Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd844673-d954-3219-90a2-9cdc1dd17bc6.roa
File:                     cd844673-d954-3219-90a2-9cdc1dd17bc6.roa (raw, json)
Hash identifier:          cZv9S4QDah1hAjFjzTYprxl8kQKvmdFBCnBu67MtpjI=
Subject key identifier:   00:8E:6E:8F:58:A6:46:F4:46:8C:D7:76:69:3E:4F:7B:FA:3D:6F:8B
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584A79141E236F48E44E89BE7E80
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd844673-d954-3219-90a2-9cdc1dd17bc6.roa
Signing time:             Thu 10 Jul 2025 14:34:06 +0000
ROA not before:           Thu 10 Jul 2025 14:34:06 +0000
ROA not after:            Wed 08 Oct 2025 14:34:06 +0000
asID:                     7922
IP address blocks:        52.128.192.0/22 maxlen: 24
                          52.128.204.0/22 maxlen: 24
                          52.128.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:79:14:1e:23:6f:48:e4:4e:89:be:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Jul 10 14:34:06 2025 GMT
            Not After : Oct  8 14:34:06 2025 GMT
        Subject: CN=7e417dd8-0fff-4647-9fbf-bc68001de3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:dc:11:74:82:ad:38:a7:5d:72:32:4a:9d:
                    8a:9f:65:d7:fc:25:5d:c0:6b:ff:77:d0:e7:09:0d:
                    06:0b:e2:31:1d:0a:43:57:9c:cd:3c:99:9c:05:db:
                    86:ed:e7:da:a5:4b:ff:8f:12:12:ec:46:07:c3:08:
                    27:4c:a9:df:3e:8b:a0:6d:fe:00:03:55:1c:a4:f7:
                    2d:4c:1f:25:9b:d9:db:e2:59:e9:21:dc:0c:99:4d:
                    ff:b1:e0:19:c2:ed:b1:20:1a:28:b9:73:08:96:a9:
                    9d:41:d5:9f:33:67:89:20:bd:49:e2:4f:6f:fd:c0:
                    d7:59:d8:11:bf:cb:d1:98:97:8c:f4:6b:8f:51:85:
                    2e:f1:a5:8a:10:ae:9f:e7:aa:a0:af:62:47:92:89:
                    d0:87:a9:ba:75:7e:73:ba:55:e3:2c:c4:ff:fe:53:
                    ee:cf:b2:ba:18:9c:19:8f:1c:62:f6:6b:30:a4:fb:
                    f0:8b:0f:f3:1b:d0:28:b4:ee:54:ca:11:47:99:cd:
                    81:42:cf:66:5a:b6:52:7f:81:b2:f4:ef:19:e0:b9:
                    9d:25:b8:c4:78:5d:df:19:9a:c6:4f:b8:c5:61:49:
                    bf:41:0e:f1:55:e5:c9:cc:57:af:5e:26:a5:fa:bd:
                    df:15:85:5a:fd:d7:aa:e7:b1:ab:84:f6:19:6e:23:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8E:6E:8F:58:A6:46:F4:46:8C:D7:76:69:3E:4F:7B:FA:3D:6F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd844673-d954-3219-90a2-9cdc1dd17bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.192.0/22
                  52.128.204.0/22
                  52.128.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:56:f3:a6:69:b2:4b:79:d0:57:7f:80:a0:d8:e6:80:a1:
         48:ee:65:d0:da:38:6c:0f:4d:d3:3b:bd:30:40:d3:8c:e6:a6:
         99:e1:40:07:7f:ad:db:83:81:7a:b5:72:70:d1:17:f6:15:03:
         10:db:2f:b1:cf:ce:1c:13:62:4b:f5:bd:39:30:8d:48:78:cb:
         6e:64:c8:89:3d:40:88:da:ce:df:af:1a:80:d8:1c:53:25:0c:
         e7:81:f0:ec:d6:5d:03:ec:7d:ff:95:a1:6c:97:5d:68:03:6e:
         fd:bc:9c:61:26:89:ea:89:9f:15:f5:76:f9:e2:ee:33:0a:92:
         d1:f0:cd:99:22:67:a9:76:24:70:78:c4:fa:fe:f3:25:4e:51:
         8b:7f:cc:c3:6a:85:f6:5a:63:69:50:7d:da:46:01:c8:1d:7d:
         33:bf:9a:d2:c0:ec:5e:a1:98:4e:75:e1:0b:c0:62:82:e2:39:
         0b:ad:28:a3:df:53:74:87:2f:94:0b:b7:0a:f9:c6:33:3a:c4:
         5f:74:f6:ba:f1:72:5a:eb:22:c2:b5:98:5a:44:94:23:1d:c8:
         9d:d9:15:0b:d0:28:66:d9:62:d4:94:d6:49:c5:f3:69:27:a2:
         55:14:78:72:f4:01:b5:36:b3:45:34:5b:4e:b7:af:76:96:2e:
         8d:23:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:22:43 2025 by rpki-client