Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa
File:                     d301a4b3-34ea-309b-80f1-90e66068431c.roa (raw, json)
Hash identifier:          wrVAxMZF73TiPgO3nlxIBarwGKxWXKmQqcYdpCntR0M=
Subject key identifier:   3B:C9:D1:79:3B:41:A4:88:E5:82:81:D4:0D:0D:1C:10:B9:43:90:7A
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584EC0A72358FFAB0014069B2F00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     4323
IP address blocks:        208.54.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:23:58:ff:ab:00:14:06:9b:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=4518d4cc-8716-44cf-8cba-510fffb3c1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:55:3d:9c:bd:03:05:64:32:c2:fa:8b:9a:
                    c9:44:af:0e:97:44:90:19:43:ad:35:22:c4:52:1c:
                    8c:65:54:a0:7f:7e:ae:15:d5:84:e2:46:6d:25:8f:
                    b7:57:6d:f3:09:82:4d:63:79:f0:b7:32:e1:e0:d7:
                    1d:1a:f6:7d:ce:48:8b:c7:8c:9e:17:35:27:da:d8:
                    4d:01:fb:1d:41:e3:9d:dd:be:55:10:21:69:e1:cd:
                    12:9e:18:15:ff:7b:ef:4a:fe:a0:87:7a:23:f6:78:
                    62:bf:47:da:b6:ef:c0:77:c8:7f:15:58:ea:a3:ac:
                    3d:3f:bc:8f:16:4d:58:74:d3:51:fe:d4:25:a8:71:
                    aa:3d:93:00:47:01:5c:01:80:97:c6:65:e8:19:4b:
                    03:68:dc:b5:db:ed:cf:a2:67:68:36:1d:6f:a3:35:
                    42:40:55:7a:bd:4d:55:f0:93:94:f3:f2:c8:59:34:
                    80:58:22:2c:db:0b:61:de:20:5d:96:cc:7d:f0:df:
                    0c:4a:82:16:ee:22:b7:be:8e:2c:6d:ee:09:5f:90:
                    97:ab:5c:d6:a3:e1:32:59:8a:50:d4:7f:8f:40:6c:
                    82:ae:45:67:de:84:0d:b0:04:02:9a:a7:48:1e:6a:
                    db:3f:15:24:22:4b:89:b9:90:29:3e:52:b0:98:1f:
                    39:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:D1:79:3B:41:A4:88:E5:82:81:D4:0D:0D:1C:10:B9:43:90:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:78:e2:74:42:03:1b:b1:d9:14:7e:e4:a3:23:5e:d9:ab:b9:
         8f:73:98:f8:a1:49:b6:05:e6:32:eb:16:38:00:8d:c3:61:8e:
         56:a6:4e:94:35:ec:f2:7f:9b:2e:9c:37:e7:7e:a7:f6:1c:16:
         10:b4:ee:5d:b6:02:e6:7b:f9:61:d7:f0:86:5c:70:80:ad:5a:
         f8:8e:a6:6d:4e:8e:00:c5:9c:3a:48:a6:f7:03:e5:9c:49:c6:
         41:de:91:83:84:4f:70:0d:33:b0:d0:c9:64:a4:0b:6d:df:af:
         37:c4:31:1c:65:23:71:e1:15:25:3e:8c:3f:5d:d7:86:95:dc:
         57:ab:f2:23:71:56:c4:ee:cc:aa:7a:5d:11:e1:94:57:f3:14:
         8b:43:94:9d:75:e5:67:71:60:7d:5d:4a:3b:bd:0e:06:43:1d:
         73:92:0d:3a:b5:2e:17:44:d4:a3:8c:fd:a5:21:e9:a5:38:57:
         a4:d0:f2:c6:14:8b:98:c3:dd:72:60:af:2e:d2:66:48:94:4e:
         19:26:e1:b5:94:18:3e:1e:ea:cf:52:c4:da:98:a5:b5:dd:1e:
         26:86:de:00:ab:79:9d:82:3a:96:c6:23:31:76:57:37:ff:63:
         30:d7:58:54:8b:06:7d:5d:0c:8d:be:0a:86:07:36:6b:ef:b0:
         16:a3:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:30:51 2026 by rpki-client