Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa
File:                     dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa (raw, json)
Hash identifier:          MaUwu3NklXusx+dTsOsWQOgq6+C6zf+aZOKTNZ/oRMA=
Subject key identifier:   12:26:73:2B:AD:BE:A2:4F:CF:9E:B6:02:98:DE:BE:25:09:23:67:1B
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F4328584E31CF15D458FCE871E52EAB80
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        52.129.152.0/21 maxlen: 24
                          52.129.160.0/19 maxlen: 24
                          52.129.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:15:d4:58:fc:e8:71:e5:2e:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=9a65e36c-28d2-4d57-8ce1-96ea6fd7285e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9d:03:6f:c1:67:c9:1d:0c:3c:27:fc:26:14:
                    de:54:00:4e:e8:80:bb:e7:d6:5a:f9:69:9f:4b:04:
                    2a:2a:bb:29:b9:31:6d:25:f2:57:38:1b:ab:aa:72:
                    fa:a6:ee:5f:e9:52:d1:4d:78:17:65:e3:39:9b:21:
                    de:10:54:09:82:15:72:e6:f1:7b:fe:bd:a1:34:3e:
                    84:6b:3e:0e:24:9e:2c:6f:65:eb:e8:7c:7f:16:0c:
                    3e:54:ae:b4:17:dc:6c:58:c5:c0:53:7a:f6:06:47:
                    b6:82:5d:44:cc:1a:be:44:fb:83:33:f2:d0:76:61:
                    0b:7a:64:48:f5:0e:59:b1:93:9f:cb:af:ab:26:c3:
                    ae:36:28:0d:b7:1a:b8:e8:ac:42:0b:b6:80:e7:97:
                    b7:80:62:a8:2f:f1:69:1d:dd:9b:29:cb:67:db:ef:
                    83:b1:2f:2e:32:45:65:1e:f9:88:ce:7b:56:b1:2e:
                    8b:86:ad:8d:fc:12:91:59:60:69:c6:5d:a6:a1:c8:
                    91:68:13:0a:ec:19:2c:fb:41:45:b9:dd:c7:61:67:
                    ad:8e:cb:36:ff:48:0a:f7:9c:e5:c4:30:e2:57:00:
                    ba:da:35:f6:7b:22:ee:38:bd:59:94:d8:7b:5b:d6:
                    12:fb:e3:3f:8e:cb:2a:fa:16:0f:46:e0:f2:ad:84:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:73:2B:AD:BE:A2:4F:CF:9E:B6:02:98:DE:BE:25:09:23:67:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.152.0-52.129.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:37:e7:d3:ab:36:6f:45:00:67:c4:82:57:88:e4:9c:5d:67:
         4c:55:ff:81:be:8a:2e:75:3e:ef:28:fb:3e:e4:3c:d0:71:64:
         d3:5d:77:e2:83:d5:de:c5:6c:89:44:07:fd:f5:84:1f:7c:60:
         a1:f7:86:7b:80:87:43:91:d5:88:af:52:80:8b:80:96:50:c0:
         f8:90:2a:27:b2:34:76:78:95:56:be:2a:24:bc:cb:f7:11:d5:
         26:22:35:be:82:12:7b:c4:f8:f2:39:5c:d9:94:20:3a:63:50:
         31:f2:09:f4:5c:da:50:f9:a7:a2:1b:e6:5a:0c:0c:c3:e5:e4:
         90:b3:52:e7:a8:81:eb:5a:32:7c:37:1e:37:34:a6:03:d3:9a:
         fc:5d:02:5b:16:ad:da:42:c9:19:ea:12:26:1a:4b:d4:b2:ec:
         e5:4a:8d:0e:62:2a:f7:7e:8d:23:2e:cb:cd:e8:13:f6:a1:52:
         11:80:88:65:39:f8:db:9c:7c:e0:4e:64:a0:d8:89:bb:56:42:
         95:76:ef:3a:47:01:e5:07:97:56:bb:4b:a3:71:9b:d9:30:a7:
         72:a8:01:41:9a:b8:3f:26:2b:00:ce:47:ff:15:48:48:a8:0e:
         a1:16:b9:1d:47:45:98:4a:18:14:8a:5d:71:0b:ab:04:42:9c:
         8f:73:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:34:53 2026 by rpki-client