Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/854c105c-3667-30fc-8757-1ee3f5458f6f.roa
File:                     854c105c-3667-30fc-8757-1ee3f5458f6f.roa (raw, json)
Hash identifier:          rfMwqne9zKc399w4NnVED4C72+IGtWRVpJ8mHcFt+cY=
Subject key identifier:   D9:5D:D4:36:8D:62:42:B1:ED:14:31:C3:9A:E4:68:91:BA:C4:68:C3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA4F6862F49D19073E780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/854c105c-3667-30fc-8757-1ee3f5458f6f.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        204.84.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a4:f6:86:2f:49:d1:90:73:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=b8aaf11b-6179-4a42-8815-1e229d767515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:08:7b:7f:99:f7:da:a0:b0:78:05:45:17:
                    3c:73:30:8e:bd:24:9f:55:64:bd:d0:ed:fd:ed:16:
                    bc:a8:7a:ba:25:1b:7d:b4:c9:24:ff:c2:8c:84:b2:
                    db:50:0b:a2:4a:f5:7b:c2:c7:c2:84:f2:47:3c:3c:
                    b6:6c:28:17:4e:08:b6:3e:82:24:da:0b:51:84:3e:
                    90:6e:d0:db:80:dc:4a:b0:ef:48:a7:48:d4:d6:b4:
                    f0:1b:81:eb:ab:13:dc:83:07:6f:98:63:f0:1f:29:
                    e2:21:5f:36:4b:25:7c:4d:7c:66:96:93:de:b3:00:
                    65:f7:57:f8:03:8a:c1:01:c7:0d:7c:53:90:3d:34:
                    06:61:59:e1:b6:ac:d3:40:7a:0d:27:c2:e2:82:c1:
                    2a:44:ff:ba:92:d8:a4:15:27:c4:78:4d:cf:9f:58:
                    20:74:c8:45:ee:52:82:99:a4:3e:7e:9b:f4:74:83:
                    6f:17:8c:d9:a2:b5:74:e6:ee:81:d1:a9:74:17:a5:
                    6d:da:63:db:92:2a:6d:ec:ec:f8:13:34:3a:43:76:
                    38:9c:73:91:b3:8f:c8:cc:84:a6:14:69:48:3d:7e:
                    a2:43:7f:d9:f7:c8:ee:b8:5f:96:1b:43:18:83:59:
                    f3:16:67:cb:ff:eb:8d:81:28:47:93:0f:10:7b:ff:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5D:D4:36:8D:62:42:B1:ED:14:31:C3:9A:E4:68:91:BA:C4:68:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/854c105c-3667-30fc-8757-1ee3f5458f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:00:59:3b:ff:a6:7b:66:00:ea:41:26:46:d9:39:72:8b:
         ba:56:51:e4:cd:e1:27:2f:3b:c1:e5:e9:5a:cd:49:a7:49:4c:
         9f:bf:0f:fd:cf:8c:eb:eb:65:3d:ba:52:7e:59:67:2a:d2:cb:
         52:73:42:56:e4:c9:da:3c:8b:10:69:df:77:b7:aa:02:c0:b9:
         15:36:55:d9:82:8f:83:ef:ff:12:45:f1:96:ce:37:f1:10:cd:
         f5:95:f3:46:3c:65:a0:6a:8b:9e:5b:fe:58:89:1c:db:9f:37:
         e2:3c:27:6c:09:52:6a:a8:49:77:4e:9f:d7:f7:89:94:25:7c:
         d3:ed:5f:a8:ce:d8:06:c9:1e:26:87:ef:4e:7b:1c:3a:22:d9:
         50:19:02:ef:3e:6b:97:9d:42:e2:f3:bb:ad:3b:e5:66:b4:c7:
         73:ac:4e:d2:d6:8d:61:62:59:2c:f9:9e:58:4a:66:d3:43:27:
         78:af:aa:3b:bc:8d:d8:81:f3:ff:f3:66:a0:5f:1e:9c:75:da:
         c1:bf:11:44:72:62:4c:22:89:39:cd:e9:3e:09:3a:7d:fb:41:
         1d:16:06:19:f4:74:0d:ef:74:56:27:20:cb:ea:ed:98:2f:7f:
         7a:b7:38:94:ba:b5:c2:3b:8b:46:c8:b2:2a:53:e6:f9:1a:a3:
         74:1c:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:53 2026 by rpki-client