Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/202e12a2-f84b-387e-b794-3840c06c90c5.roa
File:                     202e12a2-f84b-387e-b794-3840c06c90c5.roa (raw, json)
Hash identifier:          d2SmMNKM/gEZeapz8cGxtuhxsnEppWpj6DLZXFyeKwk=
Subject key identifier:   F6:0F:DF:3A:54:59:BF:F2:60:F5:70:5C:F8:FC:1A:28:6F:3C:5E:55
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584E86F507E584BD56AF7A5C4340
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/202e12a2-f84b-387e-b794-3840c06c90c5.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     33659
IP address blocks:        52.128.192.0/22 maxlen: 24
                          52.128.204.0/22 maxlen: 24
                          52.128.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:07:e5:84:bd:56:af:7a:5c:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=58e9b69e-3a01-4ed7-808e-1d5ad7318ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:96:5b:d0:cb:d2:5f:1b:31:0c:ef:f6:be:
                    86:30:24:2a:e8:f4:f0:0f:d0:e1:2f:1d:da:95:c0:
                    fa:52:d0:53:c3:52:78:49:62:c6:86:06:68:c5:dd:
                    fd:7b:22:93:a6:53:34:53:d5:c7:bd:5f:1b:38:ca:
                    dd:b5:0f:2f:fe:76:f6:78:59:a4:3f:c0:87:9b:d1:
                    c9:3c:22:5d:76:0a:6f:b5:21:b2:4f:d5:ba:88:d7:
                    3c:46:95:85:9b:c6:bd:9c:08:8d:0f:f1:5c:ee:01:
                    85:d1:13:27:7d:28:7a:44:45:b9:17:3c:57:18:63:
                    d1:c0:0e:c2:f5:cb:75:1e:00:44:f6:4c:4e:db:fd:
                    25:a8:c0:61:49:18:58:0c:2f:da:98:57:db:da:f4:
                    0e:56:f6:dd:5f:7a:36:0f:ed:a5:41:2a:f6:a3:f0:
                    99:c1:c8:a9:1a:0b:40:0c:90:3a:8e:4e:c8:f8:11:
                    aa:09:d1:04:1d:42:0b:46:38:11:1e:db:d9:e7:70:
                    94:f5:1a:39:f6:0b:78:8f:53:12:f4:09:f0:77:5a:
                    30:3b:da:50:f3:58:bd:11:50:2f:0c:b7:d1:2c:fe:
                    ff:83:e7:a5:a6:aa:64:b7:38:4a:ea:cd:cb:11:d2:
                    cb:38:78:b0:11:7d:54:60:86:66:c5:3d:1d:af:93:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:DF:3A:54:59:BF:F2:60:F5:70:5C:F8:FC:1A:28:6F:3C:5E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/202e12a2-f84b-387e-b794-3840c06c90c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.192.0/22
                  52.128.204.0/22
                  52.128.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:be:26:0a:bb:7a:26:25:6c:e3:97:7a:30:2c:32:da:6c:c4:
         ef:e3:a6:67:61:6c:cf:eb:13:09:63:6b:2d:23:b5:8a:5a:10:
         b4:bd:d7:ef:64:34:d7:71:6c:28:a6:bd:36:92:cc:1d:23:10:
         5f:82:4d:7c:44:c3:a5:61:25:81:c2:8c:a2:72:a4:c0:2a:2b:
         5c:d8:f7:16:8c:01:52:a4:65:99:70:63:fb:63:7e:c1:14:e0:
         a9:ba:88:05:05:80:aa:3d:2f:4b:0e:72:31:74:4a:c0:dd:ed:
         52:23:5a:e7:52:67:ee:80:83:1f:b7:1e:af:8e:c6:2e:4a:c6:
         5c:8f:da:bc:38:7b:16:bc:7a:9b:65:35:d8:6d:e5:37:0e:7e:
         cb:ee:2c:4c:cd:90:1d:c2:aa:cb:b9:f3:cb:ef:9b:42:f4:36:
         b6:c8:5d:82:07:88:34:f1:7d:15:62:77:94:91:0b:ee:e6:f4:
         88:0b:00:96:92:f1:00:36:59:ef:da:ea:34:0c:ec:63:2a:e4:
         a1:cc:95:f2:7b:b4:60:70:d7:65:98:bd:cb:0c:20:9b:7f:62:
         32:f4:3c:5a:0a:a6:99:22:f4:6d:a7:bc:4f:45:86:e0:55:26:
         13:d3:ee:9b:78:99:cb:76:c0:71:5d:be:bf:5f:9d:1d:e3:4f:
         a2:aa:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:50:52 2026 by rpki-client