Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa
File:                     eadf60c7-3f3f-3252-bab0-1034ec94352d.roa (raw, json)
Hash identifier:          3nJqKEEny0NBCeoRp0E81PHpha6d8BD9MrStd6S5kSk=
Subject key identifier:   2E:05:EF:95:7A:75:B2:9D:8F:7C:55:A8:DA:F1:95:D4:63:59:EE:42
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F4328584F698D76FC7936D6A5C04FCD80
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        52.128.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:76:fc:79:36:d6:a5:c0:4f:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=57a33931-59e4-4929-93c8-b2e70651aacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:a6:49:b7:c8:3e:fb:57:5a:62:7e:7e:0b:
                    e9:9e:34:9a:0b:04:44:f0:ff:fb:9c:5c:ab:2c:79:
                    e8:51:9c:e0:28:10:9e:33:a1:aa:72:c1:c2:ea:7d:
                    7a:75:e7:b1:45:97:fe:a1:fb:ab:e9:56:cb:36:2d:
                    38:e8:d1:f0:1a:35:5a:07:2d:df:f2:2d:ad:cd:69:
                    e0:dc:66:e8:68:e4:d9:37:5e:85:34:4a:e9:40:04:
                    74:4b:0a:39:9c:c1:4c:8b:4c:70:fe:f4:94:8b:eb:
                    fb:f8:42:8e:b4:d2:f9:57:7f:e2:1e:00:a4:fa:a9:
                    c2:47:a2:0b:ee:04:f2:cd:97:c0:6a:7c:c9:9a:11:
                    59:57:31:d8:00:7c:cb:fb:a4:9a:34:c9:cb:7e:c6:
                    e5:45:6c:21:66:25:39:93:7a:53:d4:8b:02:47:64:
                    25:b9:c3:96:45:6f:12:65:5c:d0:52:82:a1:8d:6d:
                    cf:6e:e1:30:c7:cf:7c:3e:42:86:93:91:e6:a4:7d:
                    01:d0:74:55:15:30:8a:8f:81:a1:32:b2:f2:24:c3:
                    33:2c:9d:26:64:a9:1f:ea:73:5a:e5:de:bd:77:ca:
                    bc:76:34:a2:51:b6:92:6f:53:3f:cd:2d:94:8f:75:
                    3e:83:90:92:48:d9:70:c6:27:fd:fd:93:b0:3e:45:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:05:EF:95:7A:75:B2:9D:8F:7C:55:A8:DA:F1:95:D4:63:59:EE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:65:a2:4b:87:13:93:47:e6:2f:53:c3:f2:83:1b:45:62:
         12:c0:f5:e8:05:6c:13:d6:92:9d:d8:fb:77:d0:0c:d4:c6:7f:
         04:6a:f5:b8:00:22:6f:4a:b4:ec:d0:74:2b:9e:17:a3:5c:cc:
         39:6f:9e:74:ee:d1:51:8f:bd:e4:d1:fe:38:29:64:b4:f1:6f:
         57:bf:30:78:9d:f3:2a:94:91:73:11:da:28:26:4e:e1:68:c5:
         97:26:3b:19:7c:27:10:22:a0:76:2b:3e:ac:e4:78:ae:e8:f2:
         4f:80:c5:b3:bc:1c:bb:a3:f4:98:25:5b:35:1c:fa:fe:93:f1:
         c1:44:65:e2:14:3e:93:fd:07:55:b7:89:c0:99:19:22:52:f4:
         9a:19:53:1e:17:b2:bb:5a:1a:3c:7a:45:5a:ba:de:b1:fe:a1:
         72:1a:c4:56:68:cc:27:e4:e7:2b:9f:56:a0:26:bb:bd:23:a0:
         2a:9b:8b:ab:45:ea:aa:62:14:0c:3f:88:cd:1a:17:3d:62:ae:
         4f:18:54:3d:ad:d1:19:24:e5:3c:59:33:58:2d:b8:dd:c8:18:
         c1:e1:f3:ee:45:eb:5b:c2:9c:87:a9:77:27:c0:06:ce:96:46:
         fd:71:3a:5f:e6:c3:08:58:bb:b0:81:0f:38:17:c4:48:f0:3b:
         58:a6:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:36:52 2026 by rpki-client