Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS205489.roa
File:                     AS205489.roa (raw, json)
Hash identifier:          ajBMNcZsD+oryJJUCpR7dvg+SVvRrh3hKI5ZTJpF3oY=
Subject key identifier:   00:04:0B:52:B0:B4:E0:AF:57:BA:27:DB:F4:F3:F8:C4:03:D3:FF:38
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       71112FFAB8D516F66ABF6E9229C666AB21900A96
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS205489.roa
Signing time:             Tue 19 May 2026 17:32:31 +0000
ROA not before:           Tue 19 May 2026 17:27:31 +0000
ROA not after:            Tue 18 May 2027 17:32:31 +0000
asID:                     205489
IP address blocks:        104.234.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 15:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:11:2f:fa:b8:d5:16:f6:6a:bf:6e:92:29:c6:66:ab:21:90:0a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 19 17:27:31 2026 GMT
            Not After : May 18 17:32:31 2027 GMT
        Subject: CN=00040B52B0B4E0AF57BA27DBF4F3F8C403D3FF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7f:8b:1f:77:9f:aa:be:57:70:56:4d:81:40:
                    de:b5:46:0c:6d:b1:a3:ad:d0:b4:1c:4f:31:a5:77:
                    be:16:aa:61:64:7b:aa:a0:30:24:0c:f6:06:15:bd:
                    7e:40:05:44:67:13:38:e0:56:06:31:a6:5d:e6:ca:
                    bd:94:56:29:34:8a:1a:1a:df:37:4a:53:1f:b2:b8:
                    f0:0e:5e:37:20:a2:6a:2d:e6:1c:4f:e1:82:e0:a4:
                    5b:81:19:49:4c:0e:22:60:64:3d:90:31:0d:35:d7:
                    c2:32:5a:6a:4f:b9:a5:ba:c5:30:01:0f:57:4b:f1:
                    bd:0c:75:ac:09:3a:4b:63:5b:14:24:15:00:1e:99:
                    4f:b7:1a:c5:8f:dc:2a:57:e5:05:75:70:8c:dc:19:
                    bf:b6:c7:39:e4:45:fe:7b:48:8e:4a:b1:ff:80:c0:
                    e3:9c:a2:38:13:b9:c8:cb:7b:80:b9:8e:48:13:73:
                    11:1c:31:72:c1:77:4b:4f:6b:a5:46:20:73:9b:5c:
                    57:6f:ce:d4:6b:44:97:e9:98:3f:a7:e1:82:8e:aa:
                    89:0f:b6:41:c5:aa:7f:b8:4d:ff:78:90:64:b4:08:
                    5a:54:46:0c:a8:3f:44:dd:4d:75:f6:3a:0a:7f:cb:
                    08:a6:d0:b9:ad:12:ce:c7:6e:96:da:fd:19:13:6f:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:04:0B:52:B0:B4:E0:AF:57:BA:27:DB:F4:F3:F8:C4:03:D3:FF:38
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS205489.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:4e:2f:d3:f6:5d:45:8a:9d:cb:1c:d0:8e:92:77:64:50:
         49:1a:98:45:47:86:4e:e4:51:ad:6c:25:db:26:24:3e:ce:a5:
         1d:54:20:53:67:ee:e4:c7:d6:22:90:a1:65:a1:c5:03:b5:f3:
         0b:8c:26:d9:a5:94:99:fe:50:4c:f3:81:53:11:0b:0d:6e:45:
         7c:53:2c:c5:7b:23:40:6a:8c:4b:be:8e:b4:bb:db:d7:e3:b6:
         c7:68:03:d2:02:a2:14:19:2c:26:13:21:43:05:24:35:92:60:
         f8:55:6f:45:58:dd:16:29:c8:67:20:34:bb:97:df:2f:a5:34:
         1b:a6:db:2b:c4:15:9b:b2:f9:c1:6f:93:38:92:ad:d6:40:65:
         8b:da:25:cb:61:39:b8:d9:9e:cd:0a:15:ea:5c:8a:76:07:64:
         7a:60:d3:de:59:cd:7d:3b:c0:b5:21:7b:9c:63:e4:82:d8:88:
         7c:32:e3:bf:5f:5d:90:6d:12:d1:25:fb:5a:dc:88:13:a0:71:
         60:c9:74:4f:75:d3:12:62:4c:b4:2d:74:93:82:07:6d:3c:52:
         81:68:9f:ae:3a:98:45:f6:4c:86:83:b6:b9:f3:24:c0:f5:dd:
         77:c1:ea:ee:9c:72:2b:49:43:70:55:a1:bf:04:5d:22:23:b6:
         86:d4:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:21 2026 by rpki-client