f7:2e:8a:ee:4f:db:44:72:f2:22:37:
                    28:06:ce:6a:d7:97:20:c9:9a:ea:d0:c0:d7:37:93:
                    d9:91:eb:e2:70:81:00:fa:99:cf:8d:58:45:63:05:
                    3e:ff:53:e8:c7:13:a6:4d:43:2b:ba:b4:a8:3a:b3:
                    27:21:fc:f7:05:04:8d:79:a9:30:1f:ce:a4:09:f2:
                    6e:07:8f:ed:a6:7a:33:13:78:32:a1:c2:85:f2:0b:
                    8f:69:e5:01:3c:74:41:d8:2c:88:88:2f:26:36:9c:
                    8b:19:a3:f1:10:c3:a3:3e:8e:7b:76:39:71:39:40:
                    a9:fe:96:44:fe:65:5d:cc:e7:3d:64:bd:a1:d1:38:
                    71:f5:6d:a1:69:4a:62:84:a8:f6:10:0e:74:8b:81:
                    a0:85:d9:1d:ba:b0:41:85:8b:1b:c9:25:e2:c8:6b:
                    41:fe:0a:82:db:0f:a5:9f:91:a8:60:b9:2b:cd:eb:
                    80:8b:8f:3b:26:41:f7:3d:af:28:6d:11:9f:db:d5:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B9:88:8B:08:8A:72:83:2F:C5:E8:74:A4:1C:CC:A0:05:F8:D0:7E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396350.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.74.0/24
                  104.234.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:1e:ad:16:6c:e6:6c:5f:1e:69:2c:55:32:fa:06:c0:fc:
         20:86:a0:c2:58:ab:13:ff:c6:02:01:d9:30:e9:ec:53:72:08:
         90:4a:14:5f:0b:f3:ef:29:0e:a6:cd:9b:a7:d0:a1:51:7b:cb:
         f9:b3:6b:d5:88:2f:46:71:31:c1:a7:5d:bb:13:46:46:38:7c:
         e0:dc:0a:ae:a9:d4:79:7c:85:24:7d:c8:72:5f:78:82:2d:e2:
         71:66:28:fb:dc:e6:6f:c2:54:bd:f1:6b:93:9b:bd:ef:33:dc:
         67:1f:e5:35:39:c2:1e:09:ef:64:8d:b3:b6:6d:51:bd:c8:a8:
         dd:dc:dd:05:88:dd:36:d7:3e:84:44:7c:21:33:38:21:64:a1:
         01:46:8e:e9:4f:ce:ac:58:df:41:00:60:02:5d:ca:54:43:2b:
         ce:5e:a7:23:f6:fd:1d:b0:cf:ab:9a:5d:e0:ff:da:91:b2:ed:
         40:d7:ea:a6:7f:60:86:ac:e8:5a:85:a8:b6:b3:91:6b:d4:3d:
         7f:41:ec:51:09:bf:da:c1:aa:2b:0c:15:3e:c1:31:d1:f6:11:
         f7:32:59:db:4e:ff:e4:e1:4c:84:a4:7a:2a:b0:72:7b:34:d2:
         80:7e:8e:cd:f5:c3:55:3b:92:ca:30:da:31:fe:18:d0:32:d1:
         e2:b1:a2:2a
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUZ2e1wKFRtLKrcllA7FRu1IR8wCMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDEyMTgyOTA5WhcNMjYxMDExMTgzNDA5
WjAzMTEwLwYDVQQDEyhDNEI5ODg4QjA4OEE3MjgzMkZDNUU4NzRBNDFDQ0NBMDA1
RjhEMDdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UTLTIRf+6uM
JH9u/1IDY/vZ2jQAf+E3lLCTp3kC3syR+elZbvwUNmERPGo5OyuJExX2BZKXNcoi
UGK1qWMm9y6K7k/bRHLyIjcoBs5q15cgyZrq0MDXN5PZkevicIEA+pnPjVhFYwU+
/1PoxxOmTUMrurSoOrMnIfz3BQSNeakwH86kCfJuB4/tpnozE3gyocKF8guPaeUB
PHRB2CyIiC8mNpyLGaPxEMOjPo57djlxOUCp/pZE/mVdzOc9ZL2h0Thx9W2haUpi
hKj2EA50i4GghdkdurBBhYsbySXiyGtB/gqC2w+ln5GoYLkrzeuAi487JkH3Pa8o
bRGf29X9dwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFMS5iIsIinKDL8XodKQczKAF
+NB+MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5NjM1MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqSgMEAGjqrDANBgkqhkiG9w0B
AQsFAAOCAQEABAwerRZs5mxfHmksVTL6BsD8IIagwlirE//GAgHZMOnsU3IIkEoU
Xwvz7ykOps2bp9ChUXvL+bNr1YgvRnExwadduxNGRjh84NwKrqnUeXyFJH3Icl94
gi3icWYo+9zmb8JUvfFrk5u97zPcZx/lNTnCHgnvZI2ztm1Rvcio3dzdBYjdNtc+
hER8ITM4IWShAUaO6U/OrFjfQQBgAl3KVEMrzl6nI/b9HbDPq5pd4P/akbLtQNfq
pn9ghqzoWoWotrORa9Q9f0HsUQm/2sGqKwwVPsEx0fYR9zJZ207/5OFMhKR6KrBy
ezTSgH6OzfXDVTuSyjDaMf4Y0DLR4rGiKg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:07:22 2025 by rpki-client