Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
File:                     1f825b44-9c70-33dd-b03f-6d808154234c.roa (raw, json)
Hash identifier:          tGV0JnYdg+CntzxV6rSe6DzarfaH9KzjpML4TYZQFyE=
Subject key identifier:   CA:6D:24:A9:E8:FB:43:27:59:46:2A:FA:72:C8:86:DC:6E:EA:D3:2C
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584E4AEF526D0709866CE4DE5200
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     7018
IP address blocks:        52.128.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:52:6d:07:09:86:6c:e4:de:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=d5c02cb6-5cff-4e84-95a3-7a905830ad63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fa:d6:68:17:a4:52:c9:04:9e:10:82:e2:1d:
                    0c:f3:e0:36:e6:e5:4d:60:9f:2c:dd:aa:8f:dd:aa:
                    76:f3:f9:56:5d:2c:24:46:85:b7:c3:f7:64:0f:7c:
                    b2:b8:90:54:c4:15:73:07:f4:d9:d0:06:37:c4:d0:
                    91:b3:2d:d0:cf:83:9d:37:cf:42:74:ba:d0:e9:95:
                    07:91:0e:0c:97:8e:65:fe:19:a0:5e:de:28:7b:5f:
                    2a:12:11:7f:56:e0:0c:96:70:46:61:0a:35:3e:50:
                    4e:9b:ca:ce:d6:dd:70:8e:a1:3f:6a:b7:b1:24:92:
                    32:96:56:dd:24:1a:e5:16:a2:16:6c:ab:fb:e5:92:
                    bb:28:d7:4a:4f:57:31:a1:e7:2d:1a:9a:d0:24:7b:
                    5b:f8:be:b4:e5:22:4e:2b:96:8c:27:fc:3d:9c:21:
                    7b:a8:35:2b:bd:79:45:64:1f:aa:23:43:fc:76:c0:
                    07:fc:f6:2e:81:d2:6f:e7:4a:d9:6e:8b:b4:4b:f6:
                    ed:30:e6:12:9c:d9:64:81:50:43:8e:f3:b5:89:dc:
                    b9:c6:d9:80:68:a3:79:d1:7f:d4:29:1c:e6:64:12:
                    e2:0c:71:84:20:b5:d9:9f:10:c2:71:cc:33:5e:a4:
                    80:50:ed:f0:c2:f1:45:59:b5:37:91:1d:68:9f:9e:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6D:24:A9:E8:FB:43:27:59:46:2A:FA:72:C8:86:DC:6E:EA:D3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:aa:bc:69:4c:51:c9:cd:8e:30:8d:31:9d:78:9e:97:a3:
         29:c4:a4:57:98:7d:8d:dd:a9:d9:e9:72:ea:de:5a:7d:04:4d:
         3d:31:a4:6b:e5:bf:ea:12:5d:93:47:95:bb:7d:1f:8d:fa:90:
         d9:01:88:b8:6e:4a:aa:77:4e:dc:05:76:44:ff:b9:bf:6e:12:
         07:78:f3:98:01:73:1c:80:16:6a:6d:7c:3d:d5:a1:4f:77:a2:
         30:b2:c9:90:91:90:4b:0e:16:21:24:77:96:a9:56:4a:2c:0c:
         cf:09:f0:e8:f9:0a:d1:ff:d1:75:3f:96:33:6f:7d:f4:42:44:
         53:78:0f:7f:ee:4b:f8:cb:87:1a:30:67:dd:c6:60:4a:b5:58:
         67:55:8b:80:0b:ef:4c:ad:4d:24:b3:14:20:81:3f:66:7e:30:
         98:f2:16:4f:1b:d4:d0:31:29:66:5c:a7:68:e7:b0:4a:52:74:
         7f:84:a9:62:df:6e:34:a3:97:f3:b0:64:3d:7d:89:05:6b:85:
         36:f1:70:5b:69:b4:6e:19:90:c7:c1:ea:ed:0b:f5:7c:fa:fa:
         ed:f2:a5:7f:5e:3c:45:9a:bd:70:22:a5:dc:cc:a9:af:f8:94:
         8f:dd:dc:ed:7c:61:4c:7f:09:41:70:df:a9:44:14:90:5f:1f:
         75:2d:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:20:47 2026 by rpki-client