Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa
File:                     35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa (raw, json)
Hash identifier:          hzjqJJYZbhH9IMIXq66Y/yelWpyX2/9vZeuaXvsjiW8=
Subject key identifier:   65:48:A3:6F:3B:21:1E:56:12:A0:20:23:16:99:A6:35:76:01:5F:0D
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F4328584F4F081946D5AFC943379F01C0
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        52.128.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:19:46:d5:af:c9:43:37:9f:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=e16448d2-e581-461d-96af-e9bcb9e26e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4e:26:3b:50:4c:72:f6:ee:88:cf:c4:fb:68:
                    cf:08:3f:ea:5a:08:16:23:15:19:89:e1:0b:45:b7:
                    b9:36:7d:92:46:24:2e:bc:2e:db:5c:11:59:fe:12:
                    3e:18:5a:29:40:23:b1:26:3b:69:02:48:6c:fc:bf:
                    4d:c5:e4:72:56:3a:94:2a:2f:68:f6:09:24:86:58:
                    9c:1f:5b:17:91:5b:28:f6:84:00:8e:04:7a:68:64:
                    65:d1:2e:76:70:27:2b:db:67:c1:16:85:ea:8f:30:
                    f8:e1:6f:ba:a1:42:a7:3e:7c:10:b3:ec:c8:70:35:
                    da:5f:79:27:13:dc:08:19:51:28:48:58:d5:54:9e:
                    f2:40:68:79:14:c5:9b:68:5d:ca:49:b6:5d:0a:99:
                    35:56:5d:f5:da:72:94:d7:33:18:02:15:51:ca:d5:
                    eb:4f:5e:21:6b:0e:64:1d:99:cb:09:5d:64:12:8c:
                    7d:38:96:57:9c:b5:56:9f:ca:2a:24:cf:97:b1:b2:
                    e3:e0:45:fc:b0:43:18:dd:f0:f6:65:0b:14:00:e9:
                    20:89:08:d5:3a:2c:13:c7:b3:2b:1b:17:ee:0a:91:
                    1a:71:a5:c1:52:ff:35:b1:0f:3e:4e:91:b4:2d:0c:
                    de:20:74:7a:a3:fe:d5:f1:7a:4d:90:3a:3b:2b:85:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:A3:6F:3B:21:1E:56:12:A0:20:23:16:99:A6:35:76:01:5F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:9c:95:8b:50:51:f0:ca:79:59:e1:99:1d:6a:e9:ac:91:
         e5:73:56:3c:27:cd:f7:a1:b0:63:31:30:0a:b4:ca:7b:6d:e8:
         21:15:dc:15:a7:6d:20:0b:b8:11:21:63:ce:52:c4:60:b8:a6:
         4b:00:c2:6a:92:06:29:b2:03:d8:6e:9e:b2:fc:e8:39:88:bb:
         4b:77:9c:0c:9f:fd:bd:1d:19:ab:50:43:6e:69:80:ac:01:15:
         3f:75:19:58:31:5e:16:94:cc:5f:dc:3f:d8:1a:86:88:af:1c:
         8c:70:43:36:63:49:56:bd:14:c6:ac:c5:d0:3b:51:78:7f:b0:
         09:1a:ab:f2:3a:fc:7a:82:81:2c:67:22:c4:ef:08:e1:6a:c3:
         b5:fb:cd:2d:17:eb:46:f8:f2:aa:c5:fd:d9:3a:f0:85:b4:87:
         25:85:a7:28:44:d1:af:12:b1:7f:62:7b:1a:e5:29:f6:10:4e:
         51:3b:0e:ce:4e:14:c8:f8:42:6a:ae:f9:47:26:96:60:85:9c:
         90:84:1e:bd:73:41:e2:bf:8f:9c:c4:aa:11:db:aa:fa:1a:75:
         85:84:b3:c2:d3:3a:f7:69:c2:b7:9b:c8:86:a5:e0:d0:8b:6b:
         87:49:cd:00:a0:3e:ad:24:c7:32:b4:bc:cd:40:b2:93:15:ff:
         a2:1b:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:31:29 2026 by rpki-client