Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401322.roa
File:                     AS401322.roa (raw, json)
Hash identifier:          7gaKV7zf/EHH4EozVmdeEOuv7hHd89EY+LFMVRwXvzE=
Subject key identifier:   C5:AC:04:31:93:B4:2A:C7:38:BB:2E:BD:1D:97:98:07:15:45:CA:14
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3529964D877BF2D740DA74FA439E0FD6A6C28668
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401322.roa
Signing time:             Tue 28 Apr 2026 07:14:53 +0000
ROA not before:           Tue 28 Apr 2026 07:09:53 +0000
ROA not after:            Tue 27 Apr 2027 07:14:53 +0000
asID:                     401322
IP address blocks:        104.234.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 10:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:29:96:4d:87:7b:f2:d7:40:da:74:fa:43:9e:0f:d6:a6:c2:86:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 28 07:09:53 2026 GMT
            Not After : Apr 27 07:14:53 2027 GMT
        Subject: CN=C5AC043193B42AC738BB2EBD1D9798071545CA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:e7:c5:de:7e:f6:04:a3:e9:7c:24:9d:43:
                    31:45:48:76:99:97:c3:30:ef:e9:e2:fb:a4:be:ed:
                    b0:85:90:58:b7:cb:9c:4a:76:0b:07:af:2d:a8:48:
                    3c:9b:39:a3:7c:57:4a:3a:54:0e:fa:73:2a:f5:14:
                    ae:79:d3:7a:4b:0a:cf:ac:95:8a:62:a9:ac:fd:d8:
                    83:fa:37:54:37:80:ec:8f:92:b2:54:11:0b:de:11:
                    bb:c0:58:09:b9:ed:e8:81:31:33:5a:f4:31:e8:58:
                    86:2a:e0:42:81:8b:95:90:0d:44:41:d3:ea:24:a0:
                    d6:c2:f5:6c:b7:2f:42:db:60:1e:9f:fe:11:eb:41:
                    10:f3:b5:4b:ed:b9:1a:f4:78:f4:9d:93:c8:79:14:
                    12:a2:cc:be:6b:bb:09:bd:f1:1d:b1:62:c6:2f:0d:
                    a6:45:36:32:bc:9e:ed:a5:fb:7e:e1:09:3b:c8:d4:
                    35:cf:97:e9:07:c4:89:d2:34:d3:42:09:cb:4f:38:
                    be:63:67:73:35:c3:80:7d:f4:e0:87:25:33:84:50:
                    c7:0b:28:be:1f:75:73:34:15:80:6e:9d:6d:dd:a3:
                    82:9e:52:31:99:c5:18:71:16:1f:ea:e6:79:49:ab:
                    fb:bf:33:ca:b0:64:85:8a:20:76:31:ed:bf:d7:ae:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:04:31:93:B4:2A:C7:38:BB:2E:BD:1D:97:98:07:15:45:CA:14
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401322.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:67:0f:79:4d:40:97:06:3c:6f:d2:1e:31:af:cc:78:82:
         75:f5:ca:c3:96:46:e3:ee:73:ed:56:c8:6d:d7:18:d1:13:0d:
         25:5b:c5:7f:9e:ee:7a:14:55:db:1f:5f:8b:26:45:df:2f:96:
         5e:92:bd:ec:f3:89:b8:6a:34:11:36:ec:ad:75:3d:c7:2e:06:
         d0:f3:58:75:bd:c2:ec:62:3a:23:13:5f:5c:03:f6:70:52:41:
         ea:93:a1:85:62:bd:88:0c:15:27:e0:5b:c8:2f:3a:88:c3:1f:
         64:8b:64:45:58:b7:64:87:c9:fc:49:74:9e:7b:dd:53:fe:88:
         bc:d6:77:51:b1:74:89:d9:ff:46:b5:5f:14:d5:ea:c3:67:21:
         87:f1:50:20:96:8c:df:9b:39:4c:5a:b4:4f:c6:75:53:20:7a:
         cf:09:0a:26:33:0a:a1:65:79:df:9f:50:11:80:fd:26:61:8b:
         aa:42:f9:1d:a8:d9:77:50:df:8d:ad:b2:e4:a1:99:03:25:aa:
         0b:d4:41:dc:46:2d:e6:05:5d:51:d5:ef:a0:c3:f4:50:43:35:
         29:9c:cb:f1:bf:b1:d4:25:1c:e0:3d:8c:45:8b:66:86:df:9e:
         5d:c4:e3:19:89:be:7f:99:94:bd:e9:8e:51:6a:3b:51:21:bc:
         13:f0:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:04 2026 by rpki-client