Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c152ac0f-c251-327c-b4aa-05b430322fb0.roa
File:                     c152ac0f-c251-327c-b4aa-05b430322fb0.roa (raw, json)
Hash identifier:          q1G5V5TT5RNNoTbpw3K5TJzxLkJjZbOygsh/nkUE9Vg=
Subject key identifier:   5D:90:9F:37:3E:1C:B3:CA:70:91:78:B9:3A:B2:B3:2D:1F:14:AF:A7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DA81585F253086821AF43CE00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c152ac0f-c251-327c-b4aa-05b430322fb0.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     45102
IP address blocks:        206.54.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:85:f2:53:08:68:21:af:43:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=0bdc9790-9862-494d-bbfe-a4ed390438f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:91:02:8e:d1:dd:26:d8:18:2a:97:13:86:
                    43:6e:07:7f:fa:36:9d:5d:33:d2:5c:1a:78:21:87:
                    94:fa:a1:54:70:cd:55:cb:fc:7d:b0:60:09:6d:cd:
                    51:bc:62:cc:53:13:08:6d:be:d0:a1:c5:70:48:92:
                    f9:af:07:78:dc:58:fc:32:37:cf:f7:5b:39:78:33:
                    4e:b3:0f:5e:90:0f:f4:78:dd:f0:58:70:5b:fd:f3:
                    70:d3:e0:0e:ac:fa:74:08:a4:44:45:b0:10:a3:e4:
                    e9:08:c4:38:e0:53:e3:a5:64:7b:2c:b4:d3:af:27:
                    c0:93:f4:92:b6:54:05:fa:7d:e0:b5:41:dc:2c:d3:
                    16:16:a0:57:19:cf:4d:00:5f:50:00:7f:87:63:c1:
                    6a:3b:6a:c0:76:bf:12:de:e8:c3:b1:30:79:be:74:
                    88:28:1d:38:35:87:d7:d6:0d:42:56:af:bf:24:0d:
                    36:ea:2b:45:f1:a2:6f:58:f1:79:a5:23:96:c4:c5:
                    c9:c2:04:b4:9c:b4:d9:cf:a6:f9:41:65:48:5a:c4:
                    31:a2:96:b9:b5:d2:0b:37:6c:1f:da:3e:1d:59:46:
                    9b:dc:28:84:4a:0d:0e:d8:f3:fc:1c:0b:e4:91:94:
                    64:4a:da:92:1e:1d:f6:30:43:9a:78:a3:45:e2:37:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:9F:37:3E:1C:B3:CA:70:91:78:B9:3A:B2:B3:2D:1F:14:AF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c152ac0f-c251-327c-b4aa-05b430322fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:d3:49:3d:6d:1b:7c:fe:27:02:38:b8:49:66:dd:38:75:
         2d:75:8d:55:d1:a1:2f:17:e5:b6:94:f0:41:fb:7c:ba:a1:8a:
         bd:66:a6:52:58:9e:ef:b6:3b:be:df:67:83:1f:1c:8f:24:a5:
         ba:b7:84:c9:9d:3a:63:03:f4:9f:08:ea:27:67:6d:2e:d4:f7:
         55:ba:e2:30:0e:8e:b6:cd:6e:df:7f:d9:a4:f9:f5:0e:bf:f3:
         e7:69:ee:7a:1f:1a:21:20:b0:9f:e0:8a:08:05:8f:98:3c:60:
         5b:bf:bd:36:53:d0:5a:b9:ca:7e:70:4f:9c:a3:98:d0:67:d4:
         38:93:13:9a:76:c8:c7:db:42:3d:ca:67:c1:13:7c:84:47:83:
         01:d0:d0:31:d3:e4:59:c6:5e:79:6e:70:95:99:75:9d:da:7a:
         70:27:d7:5e:d9:ee:be:df:6c:33:66:77:a7:ef:5a:f7:98:af:
         32:6b:70:78:53:4b:aa:6f:49:6e:8b:6b:60:b4:8a:46:1c:7c:
         ab:77:4a:5c:a6:51:4a:69:14:a1:02:ad:92:b7:4d:68:0b:20:
         70:9d:ea:94:c1:c3:07:20:fc:c7:d9:14:06:77:52:ac:cf:0b:
         e5:82:b1:66:de:46:80:6d:14:ff:10:5a:1c:d2:81:bc:d0:b5:
         ce:04:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:38 2026 by rpki-client