Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa
File:                     54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa (raw, json)
Hash identifier:          VGpQFQ+cYs35aEJ1CHiRBNqKYRcg8ec777ooDjGA1MY=
Subject key identifier:   AC:86:6B:B4:6F:4E:4E:6B:39:8A:CA:2C:09:16:8C:A6:47:CD:8B:C4
Certificate issuer:       /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial:       010D0C9F4328584E842A37CBEBC0B7BFF8FF6580
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     10490
IP address blocks:        192.245.221.0/24 maxlen: 24
                          192.245.222.0/23 maxlen: 24
                          192.245.224.0/24 maxlen: 24
                          199.33.130.0/23 maxlen: 24
                          199.33.132.0/23 maxlen: 24
                          199.33.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:37:cb:eb:c0:b7:bf:f8:ff:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=d27d1f24-066e-4b14-9f99-789e345589fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:3d:54:85:92:1b:f1:cd:28:cc:ee:f8:77:
                    21:57:49:f4:b5:09:63:74:72:8b:1b:72:18:4a:e2:
                    c3:95:52:6e:c0:20:ef:f3:a5:bc:a4:b1:2a:2d:fa:
                    f4:25:d9:01:4c:9f:96:05:ca:f9:5b:5c:f9:ef:84:
                    ec:2e:b2:3d:08:41:73:d3:df:b9:77:4e:64:9b:4b:
                    4a:cd:bb:19:0a:47:90:ef:17:87:89:f7:7c:59:9a:
                    7d:06:10:73:46:fa:51:ab:ca:cb:d0:8c:60:4a:76:
                    46:c3:df:4d:58:6b:5c:4d:d9:cc:d6:00:c7:f1:36:
                    ca:5b:e4:06:73:3f:d4:c6:a1:33:e9:af:58:df:e6:
                    4b:4a:2a:79:1b:5b:1b:30:70:a8:c3:49:98:9b:bd:
                    ca:1b:da:32:b7:99:43:9d:df:9b:0e:c7:5e:f0:61:
                    d1:f9:55:ce:fb:e0:35:08:c5:03:bb:67:4d:f5:6b:
                    31:4a:74:10:84:7b:fd:f2:18:81:2f:d8:30:da:d1:
                    9e:7d:6c:bb:03:a2:d4:09:70:b7:da:b6:3d:83:b6:
                    2c:9b:a5:1d:23:39:de:e1:74:e8:1a:b0:e5:70:1d:
                    3c:b7:fc:96:b1:ec:9d:7c:13:04:06:b1:96:5b:0f:
                    2e:26:c0:d2:fd:64:88:4d:04:a1:5e:68:0a:b1:93:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:86:6B:B4:6F:4E:4E:6B:39:8A:CA:2C:09:16:8C:A6:47:CD:8B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.221.0-192.245.224.255
                  199.33.130.0-199.33.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:b4:c0:67:2f:c1:b2:84:f6:54:29:97:77:e5:2e:7c:be:
         12:e2:34:b4:87:7a:69:32:92:6b:ca:f4:dd:87:9c:5a:23:83:
         57:3c:1c:38:20:20:f4:51:13:19:c8:a9:57:11:26:68:9f:a1:
         6c:0f:58:41:34:06:bd:9a:21:ff:98:8b:61:de:3c:17:4b:4e:
         23:dd:f1:00:a8:dd:c4:8f:dc:28:0d:20:d1:d9:b5:ab:d8:e2:
         00:ec:14:ba:8b:b9:6a:bb:15:a4:20:25:8b:cd:cf:34:97:52:
         d3:a3:9e:65:ca:11:6d:30:04:9e:5c:5e:96:92:a3:86:da:7b:
         cd:5f:13:9e:4d:e0:e5:2e:a2:44:9e:11:18:54:59:ce:e3:47:
         18:7c:55:bd:65:33:b8:bb:1f:53:ac:ca:3e:df:58:2b:40:84:
         46:7c:e2:ce:12:ad:4a:74:c8:1c:e2:c0:d0:b4:65:2b:31:2b:
         a7:13:21:78:2b:df:f1:75:4b:cc:09:48:31:ef:80:32:bf:8b:
         7a:ca:08:bd:67:0c:ba:ca:7a:85:16:22:e2:71:ba:33:d9:fb:
         90:2e:51:2d:3b:6c:52:ce:29:2a:54:d8:4e:0f:00:b8:7a:79:
         6e:67:cc:e1:3c:4c:da:0e:8c:61:6c:22:d3:76:b4:17:ac:2c:
         b0:fd:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:53 2026 by rpki-client