Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa
File:                     87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa (raw, json)
Hash identifier:          3faJcQOGsa7dvSdx6kAuCdpb1gqMVhTF61J9xsS0GSM=
Subject key identifier:   91:9B:59:2D:1A:5A:3F:40:4A:79:C4:75:3E:2A:A1:C2:E6:5F:33:8D
Certificate issuer:       /CN=a854a4c3-e5e0-49a9-a110-947d91107e15
Certificate serial:       010D0C9F4328584DFA708438408D3D2A2365F400
Authority key identifier: 71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     54885
IP address blocks:        204.144.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:84:38:40:8d:3d:2a:23:65:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a854a4c3-e5e0-49a9-a110-947d91107e15
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=06334f73-0d6e-4ff4-af19-312eb885404f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:97:bd:62:07:0d:3d:45:c0:6a:c5:96:54:
                    b4:2d:98:f7:b2:0a:b2:74:b3:5e:cb:14:a1:90:8f:
                    48:7f:68:12:ea:b8:e2:47:44:d8:61:36:9c:ee:ac:
                    28:57:82:50:de:61:11:69:d5:65:1f:bb:b9:bc:59:
                    2f:40:62:24:27:ab:7a:c8:ba:eb:c0:c0:fa:d8:a0:
                    5b:60:aa:e0:1a:6c:e6:10:f9:38:4d:46:c7:cd:69:
                    c2:07:e5:46:37:fd:2b:4b:ee:a6:e7:11:bc:31:e3:
                    24:f9:08:14:4f:82:47:f3:b7:8e:08:84:15:9f:5c:
                    db:a8:60:35:cc:23:6b:4a:f3:87:d8:ff:ba:1b:21:
                    99:1d:ab:68:ca:ce:f6:5c:1f:d0:86:4c:b2:87:c4:
                    f7:a3:22:69:6a:c5:9a:07:cd:87:e7:65:3f:01:3e:
                    18:8b:f9:9e:e4:84:1b:ec:b8:b6:5e:27:30:1a:b1:
                    5d:5b:87:06:7f:c3:d6:fe:52:d0:93:fc:a4:a1:8f:
                    92:a1:2f:4a:35:1a:19:b7:17:7a:92:d5:5a:8e:0e:
                    ce:5e:1d:9f:bf:61:3c:9e:4c:1e:13:59:36:7c:25:
                    93:1d:1a:b7:e8:8e:6f:1b:86:b0:43:7d:b4:b7:37:
                    57:dd:91:f8:69:82:b3:88:cd:64:a2:ce:7d:d5:1a:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:59:2D:1A:5A:3F:40:4A:79:C4:75:3E:2A:A1:C2:E6:5F:33:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl

            X509v3 Authority Key Identifier:
                keyid:71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.144.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:11:24:2d:06:2b:dc:6f:ca:21:6c:06:45:16:d1:3b:ed:d9:
         8b:96:93:2a:c3:96:6d:10:9c:a4:d7:0a:cd:80:08:c5:05:42:
         2a:91:69:8a:1f:f0:4b:05:2c:ec:9d:48:f6:b6:35:a3:85:c0:
         00:05:fe:87:ea:0e:52:84:9c:07:ad:8a:1f:e5:72:c6:80:cb:
         8a:3f:dd:31:0a:1d:2f:b8:30:55:c0:5b:58:b2:40:94:f0:e6:
         cb:a6:f3:5a:7d:8b:b5:75:79:36:cb:a0:6e:d3:cd:34:97:3e:
         d2:3f:4b:8c:41:84:d2:01:3c:2f:5f:4f:9f:66:84:98:45:af:
         1d:9f:65:51:f9:ea:8a:6a:a7:8d:b4:84:28:fd:37:b5:d5:10:
         33:7b:89:45:a1:90:fd:14:b5:2e:f0:ea:e3:26:80:db:75:91:
         50:c4:df:15:29:e3:de:8e:05:84:a1:62:e8:91:d1:e2:9d:74:
         90:a9:26:ad:3e:53:ad:13:0d:a6:c5:58:c3:16:4e:99:73:d4:
         76:84:b4:b4:69:dc:07:36:c0:40:03:49:ab:9a:81:29:de:2a:
         b0:a9:f7:d8:d5:d0:f2:9a:ec:f5:a0:a7:19:c7:64:34:83:dd:
         7a:cb:69:e5:f3:6f:a4:37:ad:9f:73:4e:95:f6:52:3a:f7:18:
         07:87:78:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIQ4QI09KiNl9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg1NGE0YzMtZTVlMC00OWE5LWExMTAtOTQ3ZDkxMTA3
ZTE1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
MDYzMzRmNzMtMGQ2ZS00ZmY0LWFmMTktMzEyZWI4ODU0MDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW6XvWIHDT1FwGrFllS0LZj3sgqydLNeyxSh
kI9If2gS6rjiR0TYYTac7qwoV4JQ3mERadVlH7u5vFkvQGIkJ6t6yLrrwMD62KBb
YKrgGmzmEPk4TUbHzWnCB+VGN/0rS+6m5xG8MeMk+QgUT4JH87eOCIQVn1zbqGA1
zCNrSvOH2P+6GyGZHatoys72XB/Qhkyyh8T3oyJpasWaB82H52U/AT4Yi/me5IQb
7Li2XicwGrFdW4cGf8PW/lLQk/ykoY+SoS9KNRoZtxd6ktVajg7OXh2fv2E8nkwe
E1k2fCWTHRq36I5vG4awQ320tzdX3ZH4aYKziM1kos591RqyHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGbWS0aWj9ASnnEdT4qocLmXzONMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0
YTRjMy1lNWUwLTQ5YTktYTExMC05NDdkOTExMDdlMTUvODdlNjI1MmUtYzM2YS0z
ZDgxLTlkN2MtZDk0MzViMTg5YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTg1NGE0YzMtZTVlMC00OWE5LWEx
MTAtOTQ3ZDkxMTA3ZTE1L2E4NTRhNGMzLWU1ZTAtNDlhOS1hMTEwLTk0N2Q5MTEw
N2UxNS5jcmwwHwYDVR0jBBgwFoAUcan10a1vSExftH0+L57JtwDdpxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0YTRjMy1lNWUwLTQ5YTktYTExMC05NDdk
OTExMDdlMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJBoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALcRJC0GK9xvyiFsBkUW0Tvt2YuWkyrDlm0QnKTXCs2ACMUFQiqRaYof
8EsFLOydSPa2NaOFwAAF/ofqDlKEnAetih/lcsaAy4o/3TEKHS+4MFXAW1iyQJTw
5sum81p9i7V1eTbLoG7TzTSXPtI/S4xBhNIBPC9fT59mhJhFrx2fZVH56opqp420
hCj9N7XVEDN7iUWhkP0UtS7w6uMmgNt1kVDE3xUp496OBYShYuiR0eKddJCpJq0+
U60TDabFWMMWTplz1HaEtLRp3Ac2wEADSauagSneKrCp99jV0PKa7PWgpxnHZDSD
3XrLaeXzb6Q3rZ9zTpX2Ujr3GAeHeJc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:22 2026 by rpki-client