Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa
File:                     54ea31e2-f508-38e4-965e-d1d16af3f58e.roa (raw, json)
Hash identifier:          LrUdId2vNQxowAG/i9pB4H5ZfT714KUlCoJywZcY0/A=
Subject key identifier:   CA:AF:FB:44:9B:8C:78:4E:5D:37:F9:46:1E:BF:18:33:88:2F:0A:AF
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E4C5488A267CB7E04A0F41580
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     19437
IP address blocks:        104.254.235.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:88:a2:67:cb:7e:04:a0:f4:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=8ef601c8-6061-4ac2-b27a-f52ed79efa10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:7d:15:53:c5:03:18:89:f9:c9:0f:83:6e:
                    41:74:c3:af:b8:d5:dc:cd:c4:de:e0:47:e9:f0:59:
                    b5:f0:ef:ff:18:77:85:4a:16:1f:3c:c7:67:da:d0:
                    a8:a4:cd:46:9d:90:7b:b7:f6:d1:3d:43:b9:eb:72:
                    39:42:d3:48:b3:f9:60:91:5d:61:ff:af:fb:cb:32:
                    ab:69:90:e9:6e:75:df:25:25:b3:0e:b6:a9:66:5d:
                    42:94:9f:44:ca:ed:39:56:e0:e7:f4:33:b7:fa:0b:
                    36:55:8f:1d:9f:1f:dd:30:f6:da:53:6b:20:60:7b:
                    47:52:38:22:18:74:61:9e:08:7a:29:9a:35:67:ba:
                    09:1a:c8:67:14:b9:8d:a6:54:16:05:17:9a:5e:6f:
                    59:05:8e:a9:12:83:d2:7c:c5:ca:29:43:f0:7e:18:
                    43:92:c1:82:bf:07:c6:de:04:40:8e:49:6f:65:14:
                    fe:23:14:d9:a0:0d:de:c9:c0:07:3c:f4:2e:fd:0d:
                    d6:07:79:5d:ff:d2:3f:1c:6a:61:d7:39:4a:95:77:
                    bf:99:db:94:91:8f:b5:c3:6b:03:e9:c1:d8:5a:3b:
                    b2:be:f7:14:6f:50:03:47:4f:54:c8:6e:88:39:87:
                    2d:e5:4b:ae:57:a7:a3:c5:42:c9:5d:c5:36:fd:69:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AF:FB:44:9B:8C:78:4E:5D:37:F9:46:1E:BF:18:33:88:2F:0A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:3a:61:c2:19:53:21:6e:6d:e3:7d:e3:a3:40:da:46:83:
         7d:2f:5e:69:50:28:92:f8:cc:86:45:53:03:b9:5f:89:fc:2d:
         b2:12:41:ff:9a:c9:aa:f1:b9:5a:88:61:15:73:51:64:f9:f7:
         9d:92:8f:ea:72:6b:70:fe:ca:3d:42:e0:2d:ba:76:14:85:80:
         e5:dc:13:aa:02:86:65:cc:4d:8d:08:8a:d0:37:68:aa:45:ba:
         ac:79:5a:bc:94:57:90:de:72:a9:1b:ca:b1:2a:6b:cf:b2:72:
         c9:c1:46:9b:2c:d2:e5:48:89:3e:7d:c2:10:6a:e7:70:89:bb:
         4c:2a:75:4b:c6:a3:e9:50:c8:61:2c:6c:8e:52:77:e1:cc:87:
         93:ec:bc:5c:ef:db:cb:f7:db:cd:86:98:10:cc:71:92:de:26:
         41:98:3f:a7:19:9f:95:d7:79:00:2a:dd:a4:f5:cb:f2:97:61:
         09:e6:0b:27:f5:19:41:34:49:50:27:55:5b:0e:b5:ef:73:f5:
         d7:f9:88:ac:6b:10:15:32:c9:f3:14:b7:2b:8c:7c:97:24:d5:
         30:97:e8:26:5f:ad:f5:73:7b:1f:ff:e2:46:85:3f:47:22:16:
         02:3b:d5:c9:fe:68:1e:eb:e3:d2:f7:91:bf:99:55:0b:bd:1c:
         b0:90:7f:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVIiiZ8t+BKD0FYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
OGVmNjAxYzgtNjA2MS00YWMyLWIyN2EtZjUyZWQ3OWVmYTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2p9FVPFAxiJ+ckPg25BdMOvuNXczcTe4Efp
8Fm18O//GHeFShYfPMdn2tCopM1GnZB7t/bRPUO563I5QtNIs/lgkV1h/6/7yzKr
aZDpbnXfJSWzDrapZl1ClJ9Eyu05VuDn9DO3+gs2VY8dnx/dMPbaU2sgYHtHUjgi
GHRhngh6KZo1Z7oJGshnFLmNplQWBReaXm9ZBY6pEoPSfMXKKUPwfhhDksGCvwfG
3gRAjklvZRT+IxTZoA3eycAHPPQu/Q3WB3ld/9I/HGph1zlKlXe/mduUkY+1w2sD
6cHYWjuyvvcUb1ADR09UyG6IOYct5UuuV6ejxULJXcU2/WmN2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMqv+0SbjHhOXTf5Rh6/GDOILwqvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTRlYTMxZTItZjUwOC0z
OGU0LTk2NWUtZDFkMTZhZjNmNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+hOmHCGVMhbm3jfeOjQNpGg30vXmlQKJL4zIZFUwO5X4n8LbISQf+a
yarxuVqIYRVzUWT5952Sj+pya3D+yj1C4C26dhSFgOXcE6oChmXMTY0IitA3aKpF
uqx5WryUV5DecqkbyrEqa8+ycsnBRpss0uVIiT59whBq53CJu0wqdUvGo+lQyGEs
bI5Sd+HMh5PsvFzv28v3282GmBDMcZLeJkGYP6cZn5XXeQAq3aT1y/KXYQnmCyf1
GUE0SVAnVVsOte9z9df5iKxrEBUyyfMUtyuMfJck1TCX6CZfrfVzex//4kaFP0ci
FgI71cn+aB7r49L3kb+ZVQu9HLCQf0A=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:35 2026 by rpki-client