Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          GkZP0KpZOpyrJ+O0PZ/wy9oz76+5K0l8Z7OC0MqZVck=
Subject key identifier:   14:72:8F:DA:60:80:71:63:95:56:5A:4C:D6:C1:D9:09:5B:24:F4:62
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       3AD1338E10307FFC3D8047522FAFF2D9B3C39A41
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS54252.roa
Signing time:             Wed 06 May 2026 07:17:20 +0000
ROA not before:           Wed 06 May 2026 07:12:20 +0000
ROA not after:            Wed 05 May 2027 07:17:20 +0000
asID:                     54252
IP address blocks:        207.180.23.0/24 maxlen: 24
                          216.75.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d1:33:8e:10:30:7f:fc:3d:80:47:52:2f:af:f2:d9:b3:c3:9a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:20 2026 GMT
            Not After : May  5 07:17:20 2027 GMT
        Subject: CN=14728FDA6080716395565A4CD6C1D9095B24F462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:0b:c1:1e:18:52:65:28:8a:fc:99:39:c8:
                    ce:ee:c8:15:9e:dd:0d:0c:14:ad:50:53:a2:0b:22:
                    4f:f0:5f:a1:e2:18:7e:a2:22:b1:41:34:3f:1b:cb:
                    b5:11:15:42:32:c5:43:be:c2:f3:3d:65:9c:57:16:
                    7f:a9:58:7b:90:2d:25:6d:57:c9:e3:ee:59:f7:ec:
                    fe:b7:c8:1d:9e:bc:a4:b1:11:17:fb:f0:31:6c:7e:
                    7b:ea:e6:9a:6d:24:20:49:2e:c5:66:28:7d:9a:d0:
                    06:9d:7d:09:a3:24:dd:ba:ab:85:95:e7:fb:9e:5d:
                    2c:93:c6:8c:70:bb:75:2e:1e:c0:90:4f:47:30:a2:
                    03:66:f0:17:fc:11:4a:a0:75:68:da:d1:09:8c:c5:
                    a5:17:ed:d5:29:da:56:e1:47:2e:ae:30:b7:17:18:
                    c8:99:14:33:5a:ff:01:83:b4:70:b3:d2:5a:2a:1e:
                    18:5b:2d:e4:1e:90:31:f2:1a:84:98:0d:4a:d0:1a:
                    99:d5:9a:ad:37:40:12:5a:f0:29:6a:95:da:e8:d0:
                    b6:9f:34:a0:d1:97:4a:d9:0d:55:bd:3b:0a:e3:d5:
                    4c:15:aa:37:39:a9:bc:f0:12:2c:53:56:44:fa:63:
                    3f:6c:5c:d7:df:d8:75:ff:34:b6:d2:4a:14:df:5d:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:72:8F:DA:60:80:71:63:95:56:5A:4C:D6:C1:D9:09:5B:24:F4:62
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.23.0/24
                  216.75.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:32:7d:15:5d:99:bb:04:68:9c:e1:38:fb:ca:f6:6d:b0:00:
         44:01:5f:cf:26:e6:ae:7c:51:12:0c:72:ff:e9:d6:3f:09:6e:
         62:c7:0f:08:50:f8:45:4f:2c:d2:69:78:33:b1:c9:11:96:a6:
         3a:4f:2d:77:51:a4:fd:5c:ca:b2:a0:3c:31:96:23:4b:4c:32:
         90:de:58:7f:0c:6d:95:84:79:08:c0:61:7e:64:3f:a4:e1:49:
         b4:be:07:ba:a5:25:8b:35:e8:90:54:62:bd:01:79:ae:65:ca:
         e3:33:ce:ea:b4:20:76:fe:a2:20:12:50:49:f2:44:ed:08:37:
         93:d0:10:4d:25:ad:db:de:d4:bd:0a:de:48:6c:af:7a:55:00:
         2e:f5:4e:35:93:11:88:93:fe:94:e7:f2:27:a1:a0:ce:c8:df:
         3c:85:c8:40:a1:e3:f5:5a:5e:e5:bb:6f:22:27:17:e8:1d:ed:
         b3:03:13:6e:8f:56:51:60:81:63:73:f5:8c:59:30:13:6d:01:
         fc:21:34:d5:29:da:a8:cb:7f:c6:2a:39:97:33:85:4d:64:8f:
         9b:85:aa:1a:d7:2a:43:24:94:ba:0c:1f:a3:d4:af:65:02:f0:
         10:97:bd:ec:12:ab:95:a2:c1:d3:6f:90:ef:fd:61:d1:a7:c1:
         57:ab:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:36 2026 by rpki-client