Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa
File:                     AS54339.roa (raw, json)
Hash identifier:          5RpgmGeRvnB3Bp9cXTyRIEBNhmlFR2jadd7qsTnGWfI=
Subject key identifier:   66:41:A9:E4:D6:03:74:EC:F9:02:3A:EE:DC:DE:31:23:EF:6C:CF:ED
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1EC31BCA38395A0831B9F9CE4EB25CBFAEBC542D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa
Signing time:             Wed 15 Apr 2026 12:35:57 +0000
ROA not before:           Wed 15 Apr 2026 12:30:57 +0000
ROA not after:            Wed 14 Apr 2027 12:35:57 +0000
asID:                     54339
IP address blocks:        67.210.102.0/24 maxlen: 24
                          89.35.93.0/24 maxlen: 24
                          89.35.94.0/24 maxlen: 24
                          89.35.95.0/24 maxlen: 24
                          162.213.3.0/24 maxlen: 24
                          192.228.113.0/24 maxlen: 24
                          192.228.122.0/24 maxlen: 24
                          192.228.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:1b:ca:38:39:5a:08:31:b9:f9:ce:4e:b2:5c:bf:ae:bc:54:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 15 12:30:57 2026 GMT
            Not After : Apr 14 12:35:57 2027 GMT
        Subject: CN=6641A9E4D60374ECF9023AEEDCDE3123EF6CCFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:4e:49:36:0d:44:af:13:40:9f:90:fb:19:
                    9f:4f:47:25:3f:90:d4:37:c6:e7:7b:90:5b:5f:3b:
                    8d:37:7a:25:f9:c9:7b:5d:95:7e:04:f5:cb:4f:29:
                    56:1b:77:e0:c6:b7:c6:3c:ad:93:9e:1d:c5:76:24:
                    45:eb:c9:c5:28:2d:a1:2e:f7:3d:fd:f4:e0:68:27:
                    28:b0:2d:9a:2d:7d:ea:c3:8f:a1:87:e7:65:d7:a2:
                    12:98:6e:c9:ee:9c:cb:e9:0c:cf:32:32:ea:1b:0e:
                    78:ca:c8:1e:3c:66:e4:4a:b4:d7:4d:97:84:5c:d9:
                    94:8a:4d:60:28:22:09:f1:e8:25:19:55:8d:b7:bb:
                    a3:23:0f:3f:dd:8d:7a:97:04:80:16:d9:e5:71:fb:
                    b1:57:e0:1e:92:25:89:ab:1c:88:9d:30:98:6a:41:
                    79:c7:55:45:63:43:26:a7:a0:cc:c9:30:3a:02:20:
                    3d:1b:6e:f0:33:98:23:f3:79:7a:3c:e0:0a:08:5a:
                    ad:f7:66:49:03:9b:90:1f:81:f1:05:3c:ba:d3:c5:
                    7c:1e:3e:7a:67:f1:12:c8:4e:86:f5:5f:03:0c:8b:
                    f2:f0:c2:af:a3:32:65:75:80:f8:53:42:a3:64:89:
                    1c:c5:56:6e:05:fa:51:3e:57:a9:96:25:29:9d:b0:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:A9:E4:D6:03:74:EC:F9:02:3A:EE:DC:DE:31:23:EF:6C:CF:ED
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.102.0/24
                  89.35.93.0-89.35.95.255
                  162.213.3.0/24
                  192.228.113.0/24
                  192.228.122.0/24
                  192.228.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:20:f3:83:ef:04:bb:62:6d:77:c2:7c:8c:3d:f3:24:7d:
         8e:d9:3f:36:9d:98:87:54:59:e4:79:f8:a9:79:2a:32:73:92:
         01:7f:60:ed:df:88:81:36:ea:1c:d8:40:73:eb:4a:df:23:4f:
         54:74:55:06:04:d7:b7:db:6d:45:3a:1e:76:b8:63:44:ec:c9:
         e2:e6:ed:fc:5c:18:5d:12:57:98:6d:f4:85:32:8c:16:99:89:
         77:6f:55:b7:38:04:17:21:f3:d7:84:d3:53:d1:db:3e:9f:07:
         f8:83:4d:7a:30:09:82:28:85:84:5e:4a:86:7a:55:77:de:61:
         99:df:cf:79:b0:fd:b5:b4:9e:9c:65:b0:57:7a:dd:cd:e8:d6:
         2b:b0:0b:a6:d4:13:6c:6e:9a:22:ad:c5:8e:c7:df:4a:02:b0:
         d7:b1:b7:84:39:b3:69:ca:5c:04:a0:ea:ec:48:43:be:04:11:
         cc:b7:e8:b6:db:93:25:6c:74:2b:28:65:b8:c7:8d:a2:d1:d7:
         17:98:9c:a6:e1:6f:47:ca:2c:1a:f6:3a:17:38:93:58:42:3f:
         29:27:8c:81:f3:62:e1:ab:dc:66:a0:65:8a:87:72:87:56:61:
         2e:ea:70:a4:e0:e6:3f:ed:33:f9:70:36:30:81:a3:b8:75:3f:
         79:d7:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:03:45 2026 by rpki-client