Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS54170.roa
File:                     AS54170.roa (raw, json)
Hash identifier:          jOKjA9b/0JykxaI9FS4ZYi7Q4ZUsiFKA5ugyVT6hCQU=
Subject key identifier:   CF:2A:AA:69:FA:77:4C:51:91:DA:0F:78:FB:71:BA:A1:80:37:B6:20
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       19B5AD9C107E7D210566996EB047CF8593E8211F
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS54170.roa
Signing time:             Wed 23 Sep 2026 19:34:07 +0000
ROA not before:           Wed 23 Sep 2026 19:29:07 +0000
ROA not after:            Wed 22 Sep 2027 19:34:07 +0000
asID:                     54170
IP address blocks:        45.54.25.0/24 maxlen: 24
                          45.54.49.0/24 maxlen: 24
                          2607:f740:e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 20:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b5:ad:9c:10:7e:7d:21:05:66:99:6e:b0:47:cf:85:93:e8:21:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Sep 23 19:29:07 2026 GMT
            Not After : Sep 22 19:34:07 2027 GMT
        Subject: CN=CF2AAA69FA774C5191DA0F78FB71BAA18037B620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:cd:e8:ea:61:1a:0e:d0:e6:ea:f8:55:f8:
                    0c:83:fd:9e:78:77:e2:01:fe:b2:c1:0b:88:c2:33:
                    a8:45:e4:ed:38:69:ba:96:ca:8a:84:0b:56:96:aa:
                    4d:81:88:88:4f:73:65:f5:ab:0b:21:15:0c:20:5b:
                    7b:eb:5f:8f:fe:a9:94:e1:a1:15:95:41:dd:bc:99:
                    e9:51:9d:f8:89:d7:35:10:1b:52:3b:aa:8a:aa:7a:
                    59:2c:4c:0c:23:58:71:7f:42:8b:c6:12:2c:13:10:
                    ae:de:c5:8f:a4:e9:33:5e:9f:2e:45:1a:82:1f:cc:
                    ea:fb:51:29:ff:0c:22:c9:e8:03:23:94:42:3d:2a:
                    34:2c:5e:7a:6c:01:91:16:6a:63:29:6c:36:4d:d7:
                    73:c4:11:ec:0f:0b:6e:73:e9:12:9d:a9:e2:9e:2d:
                    98:5d:d7:9d:e8:ba:f9:92:29:87:2d:38:72:59:15:
                    b5:15:e1:8e:35:22:c1:ef:08:a6:28:73:ff:04:45:
                    66:a0:3e:2a:41:dd:fa:e6:6d:4c:43:86:81:b0:3a:
                    2f:9c:dd:f2:a7:ad:d8:b5:cc:df:a2:a6:3b:65:27:
                    32:ba:42:4f:7c:b1:8f:91:95:e0:31:d3:d4:fd:09:
                    11:9b:19:3d:7b:79:84:35:16:6a:32:35:35:08:e4:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2A:AA:69:FA:77:4C:51:91:DA:0F:78:FB:71:BA:A1:80:37:B6:20
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS54170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.25.0/24
                  45.54.49.0/24
                IPv6:
                  2607:f740:e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:aa:4e:95:b2:21:a8:cb:39:48:73:88:24:fe:68:98:da:d3:
         40:fa:2a:13:2a:3d:a5:22:6f:8f:83:9e:87:30:04:ec:73:2c:
         f4:7e:63:22:d5:2b:67:5b:48:11:be:78:ed:47:ba:ff:98:9c:
         5a:12:73:74:4b:d6:7b:e1:61:9d:bb:aa:cc:b6:3f:7b:aa:99:
         c1:49:4e:96:4a:e4:c8:55:cd:16:52:ce:7e:91:de:be:88:0c:
         87:c5:2f:58:d3:b6:d4:14:2b:50:8a:97:d6:5f:38:b4:f0:60:
         ad:fd:41:0a:0b:0d:6a:93:86:ad:19:f4:02:ad:73:a2:34:0e:
         2b:d0:39:98:94:99:ac:14:19:2c:1c:dd:b7:1e:e0:70:11:0d:
         4c:5c:d8:cf:27:df:3c:e9:d4:2b:e3:03:64:e7:62:e4:b8:3c:
         30:65:23:18:43:c8:91:ad:89:d4:9d:0a:f1:b7:7d:b4:ed:81:
         3f:bd:07:16:7a:a0:f4:24:1b:fc:38:08:8a:77:7a:73:ce:93:
         c7:ca:42:5b:01:8a:af:b3:64:23:b6:92:82:87:a7:5a:fb:1d:
         15:b0:48:0b:b9:05:72:70:30:fd:02:1d:c4:e2:26:36:6e:be:
         e9:f6:10:5e:c9:55:d2:b4:8f:b7:5f:50:6c:22:02:ee:99:30:
         42:de:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:36:03 2026 by rpki-client