Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
File:                     cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa (raw, json)
Hash identifier:          yVFMnZfw+fpfJgDdgwRlZ/rJKGiT+jjq0AJtoJwn7Eo=
Subject key identifier:   56:03:EC:9F:9B:97:51:57:D3:F1:DA:0A:52:FF:14:19:48:AE:09:C6
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEDE098027F12148BAB7A7D00
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     54315
IP address blocks:        207.54.135.0/24 maxlen: 24
                          207.54.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:98:02:7f:12:14:8b:ab:7a:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=aa3f5194-332e-409c-83d2-131af737f958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:53:f1:d2:0d:a5:51:48:c5:b0:66:4e:48:
                    50:c3:54:3a:63:39:23:c0:27:cb:87:12:f7:8a:08:
                    a9:04:b5:db:30:51:e5:22:2d:0c:fc:3d:31:94:73:
                    ef:de:9e:bc:ed:28:b0:3d:1c:5b:2f:9a:0b:eb:21:
                    ef:55:90:d9:0f:6a:af:6c:c9:7d:54:4b:da:57:26:
                    16:47:2a:30:0d:81:0b:1e:dc:22:49:38:87:00:3e:
                    ea:f2:be:e4:26:ad:64:84:90:a8:b4:d4:70:8f:71:
                    cc:1f:6d:97:4e:80:b4:cf:2f:d9:63:74:68:0a:a9:
                    9d:a2:c8:e7:5c:53:5b:65:a2:0f:0b:89:c4:b0:83:
                    38:23:de:df:c8:77:ee:34:1f:77:9e:8a:1c:cd:e9:
                    b8:f8:02:11:c0:52:78:b7:a7:2b:54:11:c2:b8:5f:
                    ee:4e:cb:8d:a6:69:15:ad:0e:45:84:87:90:4c:0b:
                    4c:02:b9:39:5b:79:e0:21:50:24:1e:fb:51:56:17:
                    2d:89:3c:f6:6f:b6:fb:0c:77:82:ab:31:be:a0:41:
                    78:35:10:28:c6:2c:bd:1a:2f:b6:9a:af:10:13:2d:
                    60:b0:da:d8:c2:8d:5e:90:71:6b:f4:7e:63:96:4e:
                    25:2c:b3:b2:08:a9:d9:e6:85:69:a7:e0:db:3e:f4:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:03:EC:9F:9B:97:51:57:D3:F1:DA:0A:52:FF:14:19:48:AE:09:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.135.0/24
                  207.54.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:55:e6:e4:dc:68:1a:eb:8b:4e:74:57:9a:d1:58:ab:d7:d7:
         f1:94:06:37:33:8e:9a:47:da:2d:05:3a:8b:96:dc:ce:2c:d8:
         ad:de:08:06:16:ba:70:b2:e4:77:0d:4a:c3:f1:38:38:be:87:
         72:6b:f8:14:cd:55:5b:c3:6a:0a:6d:2c:51:ce:53:29:54:fb:
         ea:6a:87:7f:b4:ea:53:e8:f9:08:14:3a:c5:80:70:bd:02:cf:
         99:68:89:99:cd:dd:0b:fe:74:14:56:f7:e6:2b:d4:a1:9f:dd:
         39:38:06:d6:24:b5:34:b0:85:a7:e8:95:a6:23:d4:55:ef:f4:
         da:3a:b9:23:99:91:42:34:e8:2b:8d:04:ff:b6:a7:e8:f9:83:
         0f:a3:53:47:88:c8:08:8b:64:60:72:25:9a:91:65:ca:dd:c7:
         42:31:22:c1:c4:94:53:5d:92:cb:40:09:2e:ff:12:d5:6c:09:
         c1:de:38:a9:07:20:ca:c5:32:9d:90:06:b4:7f:9c:90:fb:cb:
         e0:7c:9b:bb:1e:3f:18:c8:7d:3e:b7:84:10:f7:2d:fb:3d:f6:
         f2:15:39:20:84:8f:1f:d2:e5:74:98:6a:69:2a:cf:bf:0d:98:
         c3:62:f5:98:fc:11:f8:cc:2a:ad:85:42:c3:ce:e1:21:f6:60:
         c2:24:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:40:54 2026 by rpki-client