Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401661.roa
File:                     AS401661.roa (raw, json)
Hash identifier:          WrxGAvuVnNN/0Lwz+vxoFqqgz7AMiIs7R2SFGpFXbpk=
Subject key identifier:   BE:A2:34:3F:53:CE:09:19:B2:19:AD:32:AF:14:B1:8E:B2:B3:D8:EE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3116D848E2D5DEDBCC1DE222CAC2F9505EDF12F5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401661.roa
Signing time:             Mon 09 Nov 2026 17:50:50 +0000
ROA not before:           Mon 09 Nov 2026 17:45:50 +0000
ROA not after:            Mon 08 Nov 2027 17:50:50 +0000
asID:                     401661
IP address blocks:        104.234.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 03:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:16:d8:48:e2:d5:de:db:cc:1d:e2:22:ca:c2:f9:50:5e:df:12:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov  9 17:45:50 2026 GMT
            Not After : Nov  8 17:50:50 2027 GMT
        Subject: CN=BEA2343F53CE0919B219AD32AF14B18EB2B3D8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:44:ab:37:e8:0f:71:24:f8:7b:2c:96:f6:
                    37:7b:90:fa:36:87:78:9a:67:8d:c7:22:2b:3c:7f:
                    61:af:8d:80:69:cb:aa:df:52:0c:d6:cf:d7:b6:0b:
                    c4:c5:23:12:aa:80:47:9a:75:5c:c3:46:fc:07:02:
                    81:63:16:c4:4a:12:6c:b0:7d:44:f2:4a:dd:94:43:
                    f0:02:8c:cb:b9:42:f4:3b:8a:d8:67:3e:37:57:cb:
                    92:eb:9d:ef:c5:75:1e:c6:d9:94:98:b3:c0:a5:ab:
                    55:fc:f4:77:77:3d:c2:3f:2b:c7:61:c5:b3:80:83:
                    62:2c:de:61:f4:19:05:81:ad:0a:31:43:f8:a7:d1:
                    d6:86:eb:1c:4d:24:14:9f:c2:07:36:e0:c5:6f:2a:
                    e5:9c:cc:4b:d9:90:e0:07:0d:b3:83:47:7a:c0:8a:
                    a2:0e:82:30:2e:95:57:81:0a:c1:94:d1:48:9d:c1:
                    16:c6:1b:79:95:d3:c0:f3:6d:43:37:7d:7b:10:3f:
                    4d:86:f8:7e:00:6c:e8:98:ed:a1:cb:fd:96:9c:84:
                    1a:56:e9:72:24:0b:58:1f:66:02:4d:24:04:ea:be:
                    c0:87:f9:dd:f2:5f:d3:68:cd:04:38:d7:a8:62:45:
                    f9:15:7b:c6:1b:0b:22:50:16:04:e9:40:e9:70:91:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A2:34:3F:53:CE:09:19:B2:19:AD:32:AF:14:B1:8E:B2:B3:D8:EE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:65:2e:44:0e:6c:3d:a0:74:9c:eb:53:5f:09:22:8f:07:
         4e:df:50:fd:4c:2d:0c:8a:53:c4:cb:41:f5:c1:28:52:d2:b2:
         b9:10:3e:9b:28:ba:85:8b:ce:4d:3f:41:82:54:bf:6f:c1:b9:
         e0:2e:84:d6:4d:6c:09:e5:35:b3:cd:e5:67:85:f3:9c:e8:61:
         16:a6:fa:61:c7:c2:18:18:2b:f6:ff:ff:2b:1c:77:8c:d2:b9:
         fc:e6:8b:b3:99:5b:4a:61:11:ec:f5:87:f4:b2:14:ed:26:4f:
         63:80:05:82:fe:02:23:83:08:19:fe:55:84:2c:fb:03:f6:54:
         6c:ca:d7:23:2d:ad:e8:19:8b:a4:97:36:2a:0a:cf:60:ce:bf:
         66:73:ee:c8:24:34:63:df:7d:56:db:b9:16:86:f9:b3:f7:35:
         4f:c9:66:fb:0f:a9:06:4b:20:d6:a4:f7:15:88:64:c6:95:6c:
         69:a4:d1:a1:57:3e:f7:bc:35:a2:72:26:4f:ff:9b:95:2e:0e:
         42:7d:99:4d:79:26:9d:ea:74:e0:85:f7:5c:a3:ab:14:53:52:
         fb:f9:1d:f9:25:d9:73:83:34:0c:33:b0:c4:ab:c2:4c:86:e5:
         ea:d8:de:13:c5:c7:4f:d1:5b:c9:ae:fb:b6:72:07:b0:d7:7e:
         86:88:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:20:37 2026 by rpki-client