Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS54004.roa
File:                     AS54004.roa (raw, json)
Hash identifier:          75VVaGnlRglFPVfIUQPdbbeeXvU3UwlZPFR7jUiE2us=
Subject key identifier:   48:65:01:AD:0D:B4:FD:73:82:AF:02:A1:E9:4C:3C:5A:54:E3:33:05
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1BD0C9DFAE3F5D4A209C0509F79EE27BC81C33DF
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS54004.roa
Signing time:             Thu 19 Jun 2025 09:39:36 +0000
ROA not before:           Thu 19 Jun 2025 09:34:36 +0000
ROA not after:            Thu 18 Jun 2026 09:39:36 +0000
asID:                     54004
IP address blocks:        40.183.64.0/20 maxlen: 24
                          40.183.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d0:c9:df:ae:3f:5d:4a:20:9c:05:09:f7:9e:e2:7b:c8:1c:33:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 19 09:34:36 2025 GMT
            Not After : Jun 18 09:39:36 2026 GMT
        Subject: CN=486501AD0DB4FD7382AF02A1E94C3C5A54E33305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:82:4f:b0:cd:92:f7:d1:f7:77:ca:8d:13:
                    3a:ab:f4:82:99:1e:a9:47:c9:8a:48:78:46:93:6c:
                    76:96:b9:b4:5f:a9:9c:02:84:b1:c3:05:fa:14:d3:
                    ba:d2:b5:44:ca:78:13:e8:13:a7:b6:b0:71:f9:c7:
                    60:45:be:6c:7c:54:75:00:5f:20:ed:6a:aa:05:26:
                    1f:66:85:86:07:30:c8:a6:96:5f:17:e0:74:98:a6:
                    54:08:81:54:59:8b:32:76:24:b8:25:2c:31:6d:8c:
                    be:5b:e7:8f:d3:1c:33:b9:b1:34:d0:b9:14:4f:3f:
                    90:c9:c8:e6:c6:c7:58:90:8c:c6:89:46:ea:6f:74:
                    ea:d1:68:ab:a7:01:0a:f7:fc:3b:96:ae:ad:ec:b6:
                    a4:4e:16:a6:29:ec:9d:8c:da:1b:7d:97:54:c2:ef:
                    33:2d:d7:ab:5b:93:27:8d:30:ef:0a:ae:37:73:ad:
                    a2:b0:88:38:71:9a:cc:21:b5:e7:48:66:83:8d:36:
                    59:fb:5c:a5:b9:a9:db:ac:d4:6d:c9:41:2c:5b:ce:
                    65:4c:52:39:45:69:17:ee:d3:f5:9c:b3:e4:f7:e2:
                    60:08:54:f7:b1:90:55:36:85:b5:79:ab:61:1b:70:
                    85:d3:4c:dc:93:df:11:89:5d:a6:73:fe:fc:4d:6f:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:65:01:AD:0D:B4:FD:73:82:AF:02:A1:E9:4C:3C:5A:54:E3:33:05
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS54004.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.64.0/20
                  40.183.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:5f:6f:9e:1b:d6:9b:24:39:0b:63:dc:cd:3d:cf:87:ea:
         71:fb:86:48:95:d6:30:78:de:f5:78:27:b1:c0:b1:8d:2e:38:
         1b:b8:09:b2:f0:a9:30:c4:6f:d8:64:90:69:d1:e4:42:c6:ea:
         e2:55:76:a0:2e:fa:0d:07:07:9e:3e:a5:77:9f:74:34:66:5c:
         63:09:a1:d5:78:1e:a5:ec:10:83:4c:ad:d7:5c:51:3b:b1:eb:
         4a:86:0b:bd:6c:e0:21:bf:c5:51:40:83:6f:37:82:b8:7e:e4:
         61:bd:81:d2:2b:be:43:6d:93:ae:df:1e:b8:ce:78:3f:c6:2a:
         48:8a:60:a9:46:46:7f:86:a6:08:8e:ce:d1:2b:88:76:32:71:
         19:3b:a4:79:58:3a:cc:c1:40:fd:c8:04:f7:3f:27:81:9b:e8:
         31:3c:eb:ad:8a:e9:82:d3:28:de:9c:fc:68:5d:b8:42:11:f0:
         b1:64:4b:c4:a4:ef:35:99:ba:1a:e0:fe:aa:c7:7d:26:c6:24:
         ff:63:8f:ef:8f:d8:65:fe:b8:9f:c7:4d:fe:15:11:b6:1e:b4:
         03:1b:96:ba:e4:6f:9b:02:f3:05:dc:1b:08:13:2c:53:ed:c2:
         27:9d:b2:a0:84:a7:8c:bd:dc:a9:86:9f:a2:fb:73:43:2e:4f:
         78:e6:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:48:34 2025 by rpki-client