Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa
File:                     54a8991f-2df5-35d8-9844-758dac2ecb37.roa (raw, json)
Hash identifier:          6w7DtTXLSwexoiqI4cnOLUreKB+/Ozv5vBDT1JKP4aE=
Subject key identifier:   98:6F:20:BE:66:03:3C:51:F1:9D:C2:50:E6:9D:CF:C2:FE:7E:24:9B
Certificate issuer:       /CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Certificate serial:       010D0C9F4328584E5D14AC58AB471E3B491BE380
Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     17207
IP address blocks:        204.228.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:ac:58:ab:47:1e:3b:49:1b:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=77b97266-e0f5-45d9-ba7f-00148d34dad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:9f:a7:62:f6:e3:d4:92:fe:ff:8b:03:41:
                    f2:2a:6f:b0:c3:9e:86:f9:d1:c5:49:9f:b2:71:5e:
                    aa:b4:ba:08:0c:ed:8e:45:e8:b2:52:c5:0a:88:f1:
                    9d:7e:59:0d:ba:61:8c:c7:c1:d1:03:51:db:5a:8b:
                    3d:b8:f2:a9:ee:41:a0:8e:b0:b9:e0:4e:f3:db:15:
                    1d:fd:40:47:db:3b:ed:39:fe:04:bc:6d:b8:96:a5:
                    6e:da:57:d3:71:8d:d5:68:c2:24:e9:49:01:7b:2c:
                    96:9d:79:00:8d:cd:7a:f2:a6:93:39:81:d9:95:18:
                    36:73:95:cc:94:a2:e6:8f:00:7c:d5:91:72:d2:23:
                    f4:92:79:77:f6:10:ff:5a:63:cf:a0:ad:85:85:6c:
                    40:41:66:90:b6:5f:94:e6:96:5a:39:4b:41:60:23:
                    ee:cc:a1:0e:61:42:19:f7:c3:ad:f4:22:19:c0:1a:
                    a8:3e:77:54:68:b2:93:c1:ba:8e:c7:fa:e5:de:4f:
                    cf:ff:31:09:bb:a8:1e:a3:ab:b4:dd:1a:40:7e:af:
                    fb:40:40:ea:6a:f5:9b:47:ca:52:cc:f8:95:f7:dc:
                    3c:7c:29:22:72:c1:81:e7:b3:8f:dc:fe:1d:05:79:
                    0a:1a:a2:4d:d8:0a:be:e0:c1:26:6b:ef:10:73:d7:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:20:BE:66:03:3C:51:F1:9D:C2:50:E6:9D:CF:C2:FE:7E:24:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl

            X509v3 Authority Key Identifier:
                keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:c0:3f:62:32:db:82:bf:f9:01:88:fd:b0:cf:53:32:c7:
         d5:1f:f1:25:d3:42:51:08:16:38:ad:28:ab:34:5f:37:d3:65:
         0b:42:a0:d8:c3:22:85:60:0a:d7:eb:6f:3b:56:47:61:d4:6d:
         cb:2b:6a:2e:9e:f1:8a:cc:37:cf:4d:db:c7:2e:53:aa:46:6c:
         78:8a:3f:28:9f:87:50:3e:20:6d:06:89:32:17:64:33:77:71:
         23:02:50:3b:d7:4c:3a:8e:6a:c6:f3:a1:46:1a:37:df:2c:a5:
         8d:38:bf:a8:70:8a:2e:7f:e1:83:c6:2a:31:40:ff:01:35:74:
         1a:14:ec:f4:c4:80:c7:27:3b:28:da:e5:ee:8b:a5:51:68:d4:
         22:ca:24:41:5b:b0:e4:57:ba:4a:39:2e:90:35:95:88:f7:ce:
         22:1e:7e:f6:f4:c8:0b:4e:c0:77:d6:8e:92:2f:2e:a5:de:2b:
         41:26:7d:8f:77:37:43:1d:53:7d:5b:19:1e:13:09:b1:80:02:
         a7:04:5f:a1:c1:19:8f:e1:e8:cb:d1:4a:41:cc:1b:37:0e:1d:
         92:7c:1b:db:b6:72:a3:d7:fc:ee:74:6a:1d:b4:72:af:a0:86:
         0f:91:1c:00:50:33:b8:9f:3c:a1:e1:fe:0e:a8:2b:89:88:bb:
         80:9a:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 19:52:57 2026 by rpki-client