Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa
File:                     04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa (raw, json)
Hash identifier:          Z6tRekROAgF0JiSaA18htG2C+oORP+X120u8wfwdA44=
Subject key identifier:   E7:0A:01:69:B1:83:E7:50:C2:03:55:8E:97:65:E3:55:C5:B9:EF:C9
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F4328584EAE819345175EC28CBB56ECC0
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     16509
IP address blocks:        209.54.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:93:45:17:5e:c2:8c:bb:56:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=d0b686fb-887d-4180-b731-3a2ba005b32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:ef:e6:3f:97:38:1a:32:10:eb:8c:13:ac:
                    11:8e:74:52:c1:61:5a:78:42:82:6f:e5:e1:43:e1:
                    57:ed:96:3b:f4:d4:01:ce:60:67:40:c8:31:45:1b:
                    3e:05:71:61:e6:c5:22:c7:67:aa:20:e3:50:b3:62:
                    b1:90:d0:a2:82:0e:41:19:f4:10:05:e9:cb:8f:85:
                    70:aa:89:41:eb:ff:f4:aa:e2:e8:9a:6d:12:8e:65:
                    8c:50:df:ec:bf:d9:fe:3d:96:c2:12:f3:d1:07:e8:
                    83:18:c0:72:67:d0:67:4d:ee:8b:ac:f0:f3:61:41:
                    d6:b7:ca:d7:36:c2:0f:c3:07:1d:2e:46:74:60:d9:
                    98:df:66:b3:ee:47:e8:20:88:34:5e:fb:af:b5:96:
                    41:28:bc:61:f6:23:0d:1e:3b:60:e9:eb:dd:37:67:
                    d9:ab:16:36:27:9a:c6:fc:d6:1d:80:b5:80:03:79:
                    93:21:62:52:2c:b2:56:62:06:3c:f0:72:1b:99:9e:
                    03:87:13:48:dd:8b:b4:84:a7:3e:e9:99:ce:f3:ca:
                    95:bf:4b:ca:d7:ca:9d:f2:43:d9:e7:54:2d:b8:99:
                    0e:b7:eb:41:41:03:20:51:61:4f:49:94:37:8a:11:
                    44:06:eb:d0:a0:a3:25:65:77:0d:f8:ef:db:09:73:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:01:69:B1:83:E7:50:C2:03:55:8E:97:65:E3:55:C5:B9:EF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f4:44:77:8f:99:77:ba:7d:33:85:28:b3:5d:de:46:61:4e:
         c6:99:ac:a8:e2:c1:f8:90:bc:03:a1:fd:d2:89:70:90:9d:f6:
         34:10:56:e4:f4:6d:9d:4a:a0:c9:2e:b7:8e:c6:b8:a3:bd:67:
         77:e3:5f:10:d1:ec:b6:4a:8c:06:63:94:33:08:01:ae:b3:39:
         59:89:99:47:46:45:39:9d:fe:e9:3f:26:20:e4:2d:9c:46:20:
         6b:23:7e:81:5d:cb:c7:94:d7:3c:da:3d:a0:cd:e4:b4:cb:ff:
         e8:19:5e:cd:46:29:da:21:51:a1:63:f6:de:a5:9a:2f:ec:99:
         f4:e1:7a:42:e5:0e:0f:04:e1:12:14:ae:e0:a6:bc:c6:9d:22:
         bb:d4:31:88:89:c6:4e:02:a9:18:db:6c:3b:18:ac:b0:01:7c:
         da:27:95:1a:75:14:b1:1a:23:77:37:07:3e:e7:bb:c0:ad:df:
         63:6d:1c:2d:18:ae:53:27:42:a8:e1:4e:b9:98:c7:ca:2a:ba:
         3c:64:8d:a4:56:29:67:60:b9:4d:51:7a:a4:10:32:98:6c:5f:
         1e:3e:c9:91:ef:ac:95:d5:aa:ba:7e:1b:41:26:59:ff:d5:47:
         e3:14:fc:f2:fb:fc:12:10:2e:31:3c:f4:b1:99:d8:88:3b:d2:
         a8:c5:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:07:46 2026 by rpki-client