Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa
File:                     a89150dd-4153-345d-91e8-d43ba9e5edde.roa (raw, json)
Hash identifier:          uV10xIAiSSoyVnYtkJxi/HnSWO0Ydi56xUubbSmiXiM=
Subject key identifier:   ED:83:1B:11:89:85:44:07:AF:26:24:36:4D:F2:42:58:C6:62:91:D4
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584DE9B07FFEFBF36D142D16F240
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     3549
IP address blocks:        208.54.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:7f:fe:fb:f3:6d:14:2d:16:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=472e1521-9f91-4fdf-a3f1-461ba2bdf2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:5a:a8:0b:da:42:90:10:51:fe:9c:2a:e7:
                    45:4d:fc:05:44:0c:76:d8:e3:92:3a:d7:26:38:b7:
                    03:c2:4a:dd:5d:ea:2a:92:22:8c:fc:9a:d0:de:0d:
                    4a:47:b6:f9:a4:bc:40:2f:11:12:c5:fb:c8:be:f4:
                    98:bb:d3:1c:31:86:45:5c:74:52:01:9d:77:34:b4:
                    86:63:ce:1c:65:3a:01:9d:6e:a6:4b:57:24:90:a2:
                    0d:45:55:4b:79:45:b6:d2:01:ef:4d:c0:2d:e5:4b:
                    29:76:5f:66:84:20:8d:e2:e5:76:f5:ce:a7:be:98:
                    eb:79:26:32:33:30:48:d2:9a:5f:79:ea:73:4e:3e:
                    5d:3b:a7:d5:02:f4:62:9b:76:f8:71:98:c7:38:6a:
                    91:6b:1c:9f:0c:41:6f:4f:93:11:7c:46:c3:7e:3a:
                    48:ac:75:a9:71:8b:a8:83:40:1f:50:03:2a:90:be:
                    9e:6c:d4:9a:7d:c7:18:de:82:42:3f:5a:10:44:8c:
                    95:93:de:4c:37:d2:42:37:a2:2b:41:3f:12:f0:88:
                    64:ff:4f:e0:7a:37:f0:e1:bf:72:ae:e7:73:ee:56:
                    20:f7:6b:77:7b:9c:7e:3b:63:f1:e7:e0:16:2b:c2:
                    b1:88:da:c4:07:ff:0f:db:fe:8c:75:84:08:ae:9c:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:83:1B:11:89:85:44:07:AF:26:24:36:4D:F2:42:58:C6:62:91:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:2b:49:67:40:8b:b3:95:17:26:db:1a:78:8f:71:36:a2:f5:
         fc:55:10:1f:57:04:70:06:f1:8f:a6:d9:10:75:60:1d:e6:9e:
         b1:d4:83:cc:32:2c:d8:e4:19:bb:6a:54:92:5d:83:d4:13:c0:
         b6:70:f8:5f:0a:11:62:b9:1c:12:28:aa:44:5d:36:c6:73:20:
         f9:b6:99:9d:90:cd:50:d6:a3:bf:8d:55:77:7b:62:c8:78:49:
         28:6b:b4:92:24:af:c9:5f:77:eb:83:9f:cc:7b:ec:f3:06:32:
         ca:31:06:a0:0e:a6:ba:dd:cb:26:5b:fd:28:9d:7c:c7:af:e9:
         5f:22:25:e9:23:b7:7d:57:48:65:3a:7b:33:a2:b1:c5:b4:fb:
         b7:43:ec:aa:a5:ec:76:0e:0e:3c:07:e6:04:5f:25:cf:be:67:
         2c:9e:a2:25:95:4a:16:35:e4:25:64:24:e7:63:de:eb:5b:81:
         62:bb:a7:5e:58:2d:a6:2f:d7:d9:fb:31:60:d8:2c:53:d5:26:
         93:13:0c:44:df:25:9f:98:78:48:7a:9d:26:84:94:65:52:bc:
         ee:c4:3d:5f:b2:77:5e:ad:8f:0f:ed:f7:13:cd:69:2f:e4:89:
         88:6d:2e:97:d4:3b:fe:3d:b8:fc:10:74:29:fd:f5:8b:7b:d9:
         84:c9:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:23:39 2026 by rpki-client