Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54004.roa
File:                     AS54004.roa (raw, json)
Hash identifier:          54A2lCrL431qCV2XhtpRt7r3XaK08o+eiPH0Myj1vXY=
Subject key identifier:   FA:D2:D2:C9:AC:C5:8C:B5:28:F6:E7:D7:6C:F7:83:B4:99:52:B9:FB
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       63FE14D5974287F54BABDEDF68434B007E3895E1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54004.roa
Signing time:             Tue 10 Mar 2026 15:35:54 +0000
ROA not before:           Tue 10 Mar 2026 15:30:54 +0000
ROA not after:            Tue 09 Mar 2027 15:35:54 +0000
asID:                     54004
IP address blocks:        209.200.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 17:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fe:14:d5:97:42:87:f5:4b:ab:de:df:68:43:4b:00:7e:38:95:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 10 15:30:54 2026 GMT
            Not After : Mar  9 15:35:54 2027 GMT
        Subject: CN=FAD2D2C9ACC58CB528F6E7D76CF783B49952B9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:3c:4e:4f:6d:cb:89:70:3c:64:b0:96:51:
                    4e:f4:f2:e6:95:b7:e2:4d:62:13:ef:fa:a4:b8:6d:
                    56:6b:5d:79:01:36:fc:79:9a:ce:fb:1d:22:25:61:
                    4e:2c:7b:e6:88:7b:48:d5:c0:2f:77:1d:f6:33:e0:
                    aa:67:a8:eb:40:6c:68:28:f6:58:00:c0:2b:45:40:
                    39:8b:29:d8:5b:84:3f:d7:06:61:3b:6b:f3:24:42:
                    50:75:cf:01:ab:e4:66:c6:6e:75:34:47:07:45:1b:
                    75:37:91:ff:a4:5c:d0:de:04:64:7c:76:34:b0:66:
                    62:e1:38:df:1a:bc:1a:e8:a0:e8:ee:44:16:2b:6a:
                    8b:d1:b9:1f:cd:ac:76:12:f9:cf:af:39:6e:aa:37:
                    61:14:6f:c3:e2:cd:e0:99:81:7f:89:f6:a0:98:ea:
                    fa:01:9c:3d:c3:93:6e:06:c2:3d:24:1b:98:a7:01:
                    4b:84:ea:e7:02:9c:0e:ed:f6:18:24:f8:8c:22:c5:
                    5a:2c:25:61:2e:59:31:e3:a0:21:7b:b7:7a:d1:ea:
                    a8:f6:2b:cb:12:ec:aa:11:db:2f:50:45:b0:80:a5:
                    38:f7:f2:4b:d5:21:a5:df:e3:0b:6d:e8:84:84:ec:
                    e9:4b:06:9b:be:cd:c1:50:27:cd:7e:14:c2:38:aa:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D2:D2:C9:AC:C5:8C:B5:28:F6:E7:D7:6C:F7:83:B4:99:52:B9:FB
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54004.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:cd:3c:42:c6:fc:12:b3:49:9b:96:a9:cd:72:0b:08:1c:
         12:0d:9b:d5:30:ed:f7:16:d2:40:b1:cb:be:27:b5:2f:6f:9f:
         6c:b4:c6:d6:4f:2a:23:f1:9c:d6:99:ba:0a:a3:cd:0e:52:2c:
         5e:2e:13:74:54:2d:a9:fa:15:d4:c1:56:c5:56:73:dc:ad:ec:
         e7:63:95:67:c3:cf:2d:fb:f9:4b:f8:bd:04:18:dc:41:0f:d3:
         43:d7:ca:b6:55:90:83:d1:ae:d9:a0:d2:04:72:ce:a5:19:ec:
         9a:77:83:6c:5b:9d:45:65:04:4e:c8:e6:f3:77:14:a5:ca:77:
         9c:c7:5a:ab:28:92:01:c0:73:33:db:e5:28:75:d8:6a:36:f0:
         db:01:83:5f:ef:1c:45:2c:38:f6:01:ec:18:85:c9:16:f1:a1:
         95:6b:00:eb:2e:54:be:aa:1a:00:0f:8a:49:77:e9:57:20:71:
         1f:f2:28:c9:42:63:a9:d9:33:76:60:6b:8d:47:27:a2:fa:6e:
         2c:7c:a0:bc:fd:e8:d3:32:e1:42:42:4c:aa:92:0d:a8:ef:62:
         45:1f:fb:6b:fe:d7:ee:c8:e0:ea:77:68:bf:fb:76:3d:56:28:
         ee:48:f6:b2:7e:c1:db:01:fc:83:95:b9:62:f9:42:6a:53:14:
         b9:a7:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:20:10 2026 by rpki-client