Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa
File:                     2cb447ce-9c11-3486-b23b-1f9b99970a85.roa (raw, json)
Hash identifier:          cb3L7xn2HW+yaJ4Ad/pmDcT1bmZczSkFhqqQ9AAaYvI=
Subject key identifier:   FB:5C:B8:3A:9F:33:4A:C8:93:6E:A1:8E:63:49:F8:CF:9E:69:B0:D3
Certificate issuer:       /CN=73c71714-99de-4588-bd63-3b2ad60412ad
Certificate serial:       010D0C9F4328584A8A79E43B22D34FDF61536300
Authority key identifier: 2B:8D:20:69:2E:23:E0:2B:E1:34:EF:7A:0A:E3:1E:4D:65:44:CD:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa
Signing time:             Wed 16 Jul 2025 20:07:55 +0000
ROA not before:           Wed 16 Jul 2025 20:07:55 +0000
ROA not after:            Tue 14 Oct 2025 20:07:55 +0000
asID:                     16509
IP address blocks:        204.89.46.0/24 maxlen: 24
                          204.89.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:79:e4:3b:22:d3:4f:df:61:53:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c71714-99de-4588-bd63-3b2ad60412ad
        Validity
            Not Before: Jul 16 20:07:55 2025 GMT
            Not After : Oct 14 20:07:55 2025 GMT
        Subject: CN=520d4aa1-cc4a-43fa-85a8-e02875709e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:ba:09:14:fc:59:ea:d0:e0:aa:80:80:78:
                    17:d8:e8:05:a7:24:54:d8:70:14:13:e0:48:4d:0f:
                    a0:d9:a4:21:05:8f:a7:f7:f3:26:3d:d7:fb:5a:39:
                    37:43:b8:73:91:c0:41:d5:c0:5f:43:6a:8f:22:39:
                    7d:70:0f:bb:73:f5:8c:f3:05:84:34:cc:51:15:ea:
                    38:01:c6:a3:1d:be:60:37:59:d0:ae:ca:42:6b:0b:
                    e2:6a:d4:d3:1b:e4:cb:e0:a7:20:c9:5a:ea:fc:b0:
                    07:c9:6d:61:b7:24:81:56:1f:7a:93:f7:2c:a4:89:
                    bb:87:82:36:bb:26:e7:bc:49:aa:ee:80:39:af:36:
                    3f:24:b4:30:4c:7b:92:16:90:5b:bd:d6:1d:18:4f:
                    24:a9:ef:ac:dc:2d:5e:5d:76:7a:77:4e:43:bb:66:
                    1c:d2:49:c2:de:7e:14:11:b7:f7:aa:70:62:f9:96:
                    18:fa:d1:03:07:6f:e4:da:f5:e1:6b:e1:df:a0:07:
                    96:65:34:2c:6f:cd:87:97:e2:52:e7:51:78:4d:a8:
                    f7:4a:2f:92:e6:2b:32:36:55:8f:50:20:fd:78:fa:
                    c6:4e:0b:1d:cc:6e:3f:aa:5e:2a:69:b0:3d:db:6a:
                    4c:1a:14:1d:4d:f6:c3:d3:08:0e:0b:6c:ee:c0:38:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5C:B8:3A:9F:33:4A:C8:93:6E:A1:8E:63:49:F8:CF:9E:69:B0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.crl

            X509v3 Authority Key Identifier:
                keyid:2B:8D:20:69:2E:23:E0:2B:E1:34:EF:7A:0A:E3:1E:4D:65:44:CD:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:10:f4:d1:0a:8f:00:4b:94:1a:fc:a8:f2:09:c8:40:47:52:
         6a:a8:a1:cb:e7:df:ed:21:d9:31:ff:e8:e2:85:23:88:77:44:
         ce:aa:fb:5e:53:f7:9b:8e:dd:ce:7e:02:8e:5a:90:fc:f6:6c:
         08:2d:2c:b0:e5:94:92:53:24:da:71:30:5a:2e:18:b0:54:cd:
         d7:fe:23:66:1a:70:08:85:f3:a1:bd:45:fe:d6:18:4c:29:47:
         fe:31:c1:de:b1:86:db:f2:ac:fa:a2:5b:db:5c:66:a2:f2:3c:
         3a:3d:c8:14:16:f1:f3:3c:a9:32:2d:4a:b5:d7:3e:48:5a:f4:
         ac:7f:fe:a4:ee:94:39:58:bb:3e:bf:93:e1:a0:bc:a0:7e:35:
         c9:87:5c:d0:6d:59:ff:d1:38:40:b1:c4:dd:90:30:cd:a3:82:
         e0:bc:77:64:00:45:d6:88:d8:9f:aa:7a:83:1d:ae:fc:ee:a0:
         d1:af:e7:15:1d:ed:ac:b7:55:1e:64:05:35:37:b8:a3:a2:f3:
         7d:e4:c1:47:ed:52:9e:28:b2:ee:39:9f:9a:5a:a3:a4:5c:72:
         94:0b:cb:17:c6:85:18:73:39:2f:fd:43:45:65:d2:97:59:f6:
         53:83:a7:b8:af:f2:c5:c9:e6:e3:8b:0b:c2:af:97:b6:d6:82:
         0b:66:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:04:04 2025 by rpki-client