Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204966.roa
File:                     AS204966.roa (raw, json)
Hash identifier:          Tq7nzg5sJekj6u+anCMhD0Spkun5dA4b9Iath/k1WlY=
Subject key identifier:   CF:7E:49:CC:F6:0A:F8:98:B0:23:F0:D8:94:16:CC:0A:68:67:DA:F4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       61AA7D05DCFC7F57CEE4DA876BCE8B43B4AE18DF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204966.roa
Signing time:             Fri 04 Sep 2026 11:12:42 +0000
ROA not before:           Fri 04 Sep 2026 11:07:42 +0000
ROA not after:            Fri 03 Sep 2027 11:12:42 +0000
asID:                     204966
IP address blocks:        104.234.54.0/24 maxlen: 24
                          104.234.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:aa:7d:05:dc:fc:7f:57:ce:e4:da:87:6b:ce:8b:43:b4:ae:18:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  4 11:07:42 2026 GMT
            Not After : Sep  3 11:12:42 2027 GMT
        Subject: CN=CF7E49CCF60AF898B023F0D89416CC0A6867DAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:5b:ff:42:27:bf:30:86:eb:c9:b0:2d:3b:
                    4c:3e:23:28:fa:4d:8a:79:5e:ca:a4:f3:aa:f7:7f:
                    54:76:73:4b:9d:29:a9:39:02:20:da:13:c0:0e:1c:
                    a1:0f:bb:57:c9:75:0a:10:b0:05:af:e1:d1:7c:5b:
                    3e:87:f4:e2:06:e6:5b:19:cf:12:48:79:cb:a1:7b:
                    9f:44:6c:a8:c7:f6:b6:1f:5d:c9:68:fb:1d:80:4c:
                    d5:8c:0d:7f:e6:68:e8:bc:f0:1e:a0:74:e4:59:bb:
                    32:67:97:48:e8:e2:bf:f4:bc:0c:4a:7a:39:cf:2a:
                    d1:6c:bc:08:55:7b:4f:7f:8d:f6:ca:c9:40:0e:e7:
                    a0:17:cd:e3:6e:fd:1b:b2:aa:a4:4a:01:5a:49:36:
                    9e:0a:e0:72:b3:16:50:0e:f9:cd:22:b6:c6:b8:7c:
                    39:15:7a:17:e2:44:be:55:22:e7:24:a3:3e:75:1e:
                    a3:20:5b:4a:dd:7c:f9:48:f1:8b:4f:27:33:da:e0:
                    84:52:fd:25:32:ef:ad:8f:f7:09:2a:3e:e1:aa:9c:
                    04:52:8e:50:68:d8:39:38:9a:5e:c9:2d:82:aa:1e:
                    b9:51:c9:f1:1e:e0:a9:01:9e:f3:45:8a:83:c8:0d:
                    3b:78:72:ba:06:df:40:d2:0f:be:43:f3:6e:a0:11:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7E:49:CC:F6:0A:F8:98:B0:23:F0:D8:94:16:CC:0A:68:67:DA:F4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204966.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:47:3c:5c:ba:71:15:f5:24:a4:87:44:86:f0:1d:8d:87:b4:
         84:d0:ad:fe:a2:7f:24:24:2b:bc:53:d6:12:be:67:27:f7:9a:
         b7:dd:4c:8c:33:61:6f:f4:7c:d4:ff:e9:82:53:b0:f6:06:d4:
         3e:d3:ad:f1:3b:b8:e8:6f:b0:1f:9f:ad:12:fa:c1:8d:24:12:
         69:6b:11:ec:03:44:be:46:5e:2a:8a:ef:85:9b:ff:08:88:16:
         06:29:b5:29:93:ac:50:ed:28:ee:2f:c9:22:c4:d0:56:14:1e:
         20:34:ce:b8:a0:85:3e:ab:b8:fa:20:41:36:13:09:38:c0:26:
         4a:e0:f5:50:70:30:d6:28:e2:4b:ca:38:72:b9:6d:50:9e:a3:
         88:86:05:fe:94:89:bc:ba:63:15:d2:03:85:a9:2a:10:c9:fe:
         3f:0e:1b:07:4f:7e:cd:d3:19:2a:ae:ba:34:20:c5:9a:4c:a6:
         ef:ad:66:32:88:00:1b:9c:29:63:8d:b8:b4:bb:9f:ef:9a:62:
         50:d7:19:02:f2:c1:10:9c:6f:f1:a9:7d:b7:03:29:5e:d2:74:
         7c:d3:2d:b6:81:a2:83:25:2a:2b:89:0f:99:4c:50:48:02:2b:
         38:9c:ed:22:28:d7:bb:26:8f:4d:a6:ba:e7:f5:2d:b1:b2:9e:
         fa:93:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:38 2026 by rpki-client