Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa
File:                     4ac9491f-6036-37fe-816b-d57cc66a212f.roa (raw, json)
Hash identifier:          0rR4HJpQhHrdDK7upd3wuWjMFVU0TX6z9Lz/muFYOEQ=
Subject key identifier:   3A:57:61:A7:48:33:98:F4:8D:75:1C:8D:64:3D:3C:09:4F:94:65:86
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584E86F5061583825EA4FCA0BC80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     8069
IP address blocks:        52.122.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:06:15:83:82:5e:a4:fc:a0:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=73021140-7f51-4ab7-9284-62e9ad0baf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:20:f4:ac:e9:a6:fd:d7:20:e4:3f:0a:20:
                    19:db:3d:0c:e5:2d:4f:1b:8e:cd:81:6c:b8:52:d7:
                    89:7d:ac:a3:8c:08:f6:44:7d:b7:95:d5:56:c9:86:
                    22:02:98:0b:bb:b0:72:a1:12:4e:8a:88:16:86:98:
                    4e:bf:bf:92:4d:b5:d8:fb:14:1b:14:cc:ed:07:f5:
                    a5:7a:f9:f3:70:c0:c4:f2:01:43:76:de:48:9c:04:
                    a3:16:0b:fa:a5:78:ab:7d:96:1c:b5:27:6b:11:ad:
                    35:51:c6:e8:42:08:fa:e6:99:45:62:54:f6:60:a8:
                    1a:e2:11:67:e4:fb:74:e3:09:6e:7b:ec:63:ec:1c:
                    ce:4e:a1:14:f4:9c:b0:fb:56:27:c8:50:75:97:0d:
                    02:77:d9:36:32:d1:d0:65:0a:82:14:05:5b:df:de:
                    ea:b4:13:28:d1:a6:fb:a7:06:9e:c5:c2:4d:d9:f2:
                    4a:98:21:54:53:7f:23:ef:e4:7d:5b:06:fa:60:0f:
                    f9:ca:c2:17:07:9a:4c:04:17:4a:a3:f3:98:26:b5:
                    fa:15:d9:c1:a2:0c:7b:24:01:6f:9e:4a:4a:34:c7:
                    c5:2e:79:4c:78:8d:2c:41:60:39:d9:4d:cc:a3:35:
                    28:83:6d:62:d7:69:fe:38:d2:0b:b7:fb:20:5b:4f:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:57:61:A7:48:33:98:F4:8D:75:1C:8D:64:3D:3C:09:4F:94:65:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:e3:6f:9e:65:50:19:e7:43:3d:0a:1c:ae:04:f6:3d:67:
         b2:ac:fb:f9:1c:14:71:b3:ec:07:f5:74:06:49:11:fd:80:76:
         19:2b:dd:64:d7:c6:6e:2d:19:81:55:3e:1f:46:c5:62:2d:c8:
         49:74:66:df:2e:24:43:74:96:34:83:3f:61:2d:5b:6b:77:e8:
         4e:9f:a2:d5:a0:68:f6:ab:4e:44:ea:98:35:f0:62:30:d0:80:
         98:e5:18:ce:27:d4:9f:c1:07:09:ef:9d:36:5a:07:86:31:f4:
         6e:46:a6:c9:35:67:fe:93:56:eb:c2:5f:6d:ec:35:fa:20:d0:
         97:5e:60:9f:90:ce:9e:13:c1:8a:cb:06:fe:70:bb:5c:af:16:
         3d:33:a8:96:31:18:5e:25:75:bf:a4:95:4f:8f:89:f2:c9:cf:
         38:0b:c6:6f:32:09:e2:a4:a1:20:1b:f2:96:35:a4:57:b6:86:
         49:db:a7:09:96:01:42:70:b8:96:6c:ab:54:9b:9b:11:67:43:
         69:9b:81:12:10:91:9d:69:9f:4b:7c:01:30:6c:4d:0d:37:76:
         2d:dc:d5:dc:74:f3:42:f6:79:52:9a:ae:4e:da:e5:08:3c:c0:
         e5:00:c3:c2:7d:e8:3b:37:ee:10:82:c7:57:25:4f:77:82:ac:
         5f:fb:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:08:16 2026 by rpki-client