Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa
File:                     31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa (raw, json)
Hash identifier:          veXwKsCjjZC23FWiUSuqloAvVNrmG4i666YfxODK0FA=
Subject key identifier:   23:12:B5:7A:DB:8A:A6:47:9A:D3:BC:0E:6F:E4:CD:44:6F:6A:CD:08
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEDE091C70FF7A328E8901440
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     26722
IP address blocks:        207.54.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:91:c7:0f:f7:a3:28:e8:90:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=9675e51f-832e-4a99-88b4-eb8563536338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:53:60:01:51:ce:61:b8:12:dd:b6:39:29:
                    ce:0e:32:5e:09:2a:b0:c2:25:99:cd:59:22:05:f6:
                    8b:ea:96:c7:d0:a6:02:dd:c8:d4:60:03:d7:d5:cc:
                    a7:11:5f:d8:78:3d:2f:9a:52:6b:6e:cb:e2:50:0e:
                    0d:0f:6b:86:95:a8:c8:87:69:57:ad:82:40:04:48:
                    cb:e9:af:e5:cd:97:71:dd:b1:c6:3d:5a:5f:ab:68:
                    98:92:22:db:b1:60:f2:61:61:f2:94:aa:2b:cc:de:
                    fa:96:2c:a8:7f:0d:97:20:e6:0e:e2:aa:2b:d7:2f:
                    fe:82:28:7f:40:9b:34:ac:6d:5e:6e:95:d1:53:b2:
                    25:da:38:24:98:6f:f9:69:d0:33:68:d3:18:ad:19:
                    1c:47:8f:89:bf:34:9c:b3:1d:c1:dc:b2:72:de:bd:
                    43:a5:bb:0f:dc:30:45:a9:df:43:b7:55:f6:ee:65:
                    18:0f:15:d2:42:e1:ef:b6:07:81:96:9b:ff:b4:d7:
                    3e:80:77:69:1a:bf:19:aa:0b:c3:d7:e9:4b:4d:c2:
                    a5:74:f0:27:9b:e7:18:4e:fd:ba:47:6e:9d:24:da:
                    86:81:52:0a:ae:93:ca:3c:be:24:3d:ec:b9:6a:78:
                    eb:49:8e:0a:b3:f4:40:c1:22:fb:e0:e9:4f:84:0b:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:12:B5:7A:DB:8A:A6:47:9A:D3:BC:0E:6F:E4:CD:44:6F:6A:CD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:36:91:4f:98:12:6e:7c:8c:5e:7d:da:01:1d:d3:be:82:76:
         ea:82:95:98:f7:6e:06:77:3c:ca:6d:40:e6:5c:ed:a9:6e:82:
         12:04:57:f0:94:7c:1b:d4:69:42:37:d9:81:23:b3:da:39:47:
         8a:85:9a:63:3a:57:6a:65:5b:ba:ec:f2:b3:b4:ba:96:fa:c3:
         ab:b6:db:da:d7:92:7c:9b:a5:90:b1:6f:63:7e:8f:20:4f:af:
         d2:f2:d5:99:8b:17:25:4d:f8:15:67:2a:cc:66:16:6a:fa:b5:
         99:78:8a:d9:c7:48:3d:e6:a4:09:1c:8c:e7:45:75:2b:59:a1:
         78:3a:47:50:d1:61:d9:5d:59:c4:3b:87:8b:37:3f:43:2b:44:
         32:6c:67:52:86:d1:76:d3:4c:d6:fc:72:97:6f:56:d1:03:3d:
         07:30:13:c6:54:f7:01:7d:87:4b:d6:ec:c4:44:c7:49:ba:27:
         ad:cb:55:57:0d:bb:ef:eb:df:5e:91:31:ca:41:ee:f2:16:f1:
         2d:e9:53:a7:19:31:32:5e:06:a0:ce:5c:cb:89:89:9d:77:0f:
         94:b4:15:43:31:40:09:24:51:b5:d0:b3:f8:96:be:b7:21:b4:
         9b:f5:92:2a:ec:f4:cb:4e:06:eb:eb:70:c8:2d:6a:f0:11:fb:
         08:1d:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:43:35 2026 by rpki-client