Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa
File:                     d301a4b3-34ea-309b-80f1-90e66068431c.roa (raw, json)
Hash identifier:          CdAYwOK2mWshfEhDxrsuwP4eJcG+MHHC3US+8Ow7qnc=
Subject key identifier:   9A:F6:FF:5D:EA:A8:36:E8:21:3E:A0:6E:A4:45:D5:74:53:60:9D:2B
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584A9D30E3DDC7F520315416AD00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     4323
IP address blocks:        208.54.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e3:dd:c7:f5:20:31:54:16:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=7df40dca-0130-47cf-8443-0e2c51948f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:80:5c:7a:6c:6b:69:73:51:29:3d:98:e1:
                    c1:e5:21:01:7c:4f:63:14:5e:de:40:64:d0:15:37:
                    07:47:6f:75:c5:93:66:bd:ac:a0:aa:57:fd:43:13:
                    e9:24:79:e0:92:5e:ff:31:dd:73:b3:3e:47:32:9f:
                    74:5d:27:f3:6e:fc:f0:e9:a5:72:78:aa:5d:4e:c5:
                    51:15:83:5b:1c:69:eb:ac:ef:47:50:63:4a:55:b1:
                    5d:6f:da:65:d2:57:0b:41:a7:5a:66:c3:27:b0:db:
                    71:dd:4f:00:7b:fd:58:da:de:b9:1b:94:ac:c2:0b:
                    90:fa:f2:e0:85:96:31:84:ec:7d:14:b8:b6:41:f2:
                    d0:7d:6e:1c:cb:55:f1:31:54:61:b8:21:7f:53:d8:
                    63:a7:2b:3b:f0:bb:69:d6:7b:02:da:5f:4f:58:86:
                    34:78:0c:85:1d:2f:ad:78:71:30:b1:93:c9:3a:77:
                    52:d5:78:b3:b0:d9:97:01:e9:1a:de:7f:df:b8:09:
                    7c:68:62:73:a6:79:73:43:77:df:16:83:60:c1:0e:
                    fd:f0:07:6f:4f:e1:7c:1f:4b:c1:3f:0e:e6:62:9c:
                    a0:bd:9a:a9:73:5d:53:d7:12:1e:a5:97:b0:cd:ec:
                    c2:e5:23:69:0a:54:c4:38:e1:e7:31:3a:8d:96:04:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F6:FF:5D:EA:A8:36:E8:21:3E:A0:6E:A4:45:D5:74:53:60:9D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:31:6d:68:c2:63:fe:7c:09:b4:8c:28:3a:aa:e5:fc:43:1e:
         87:8b:1c:a7:03:25:dd:02:26:39:be:c0:2e:c6:06:3d:f9:c4:
         0e:12:5c:54:77:d5:5f:77:40:e5:67:cf:b2:ef:7a:31:2a:b7:
         50:07:2b:ed:c7:08:0c:88:99:82:ec:a6:5b:4c:65:c4:12:ac:
         bd:eb:25:91:63:84:33:4e:35:44:f8:5c:7b:d5:1f:a6:c4:1e:
         f0:9a:dc:e7:23:90:36:ba:f9:69:e6:02:9a:eb:02:94:8b:3e:
         82:86:c8:a8:5c:01:85:e0:5e:d6:8f:21:d2:3a:61:e4:1f:7d:
         1f:61:de:f8:6e:61:9a:64:c9:d6:80:62:6e:40:c9:11:6e:03:
         56:0e:89:cd:72:99:d1:68:e1:9a:e1:c4:b3:b9:6b:94:70:e7:
         78:40:bd:ac:7a:44:9f:05:62:3c:a1:d9:37:f4:41:01:00:2a:
         24:b9:9a:b2:68:27:7e:87:71:d4:d5:f8:81:39:03:b0:c5:10:
         30:a0:77:ab:dd:31:09:6a:97:cd:16:07:1d:c8:5e:4a:4f:e5:
         1f:2e:22:bf:08:ad:4f:12:87:81:11:dc:87:2a:4a:53:46:49:
         c4:3c:2d:b0:13:0d:e1:3e:1a:d7:27:04:91:9b:49:76:40:66:
         ab:4c:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:08:40 2025 by rpki-client