Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa
File:                     AS400039.roa (raw, json)
Hash identifier:          SzhSCAi5YjUAF8ACaMWpIFdwD8urvn5s7tRnUOsFIAo=
Subject key identifier:   97:F9:DD:91:43:00:0C:FB:E7:71:1C:F2:C7:62:CB:6A:3E:C4:ED:37
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       14A4697AE7D272C914688B3B880557F415BA3D92
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa
Signing time:             Wed 23 Sep 2026 19:36:20 +0000
ROA not before:           Wed 23 Sep 2026 19:31:20 +0000
ROA not after:            Wed 22 Sep 2027 19:36:20 +0000
asID:                     400039
IP address blocks:        104.234.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a4:69:7a:e7:d2:72:c9:14:68:8b:3b:88:05:57:f4:15:ba:3d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 23 19:31:20 2026 GMT
            Not After : Sep 22 19:36:20 2027 GMT
        Subject: CN=97F9DD9143000CFBE7711CF2C762CB6A3EC4ED37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:73:4f:e9:05:8f:d9:f5:85:b6:68:65:f6:
                    a4:68:a5:c4:81:3e:74:ca:39:1c:3e:6f:14:9b:8a:
                    4f:27:27:d9:2a:d6:41:a0:73:f0:f4:5d:d6:6c:27:
                    b0:2f:5a:af:45:12:d0:ee:3d:4c:82:60:d6:65:f6:
                    4d:1a:24:4e:12:ac:ed:e5:55:67:2a:a7:63:5a:a7:
                    27:fa:a2:d8:4c:94:99:d6:17:4c:83:51:57:fa:78:
                    f1:fd:00:7a:62:0b:15:d3:d1:e9:63:bb:1c:dc:d8:
                    39:78:e6:c6:f7:32:2f:16:1d:91:19:f2:b8:26:9a:
                    43:ac:a1:de:26:b6:b5:ac:24:f1:3e:ef:d0:90:6f:
                    67:c2:5f:e9:05:fa:84:af:64:87:a6:4e:b4:80:3c:
                    7a:a1:74:97:c2:f4:f0:31:7c:26:ae:ac:c6:c6:26:
                    75:73:9e:b7:1b:62:7e:54:44:a5:d0:6d:27:38:9c:
                    79:8d:fc:9c:e5:25:5d:f4:e9:41:25:5f:55:9f:e0:
                    b6:64:19:7d:f9:9f:13:24:a7:09:27:fc:a0:de:50:
                    de:8f:64:6a:97:03:fe:bc:26:06:6a:f2:ea:29:1c:
                    09:96:25:4e:b9:dc:d2:f7:9a:eb:6f:66:e7:a1:f2:
                    18:c2:38:b8:d2:32:66:85:7d:0b:e1:6c:ed:2b:56:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F9:DD:91:43:00:0C:FB:E7:71:1C:F2:C7:62:CB:6A:3E:C4:ED:37
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:14:15:0e:c4:23:89:80:28:4f:bd:1b:13:aa:cf:f6:71:2a:
         1c:ec:c0:c7:55:85:44:35:bf:2d:73:30:2f:fe:99:0a:23:ff:
         44:e0:1f:6a:cb:71:6e:ce:25:30:62:e5:2f:e4:fb:85:99:59:
         07:2b:71:78:21:44:15:2b:f4:6d:cd:86:9b:64:ce:82:53:f6:
         39:64:c5:7d:8f:13:db:d6:f0:4a:dc:ec:e9:42:12:30:29:ad:
         de:9e:cb:64:ab:a9:7d:58:9c:c8:35:d0:37:eb:e6:d5:85:91:
         41:64:2c:08:5b:58:ba:74:4c:30:46:f6:5d:ce:8e:6e:97:02:
         9a:5a:73:2c:b6:6d:79:02:be:4f:1f:80:f6:5d:87:27:06:c9:
         3a:8a:a1:ed:61:92:6d:3d:67:a5:98:f6:5e:b1:dc:28:c6:52:
         3b:d3:2e:df:52:57:af:35:2e:49:ce:b4:33:65:e3:e1:b4:98:
         e8:0e:b1:15:27:79:16:f5:5e:d1:c0:cc:40:b6:95:91:2f:ef:
         c9:2b:98:3c:b3:14:38:68:88:f1:35:da:ee:d4:52:93:3b:03:
         1c:68:84:b6:93:06:0d:18:46:d7:07:8c:98:da:4a:2c:b5:a8:
         df:b1:49:ed:6c:30:ac:2d:0f:c9:8e:4b:ac:d0:75:d9:e3:17:
         81:8c:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:56:11 2026 by rpki-client