Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54d49948-1f99-33c8-8b44-84ed3d587285.roa
File:                     54d49948-1f99-33c8-8b44-84ed3d587285.roa (raw, json)
Hash identifier:          SVLIgjOCqHklGHJ0nhXfBTOQNZpGyx/sSUBVDlJ6ZQ0=
Subject key identifier:   22:13:AC:54:38:F4:96:26:81:89:49:92:39:C9:11:79:44:DB:13:4A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BDA052E7CF42565A2A100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54d49948-1f99-33c8-8b44-84ed3d587285.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     40311
IP address blocks:        198.45.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:da:05:2e:7c:f4:25:65:a2:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=c92bd0f0-e8f9-43ed-8376-c5e7d6a9cb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:47:7c:e4:75:e2:d8:b5:e1:b8:b7:84:b7:16:
                    2b:1b:c1:ed:a5:de:15:01:fd:b5:23:90:7c:b1:f7:
                    97:e8:2b:49:e5:e2:52:5b:cc:52:a8:0e:f8:43:1d:
                    d0:0d:85:d7:74:b0:f6:a5:a1:71:64:65:39:77:f1:
                    7d:0c:66:d7:ea:98:f9:55:fa:2e:c1:d1:f4:1e:44:
                    fd:b5:40:73:9f:b7:58:ad:20:6a:00:77:45:ec:5c:
                    b7:0a:0f:04:fc:34:07:f1:43:cf:a9:e5:07:9b:38:
                    b5:0c:c3:5a:0b:c3:20:ce:e2:71:88:10:2a:b4:02:
                    fb:60:88:bb:c2:81:ff:22:bd:28:9c:e2:1d:03:fa:
                    10:ea:c0:e0:b6:f3:68:90:94:a7:e4:bc:c8:44:0a:
                    98:27:56:55:62:aa:11:a2:ed:f2:c1:08:9d:a9:05:
                    85:10:4d:60:6c:01:ba:21:a4:1d:7e:18:7c:50:17:
                    27:a3:d7:cd:77:b6:34:00:12:15:01:63:44:fc:a2:
                    a5:6b:31:5b:37:a5:49:be:bb:ae:cb:77:b4:83:ad:
                    c2:8f:09:3b:e3:ad:bb:e4:04:37:93:08:db:f4:88:
                    39:f7:57:c5:3e:78:dd:08:72:3b:28:d9:57:40:c7:
                    ba:ba:87:fc:fb:4d:ba:6b:e1:14:cc:2b:ab:44:3b:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:13:AC:54:38:F4:96:26:81:89:49:92:39:C9:11:79:44:DB:13:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/54d49948-1f99-33c8-8b44-84ed3d587285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:3d:2d:db:ea:29:4a:d5:b1:60:80:56:84:51:1e:ab:33:
         4f:3e:d1:65:83:68:3a:da:75:54:21:8e:e3:68:d9:c2:17:18:
         2e:4f:76:8b:6f:21:5b:51:50:5d:6b:76:3e:f0:97:43:06:99:
         a5:50:02:25:37:1a:5b:8d:ed:a6:f8:d0:d9:02:ce:69:a5:ce:
         77:1c:59:a2:9d:ef:92:97:94:11:e6:76:a6:10:03:56:06:a9:
         53:7c:9b:58:0f:ca:8e:66:8e:4a:57:d8:69:92:4b:dc:d0:e8:
         b5:24:af:b8:36:c3:07:0a:0c:20:7b:59:e6:40:2e:33:12:bd:
         7d:63:cc:bc:ed:b3:95:12:1c:e9:9b:fc:54:e1:b6:94:f1:e9:
         ae:0d:85:a0:fa:06:2a:0e:1a:97:8c:72:c0:27:86:80:6d:3e:
         d0:5c:4a:37:24:0f:63:10:96:aa:6c:aa:c7:e7:d0:f2:8d:3f:
         37:e7:62:f0:74:02:18:89:3c:23:fa:fc:40:61:0f:90:f2:2f:
         02:e5:6e:14:2d:f2:17:11:ec:e0:d8:d4:f4:a6:6d:44:7c:c3:
         5e:b2:37:e0:d8:4d:eb:98:c0:8c:b9:d7:e1:0c:8f:7e:12:6a:
         06:2b:8b:73:7c:01:1b:a1:8f:97:98:3e:ae:09:88:0f:3b:73:
         c0:26:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 18:06:43 2026 by rpki-client