Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa
File:                     AS43350.roa (raw, json)
Hash identifier:          1UQWGzja+J+9Oj656ydgZV+7lYM29INxi5EHYUV6b/A=
Subject key identifier:   72:07:26:04:39:58:D8:CA:F7:85:02:5C:07:03:C3:9A:94:B6:71:A2
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2E96567DC979614D062A7F03CA926E45021B1011
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa
Signing time:             Fri 20 Mar 2026 00:04:40 +0000
ROA not before:           Thu 19 Mar 2026 23:59:40 +0000
ROA not after:            Fri 19 Mar 2027 00:04:40 +0000
asID:                     43350
IP address blocks:        104.234.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:96:56:7d:c9:79:61:4d:06:2a:7f:03:ca:92:6e:45:02:1b:10:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 19 23:59:40 2026 GMT
            Not After : Mar 19 00:04:40 2027 GMT
        Subject: CN=720726043958D8CAF785025C0703C39A94B671A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:b0:b1:dc:fd:77:e1:39:08:0f:ea:79:86:
                    a5:f9:0b:49:49:25:57:00:de:60:d9:f8:8f:df:ed:
                    11:54:c6:89:01:ea:d0:fb:b3:15:70:62:9c:63:43:
                    5a:a4:73:cd:31:f9:22:89:d2:2a:41:54:d5:27:4a:
                    47:23:f4:3b:14:12:07:df:2e:3f:60:9b:4c:76:20:
                    78:74:86:5d:95:06:6d:e3:9c:fa:e6:5a:24:77:f3:
                    70:8d:f2:57:e7:3d:87:2b:b9:3f:19:52:ee:ec:66:
                    95:20:57:08:ad:f4:af:fa:f3:99:5b:f0:92:41:23:
                    13:1c:44:84:b4:47:08:e2:59:e5:8c:35:c6:40:61:
                    6b:cf:a1:07:57:9f:a0:18:b8:06:87:72:5d:05:0d:
                    5a:93:80:59:ad:28:b1:ff:b7:39:5e:56:68:7d:b1:
                    9f:39:eb:21:89:73:25:bb:f4:0e:aa:b4:bc:1e:d6:
                    08:de:87:67:96:a0:70:3a:a4:a2:fd:09:f8:43:64:
                    83:cf:b7:d5:f8:27:b2:c5:35:26:56:d3:20:5d:71:
                    e8:1f:73:bf:b9:40:35:af:99:f9:f0:8e:fc:16:1f:
                    bb:15:29:a4:30:38:9a:d2:ee:a4:99:16:d6:e3:e5:
                    e0:4c:df:51:7d:79:fa:29:de:3f:ea:0b:40:c0:5e:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:07:26:04:39:58:D8:CA:F7:85:02:5C:07:03:C3:9A:94:B6:71:A2
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:a2:40:8b:64:32:fb:2a:7f:d6:1b:b3:4b:ac:55:c9:e4:
         8f:8c:02:07:51:2b:45:50:80:fd:1f:c0:3e:55:e4:85:5e:bc:
         53:63:c9:f4:d5:c8:30:81:51:03:32:2a:15:d3:6b:37:23:8e:
         4e:c5:b6:38:ea:ed:e7:5e:fc:63:b2:de:fa:83:e7:c4:43:29:
         85:1b:2e:cc:70:de:cd:68:69:4e:c8:d3:15:f8:ec:f3:80:4c:
         8b:c8:24:09:78:6f:54:14:3e:9b:64:50:93:4c:3a:db:89:92:
         8f:99:8f:cb:1a:5d:9c:12:bf:59:d3:ce:a6:04:6c:e0:76:d0:
         7f:7c:94:62:6a:66:52:3e:93:e5:85:ae:6a:af:4b:5c:87:65:
         da:2c:59:ad:bc:92:d6:40:07:d1:a4:de:71:01:f4:21:d0:4f:
         b2:08:77:78:90:40:b0:4a:4d:3c:2a:e2:4c:05:a6:a5:0e:f6:
         7c:30:92:12:39:53:dc:b1:f0:21:b3:60:08:56:4c:fb:65:43:
         b8:d1:31:b9:80:8a:64:17:e0:a6:72:b4:6f:3c:36:10:72:f4:
         18:5a:d2:d9:38:ee:96:3f:a8:3a:7b:9b:cc:76:41:06:f6:cb:
         0a:14:fe:9b:a4:90:52:3d:b5:98:a2:59:94:fd:e2:48:3c:c6:
         38:2f:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:30:26 2026 by rpki-client