Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa
File:                     ffb3da79-e26f-3955-a998-a0f724c9166d.roa (raw, json)
Hash identifier:          kZUQzzmSOog9K6rs+oZAUtZnEVYxUdqK80MqJSEtqPM=
Subject key identifier:   CE:61:D5:BB:E9:A7:55:0E:0A:CB:F4:D9:FE:28:48:BB:B1:6E:B4:77
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DF4DB5D182DE7D615BADD4D00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     35953
IP address blocks:        204.2.154.192/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5d:18:2d:e7:d6:15:ba:dd:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=ac66d322-682d-4aed-8121-cae3e70b2a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c8:4d:a6:ca:80:57:60:2b:7f:19:02:08:91:
                    d4:3f:0f:46:61:9f:93:b3:1e:ef:46:14:1a:ee:9f:
                    78:ee:f2:73:65:a0:4c:6d:11:50:34:5d:91:8f:d9:
                    b5:6e:82:1e:71:9a:72:1c:b8:fe:8d:c3:6a:c1:d8:
                    9f:12:96:74:3f:5f:09:dc:f7:41:7c:76:fd:de:73:
                    fc:b4:b8:a9:c1:55:87:04:b7:3b:a7:dd:00:18:5e:
                    91:dc:d2:c9:80:ce:5f:f5:e2:24:ae:7a:16:49:1f:
                    6a:b1:44:40:f1:a6:a1:db:69:03:bc:df:5d:12:52:
                    86:15:bf:9a:30:9f:9c:d3:8a:42:03:b8:13:30:41:
                    80:55:7d:69:bb:18:30:dd:13:af:ac:5a:ed:fe:cd:
                    69:27:a9:ae:de:03:af:27:53:26:fd:9b:35:ad:73:
                    4c:69:72:eb:d4:a1:42:71:f3:2c:12:cd:4f:5c:b1:
                    4c:81:2e:07:a7:e0:15:57:08:94:9c:70:97:2e:3e:
                    39:d2:0d:49:02:17:a2:f0:18:bd:5d:dd:ba:4c:ea:
                    a9:23:15:bd:cd:a4:b2:dc:e7:d9:b7:fd:6d:c2:cc:
                    b6:85:3f:03:11:d2:8c:c5:38:b8:56:41:a1:70:da:
                    15:de:16:65:c9:3b:05:a3:8b:7f:66:9a:59:f1:06:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:61:D5:BB:E9:A7:55:0E:0A:CB:F4:D9:FE:28:48:BB:B1:6E:B4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.154.192/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:0b:8d:cd:d6:63:b7:0f:7c:19:07:0a:a1:3e:bc:b2:8b:
         62:f7:3f:ce:0e:a2:80:8a:e8:4b:00:0c:af:06:23:5d:ec:95:
         a9:0d:81:55:46:12:2e:97:08:5d:bf:08:23:02:6f:8f:c2:e6:
         0a:61:64:5a:49:9d:1f:3b:c4:63:a1:82:76:2e:b5:21:38:f4:
         1b:5f:ae:20:29:0c:91:34:9a:d5:7c:ed:fe:fd:0b:79:1c:cb:
         30:97:b8:8f:ef:c4:04:a9:e2:54:97:db:f0:fc:43:ca:5d:bc:
         b2:d5:4c:cd:1e:53:0b:33:58:05:d1:f2:0b:72:86:20:86:f7:
         68:93:ef:5d:5c:56:cb:3b:ae:d0:42:9d:66:1b:5d:92:5d:4b:
         86:48:6c:af:5a:bf:d5:f8:82:ed:41:35:16:ce:3b:77:4b:16:
         ea:e9:e8:17:e6:14:89:9d:b4:a2:1a:6c:55:7e:8b:85:32:b5:
         d4:e3:51:97:ad:e0:52:ec:20:b7:f7:44:87:77:1c:78:89:1c:
         40:7e:04:a6:1e:95:d9:ff:d6:31:b1:66:57:61:ad:dd:d2:3e:
         18:f2:83:1c:05:c6:3f:1e:08:e9:98:d4:3f:e8:7c:b5:25:72:
         01:35:d9:d4:a3:14:8c:7b:8e:21:1c:b5:81:38:c1:d8:b5:76:
         e7:8e:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 22:08:47 2026 by rpki-client