Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa
File:                     2cb447ce-9c11-3486-b23b-1f9b99970a85.roa (raw, json)
Hash identifier:          ouSP/g37kbsjldwlMJ/3FUXE1LpIHyWGkU/z37Od7AE=
Subject key identifier:   14:14:1B:FC:EC:85:72:E1:25:65:70:B2:D1:1A:DF:B9:0C:53:D4:B6
Certificate issuer:       /CN=73c71714-99de-4588-bd63-3b2ad60412ad
Certificate serial:       010D0C9F4328584E0A6FE9B08B4FBD5199591D60
Authority key identifier: 2B:8D:20:69:2E:23:E0:2B:E1:34:EF:7A:0A:E3:1E:4D:65:44:CD:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     16509
IP address blocks:        204.89.42.0/24 maxlen: 24
                          204.89.43.0/24 maxlen: 24
                          204.89.44.0/24 maxlen: 24
                          204.89.45.0/24 maxlen: 24
                          204.89.46.0/24 maxlen: 24
                          204.89.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:e9:b0:8b:4f:bd:51:99:59:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c71714-99de-4588-bd63-3b2ad60412ad
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=0c9e0f70-83b9-45cf-9dc1-88dbf44ad654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:49:d0:fd:38:f9:a8:12:bc:e8:b2:3c:7b:
                    fa:fa:72:83:e1:32:fb:bb:95:4c:cd:d8:e5:65:d9:
                    8c:51:31:93:21:01:31:06:7d:c7:61:43:e6:f2:6e:
                    c5:88:f2:34:b4:3d:c4:a7:2d:bc:11:63:a2:de:8b:
                    7b:64:a7:a9:23:16:87:ca:79:df:51:d8:91:27:9a:
                    c2:f6:ad:f8:04:fe:0c:74:d3:ab:95:8f:d3:9f:eb:
                    7f:05:24:69:fa:b5:4a:05:6b:5b:46:18:b6:3c:0a:
                    04:f4:10:e9:ec:73:4c:6f:b8:1e:9d:08:40:d9:4d:
                    eb:d9:d7:97:91:02:83:c6:27:ec:a9:e4:3f:43:7b:
                    03:90:42:f8:15:d6:ae:6b:9f:f3:68:53:0c:73:36:
                    56:ce:c7:c5:b2:51:d0:93:3c:76:5c:a5:f4:60:ca:
                    13:b9:4e:9d:6b:8f:59:da:28:e8:e8:c2:1a:82:4e:
                    80:26:9f:c8:68:d1:e2:cd:27:72:cc:9b:4d:5d:e4:
                    5f:27:19:84:88:69:29:56:03:b3:11:80:1d:15:a2:
                    79:30:8e:01:3c:48:7c:63:19:f8:ad:c4:1b:8c:59:
                    35:cf:cc:29:d8:91:82:99:56:b3:88:aa:eb:b7:df:
                    fa:98:cc:25:31:b2:83:4d:63:ca:90:38:4a:ba:76:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:1B:FC:EC:85:72:E1:25:65:70:B2:D1:1A:DF:B9:0C:53:D4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.crl

            X509v3 Authority Key Identifier:
                keyid:2B:8D:20:69:2E:23:E0:2B:E1:34:EF:7A:0A:E3:1E:4D:65:44:CD:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.42.0-204.89.47.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:00:de:b5:4c:81:20:a4:e0:20:08:bd:57:9a:4f:bd:20:
         23:57:96:95:cf:51:b2:90:46:e3:39:b6:54:31:d8:37:a4:0c:
         8d:80:96:21:79:d8:6b:53:1a:c2:3d:df:54:c5:aa:ba:34:b1:
         32:11:b1:48:c5:e5:4a:c3:49:ab:93:9c:aa:c9:94:45:16:0d:
         d1:57:5d:46:e8:32:58:b1:67:2d:29:7e:8d:c1:a3:ff:71:7f:
         51:ab:bd:7a:5d:dc:b2:d5:d0:a2:dc:17:7b:33:16:98:cb:07:
         5f:20:84:f8:7f:b4:a0:c9:88:1d:ed:ad:27:cd:36:05:24:0b:
         a2:82:69:12:63:d0:49:ca:71:78:88:38:b9:ff:9f:79:1e:8f:
         47:a8:bf:dd:38:e4:09:99:ec:3d:ad:a6:2b:a5:52:77:09:ea:
         ab:8f:45:54:c1:1f:45:a8:6a:6b:44:9e:fc:26:30:2a:ee:ee:
         8a:3d:93:e6:99:3f:84:c6:21:db:42:6c:09:31:fd:26:ae:3d:
         e0:72:03:73:75:7f:c6:32:cc:6c:61:8c:2e:a1:ae:e5:b7:6e:
         06:19:ec:0f:ba:c7:cf:12:8c:5d:f2:6b:36:12:8e:9a:b8:f3:
         03:b4:9c:26:99:52:28:2e:9a:a5:ca:52:2a:cc:96:79:58:ce:
         24:df:97:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:23:48 2026 by rpki-client