Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa
File:                     AS54339.roa (raw, json)
Hash identifier:          cECO37zjxu7M2UEkaX40VNhIwc74voIO95b0q/mR3t0=
Subject key identifier:   95:39:57:EF:33:64:79:69:E2:1F:C1:4C:E9:51:FD:68:1E:70:8D:A3
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       36504A640D95304AAEA2D9F286217A480ED4563F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa
Signing time:             Mon 06 Jul 2026 18:14:01 +0000
ROA not before:           Mon 06 Jul 2026 18:09:01 +0000
ROA not after:            Mon 05 Jul 2027 18:14:01 +0000
asID:                     54339
IP address blocks:        67.210.102.0/24 maxlen: 24
                          192.228.113.0/24 maxlen: 24
                          192.228.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:50:4a:64:0d:95:30:4a:ae:a2:d9:f2:86:21:7a:48:0e:d4:56:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  6 18:09:01 2026 GMT
            Not After : Jul  5 18:14:01 2027 GMT
        Subject: CN=953957EF33647969E21FC14CE951FD681E708DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:d5:0e:01:b5:e8:bc:b4:af:ca:bd:b8:bf:
                    27:aa:66:c4:16:c8:69:31:81:83:0b:de:1e:db:34:
                    98:c3:76:29:51:82:70:bc:14:f3:d3:96:a1:fb:b6:
                    a0:68:15:f6:25:b8:41:6e:c6:5a:5d:98:b8:7b:7e:
                    71:43:e8:c4:ab:61:54:bd:f6:98:53:26:33:fe:55:
                    48:e6:e8:6e:ea:e6:bd:59:93:a1:07:c9:fa:5e:af:
                    91:60:b2:a7:2a:9c:84:a8:d3:79:89:28:a3:06:3c:
                    68:69:5b:8f:ed:39:e7:18:94:e6:62:2c:a8:97:d2:
                    54:ca:ad:e7:17:d6:29:d0:88:95:b5:65:66:09:0e:
                    42:47:a0:fa:5c:6a:d2:b4:41:b8:db:35:6b:4d:b6:
                    f3:07:a1:cf:be:a6:c7:e9:02:3d:e1:5c:5c:0d:09:
                    5a:fa:26:d8:2c:7f:96:d4:87:a9:7d:93:18:4a:71:
                    47:43:bc:c5:fe:c1:c7:0c:54:7c:3b:e3:1b:13:6a:
                    19:0a:2d:37:5c:8e:02:8d:72:5a:79:82:fe:63:a8:
                    52:21:16:71:9f:b6:e4:de:67:ee:ca:ce:e6:69:fc:
                    05:91:c2:83:ea:87:1e:a2:1b:40:87:cb:d8:fe:80:
                    83:c7:56:50:1a:d4:0e:e6:49:e4:ea:69:4f:3c:90:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:39:57:EF:33:64:79:69:E2:1F:C1:4C:E9:51:FD:68:1E:70:8D:A3
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS54339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.102.0/24
                  192.228.113.0/24
                  192.228.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:8c:4e:83:9c:c5:18:76:53:9e:cd:cd:67:61:16:c8:73:38:
         0c:49:c4:fb:28:ff:79:72:d9:9e:ec:c5:0d:06:e7:e1:62:91:
         af:54:fb:5c:9a:8c:57:60:25:75:1f:7f:76:26:49:ef:9a:9a:
         03:e5:de:2d:d6:cf:79:88:43:62:1c:08:6f:27:b8:05:64:f4:
         94:b9:5d:c9:2f:fc:4b:9b:15:fc:af:e1:b4:ef:e5:58:c4:3a:
         2e:74:dd:e9:23:6b:a7:bd:9c:ca:e7:c6:2b:1c:dc:50:cc:8a:
         38:02:43:58:54:ff:3d:f6:d3:b2:6b:21:06:25:eb:9a:a2:f5:
         56:b4:25:c2:ec:c6:b2:22:d9:57:c2:21:0b:dd:10:d4:5e:03:
         35:79:67:18:39:3b:cb:64:ae:73:5d:9a:95:6c:82:48:30:39:
         d7:f0:ab:4b:a6:eb:83:51:7e:58:af:3c:f1:4e:46:9e:e8:9c:
         9a:25:7e:e3:79:e9:95:46:94:cd:55:fe:31:a3:33:8d:0b:34:
         f7:76:ed:35:bc:c1:b6:48:cf:96:3b:62:11:eb:c8:1b:40:f8:
         c2:c0:64:54:8c:fe:22:31:02:04:62:0f:e1:5e:a8:b1:9d:c6:
         f2:41:f7:22:29:34:ef:db:22:34:02:6d:9f:f5:fb:eb:32:05:
         f5:d0:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:16:33 2026 by rpki-client