Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa
File:                     54ea31e2-f508-38e4-965e-d1d16af3f58e.roa (raw, json)
Hash identifier:          Yzm4PJHIrTXd3lwjUp29HGHwNX577OhMCtfZd7eJn9Y=
Subject key identifier:   2E:53:E3:C9:91:40:13:54:3A:5F:E4:9A:9E:B3:54:8D:AF:51:B1:C8
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584EEEB752C7436F86D210A6DEC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     19437
IP address blocks:        104.254.235.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:52:c7:43:6f:86:d2:10:a6:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=e649de4e-7cbc-4208-b65e-4ddb0370d5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:24:ad:c4:b5:52:69:88:94:46:10:46:46:
                    da:12:a6:9b:e1:93:78:ab:c9:b0:b5:59:e0:10:42:
                    30:74:d4:67:7a:ee:81:a8:c6:eb:f7:ea:79:08:64:
                    2e:5e:53:e6:f4:80:f9:9a:a8:ce:07:7a:4f:f1:75:
                    7b:0b:1b:ff:4a:7f:0f:e6:30:97:49:a6:3d:79:b0:
                    5c:42:49:51:82:5b:87:c4:f3:6f:e7:30:8d:30:5b:
                    c4:07:a3:c2:b6:39:d6:9a:32:17:be:3e:f8:93:2d:
                    33:7c:2d:3e:b0:5c:2f:9a:2b:f3:b7:2f:cb:e8:96:
                    71:0a:38:aa:2d:dc:c8:bf:7a:12:b7:f2:db:61:50:
                    ab:23:e1:77:94:af:e0:4f:96:24:6b:43:5b:91:cc:
                    bb:1a:8a:ac:b7:a3:64:10:bb:42:f5:6f:72:4d:7a:
                    58:85:78:9c:d1:83:bd:75:2c:86:8a:6f:e0:3d:5c:
                    37:44:f0:59:5c:fd:73:0d:3f:5d:15:16:72:4d:58:
                    5f:4f:4e:c9:a2:c1:d7:65:6e:92:c7:8a:d7:74:a7:
                    7b:a6:a5:74:23:9d:81:21:70:89:96:d8:3b:6e:83:
                    55:0c:3b:d9:27:93:14:a0:0b:0e:46:f0:34:5e:66:
                    a8:e5:22:14:f4:8b:9d:5a:de:cf:c3:6a:b6:5c:2f:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:53:E3:C9:91:40:13:54:3A:5F:E4:9A:9E:B3:54:8D:AF:51:B1:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:da:ce:d1:fa:13:3f:f2:d7:2d:61:2a:ef:64:b3:88:26:40:
         6c:72:17:fa:aa:52:68:9f:9d:46:87:10:f6:e3:dc:02:0a:29:
         e9:6f:61:c4:d5:d3:e8:dd:b4:19:3c:25:6e:d1:6b:e3:af:9f:
         be:90:8c:34:11:cd:01:8f:82:7a:c5:4e:21:5d:5d:64:a4:12:
         65:78:65:d8:02:95:29:23:c8:2e:e9:09:0a:e8:48:c2:d9:85:
         17:07:25:7d:8e:08:bd:7e:35:f0:96:37:c1:71:4f:00:76:ea:
         20:95:35:f7:92:69:a9:2e:c2:44:4b:2f:9f:1e:b3:d0:4e:51:
         8b:b6:3d:82:fc:08:c1:51:5a:3d:2b:3a:63:6c:cd:a5:16:0b:
         fc:59:2a:6b:18:6f:40:08:b9:b2:1e:44:17:2d:d3:1d:0f:04:
         a3:2d:41:9c:4b:3d:f0:e4:41:b7:0d:37:08:c5:d9:fd:60:07:
         e1:28:67:f4:2c:f2:cf:c6:f5:2b:a0:bc:6a:0a:66:e8:70:c1:
         37:45:74:1f:bb:6f:0c:77:8f:19:a0:22:97:a3:66:f4:7a:4c:
         56:bc:85:21:22:8a:04:37:72:25:e1:0d:9e:95:e8:93:f5:3f:
         0f:39:63:c2:a0:fd:57:34:6c:7e:fd:75:c1:c0:75:27:30:cd:
         fd:82:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:50:54 2026 by rpki-client