Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa
File:                     3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa (raw, json)
Hash identifier:          V+2VDq/sgSCShMx1YXRiaJueN8CHiok7yfLgCBU2QeM=
Subject key identifier:   45:A8:33:6F:89:48:DA:4E:3D:1A:E5:1F:5A:63:CF:46:F5:D8:25:4A
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584E482481B631DD697175BCE600
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        23.227.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:81:b6:31:dd:69:71:75:bc:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=fa021b96-f516-4505-8066-79a8f182704a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:d8:22:7b:c2:9b:9b:f7:25:06:45:54:39:
                    38:d6:41:e4:2e:17:2f:e3:bc:71:d9:7c:6d:c0:f6:
                    b6:a3:76:7c:13:c4:eb:24:e0:5d:05:6b:a8:26:3d:
                    7d:25:6c:39:04:3e:8d:1d:42:c8:87:c1:70:be:ab:
                    4c:da:56:f2:d7:7b:da:8a:c8:9c:35:9b:a5:38:2b:
                    a8:b8:4d:d5:d4:01:26:3c:06:3b:9e:36:48:30:44:
                    a0:00:0d:50:24:e0:ae:f2:5a:9d:eb:28:6c:15:08:
                    4b:3e:bc:51:1a:53:da:3d:15:27:f5:50:eb:81:0c:
                    60:c9:21:51:19:29:63:e9:90:05:b5:72:f9:1d:cb:
                    aa:2a:05:b0:50:a5:c2:06:cd:d5:63:26:cc:21:e5:
                    6e:c8:6b:32:b1:82:b7:33:cd:83:46:75:f3:93:d3:
                    af:01:90:b4:54:1c:a1:6f:5f:7f:a1:4e:92:1b:f7:
                    3d:27:8f:52:fb:20:ec:61:b0:cc:6d:c3:9e:58:b4:
                    46:06:db:4e:25:68:df:08:d2:6f:f6:3a:ed:d4:28:
                    39:47:f9:c3:a5:ac:8e:ec:61:7d:5c:10:c2:87:6d:
                    00:33:ec:3b:02:9d:38:32:be:95:3e:27:45:2b:67:
                    d9:68:86:0e:a8:8c:64:2a:2e:bc:74:dc:cc:a5:ee:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:33:6F:89:48:DA:4E:3D:1A:E5:1F:5A:63:CF:46:F5:D8:25:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:49:74:eb:0c:38:6f:2e:55:8c:a8:7c:d7:8c:b8:87:fe:20:
         f0:e7:da:37:d8:79:46:04:06:a1:e3:31:5b:b1:c8:fa:ab:19:
         2d:9e:ba:21:ce:bb:a0:ab:b5:a4:86:da:ea:48:2c:de:72:8a:
         f6:95:8c:d8:0e:c9:e6:37:cc:68:64:f1:5b:dc:5c:50:a5:9f:
         d3:cd:b1:e8:16:6a:cc:f6:60:ec:c5:4c:68:f2:a0:d7:f8:9c:
         06:48:5c:f2:a8:7a:df:2a:c2:d9:7b:77:a1:09:21:76:a2:ec:
         9f:5d:b7:4d:40:20:56:f4:58:c5:95:a7:9d:94:4c:18:0f:0d:
         52:8c:29:7d:a8:7c:65:4e:bd:98:50:be:12:d9:e5:92:50:a9:
         3c:bb:76:f4:91:c4:84:ff:ac:c9:5d:a5:87:5b:00:b2:9d:68:
         b9:57:19:96:5d:cf:99:b1:c1:1b:b5:c3:c6:d9:eb:ce:e9:cf:
         36:65:94:72:e8:6a:2f:f5:53:a4:e1:3b:2a:e6:d4:a1:73:0c:
         fd:c0:44:84:8b:0f:1c:63:b1:3b:2d:62:b8:7b:b1:f1:bd:a2:
         31:3d:ce:94:b5:d0:99:39:e0:72:08:d0:e9:93:87:d2:bc:bc:
         5e:ff:db:5a:11:9e:89:c6:a2:9c:ab:d6:11:94:5a:de:72:8d:
         f4:36:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:06 2026 by rpki-client