Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/25214253-2e55-3a9d-be7b-ea8492b07d06.roa
File:                     25214253-2e55-3a9d-be7b-ea8492b07d06.roa (raw, json)
Hash identifier:          NEwt2XRtNBOwXLBJAssEAO9ELq5UFBKXK8DF4ux8lgA=
Subject key identifier:   AA:02:58:B3:B1:92:9C:A3:80:90:FA:95:33:F0:E9:DB:6D:E1:5A:42
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232AB146CBA97E9022EE40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/25214253-2e55-3a9d-be7b-ea8492b07d06.roa
Signing time:             Wed 19 Aug 2026 18:03:40 +0000
ROA not before:           Wed 19 Aug 2026 18:03:40 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     33517
IP address blocks:        204.2.154.194/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2a:b1:46:cb:a9:7e:90:22:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:40 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=1124e028-8e3f-44ca-853c-7a9c32dc2425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:cd:49:de:97:c8:bd:10:2e:a9:bf:e5:7d:
                    00:62:9d:e2:b6:a2:49:25:a1:87:d1:03:6b:69:b6:
                    3b:49:8a:c6:4e:f3:93:9d:2d:bc:67:da:df:55:e1:
                    9b:a2:20:92:c3:02:eb:ae:38:a0:ba:2a:94:71:fa:
                    84:84:d0:58:f1:fe:b9:42:48:8e:c9:b5:d0:f3:ae:
                    69:a5:c4:7e:f2:e9:df:18:be:fa:05:f8:2d:b7:3f:
                    de:13:2d:9e:2b:68:7c:19:b1:4d:f8:53:07:82:f5:
                    ee:85:7a:1a:85:67:30:ae:e7:81:c0:d9:c1:41:e1:
                    bc:96:97:c8:55:83:f6:eb:d5:31:16:46:dc:dc:81:
                    c4:cb:98:6b:2a:2d:16:b9:e1:38:c6:45:a4:58:ba:
                    9d:9e:ea:38:47:97:0d:0c:60:16:35:e4:9e:a4:62:
                    36:cd:9c:8a:f9:e1:f3:5f:0f:8f:3e:7e:b0:c2:53:
                    bd:40:c3:dc:d1:65:9b:f3:91:d6:98:85:a7:6b:cc:
                    02:ec:96:ce:0c:b9:ca:68:1c:53:92:cf:a0:09:81:
                    5c:18:ed:e6:28:77:53:de:38:17:b7:1e:04:ad:a1:
                    1c:03:89:e3:c7:67:5d:a5:57:e7:91:1b:e0:4d:25:
                    ab:6c:83:26:3d:3a:82:ff:d0:16:51:7d:63:32:1f:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:02:58:B3:B1:92:9C:A3:80:90:FA:95:33:F0:E9:DB:6D:E1:5A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/25214253-2e55-3a9d-be7b-ea8492b07d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.154.194/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:71:f5:eb:e4:d0:76:8c:db:6e:31:3d:fd:b9:2b:5e:53:40:
         64:a8:b0:8e:2d:60:f0:aa:5a:61:44:3c:ef:8a:74:ad:9b:ab:
         10:09:e7:d0:0a:23:6d:56:18:98:cd:e7:4f:18:84:a5:d5:ab:
         07:25:00:4a:13:e5:7b:01:1d:05:96:fd:c3:45:e0:fb:30:71:
         1c:61:97:a4:7b:5d:e9:f2:0c:c2:1a:bc:ee:b1:8d:f0:e1:c6:
         b0:91:27:a9:f0:c1:1f:f1:68:76:b2:da:e3:99:09:03:80:01:
         75:17:29:63:f0:7f:72:21:1a:4e:3d:4d:7d:ad:3c:e8:a9:84:
         7f:f6:c3:37:84:2b:61:03:61:55:07:e3:fc:2b:28:d4:9b:ca:
         eb:8a:1a:06:75:64:49:3e:1a:4d:c3:d3:78:63:6a:42:49:8d:
         4a:3e:b5:56:2b:5e:e2:79:2c:98:d3:2c:2a:5e:74:72:71:73:
         61:9b:65:5a:50:43:3c:cb:d8:2e:ca:cc:98:93:b4:bc:ca:1c:
         b0:e3:9b:11:cc:a4:02:93:93:0b:9c:5b:46:32:bf:3c:0b:ee:
         6f:5d:b8:47:0c:f3:58:ef:b6:14:f4:7c:af:b6:22:2d:f8:d5:
         06:18:1e:7d:1c:ec:08:5b:3a:26:20:5b:01:15:13:5e:8f:95:
         b0:a5:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:35:27 2026 by rpki-client