Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa
File:                     554303b1-5480-3d12-8232-5e316121c2f8.roa (raw, json)
Hash identifier:          vDaQZE+PaFJQKAANFMPmJhqZW3sgYAAk1W2Nmnxc2CY=
Subject key identifier:   0B:94:8D:53:23:3E:6D:1E:4B:9B:6A:A0:84:36:23:54:D4:28:74:76
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F02422CBC262DDB9A12529B80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     46974
IP address blocks:        204.141.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2c:bc:26:2d:db:9a:12:52:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=50cceee7-d24a-42f5-b9ce-edc2e69ba410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:64:ee:e4:98:47:0b:c5:fd:58:37:a4:89:
                    2e:52:fc:45:7b:3d:1c:0e:e7:ca:fb:75:1b:d9:42:
                    c4:f2:5e:db:3a:7c:77:9b:79:49:40:05:28:c7:23:
                    06:4c:24:35:0f:ff:a8:47:57:92:ff:ae:d2:0f:4e:
                    c1:58:e0:e0:ca:d0:2b:aa:04:45:7e:9c:c2:77:d5:
                    4f:26:de:1d:29:19:61:38:a2:d8:00:c8:b8:36:86:
                    d5:fb:df:83:38:38:8f:1b:9d:41:b2:0c:5f:a2:c7:
                    04:f0:a1:44:42:71:83:0a:b9:0c:43:72:9a:1f:1d:
                    54:da:0d:b8:98:be:2b:bd:12:15:62:40:82:12:18:
                    52:e5:16:59:fd:e8:03:29:ea:1a:88:da:3b:fa:ea:
                    df:e3:23:dc:05:93:d4:e0:19:de:88:21:a4:35:11:
                    83:c1:37:07:9b:78:5f:ef:e0:45:c0:88:81:69:70:
                    cd:af:74:d2:63:57:31:a6:8c:68:d2:99:4e:34:d7:
                    c5:ee:97:f1:85:76:ea:cb:f7:05:c7:36:98:f1:bd:
                    1f:46:40:b7:68:1d:f5:66:0c:67:83:e0:ec:e8:49:
                    ea:b7:b5:9a:bc:10:87:c7:30:0c:bb:af:a5:a8:87:
                    17:be:4c:c0:a2:fd:06:64:1f:c7:af:24:d4:f4:9f:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:94:8D:53:23:3E:6D:1E:4B:9B:6A:A0:84:36:23:54:D4:28:74:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:f0:26:ef:1b:c8:64:7b:96:09:a0:44:22:46:17:d0:9a:
         2a:4a:31:cd:66:08:76:1e:90:2a:e4:0e:d8:08:d8:dc:32:0b:
         ef:f4:9d:38:de:0f:24:fb:47:1a:14:36:35:2d:0c:99:6c:d5:
         f1:94:1a:06:de:9c:bf:fc:44:bd:28:d1:29:dc:eb:0a:19:36:
         19:7e:b6:4d:b7:f6:74:2e:fc:c0:c6:4f:39:19:6c:ec:21:3a:
         04:94:ff:5c:ae:9f:bc:ad:4f:cb:eb:cd:35:2a:47:a8:68:f0:
         af:48:2c:38:34:81:86:3a:14:24:29:a9:c8:a9:d9:50:80:cb:
         e3:c3:ee:33:dd:3e:68:a6:f8:6c:ab:ed:aa:98:97:34:cb:1c:
         2c:c5:d4:7f:fd:61:40:b8:fd:bf:15:b7:d1:79:1e:5b:a1:34:
         ea:9b:cc:3d:87:d7:fe:b6:1b:a2:96:56:eb:4f:19:5f:53:88:
         3b:fb:e3:57:8c:a5:77:fa:f9:eb:15:d9:7c:92:c5:42:be:1a:
         e1:c3:89:21:19:93:53:d5:a9:aa:79:8f:59:5f:65:e2:58:d4:
         5e:d9:7b:ba:54:4b:94:86:be:0e:d3:6d:dc:11:4a:e3:68:ed:
         e8:e9:40:cd:b9:ac:4d:31:67:e2:bb:9f:66:3a:c6:23:18:58:
         27:14:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:59:31 2026 by rpki-client