Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
File:                     36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa (raw, json)
Hash identifier:          8xLiT4EXrzEEz7ut0zVtw+upRggY26lcAGMVFPsFQI4=
Subject key identifier:   28:EF:D9:03:B6:76:2D:87:18:FB:E1:88:8B:D6:11:FA:95:15:65:03
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584F03A77A3D2E57B5E3E5CC3680
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     398712
IP address blocks:        52.128.0.0/22 maxlen: 24
                          52.128.4.0/22 maxlen: 24
                          52.128.8.0/22 maxlen: 24
                          52.128.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7a:3d:2e:57:b5:e3:e5:cc:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=c2f47a2e-b51a-43a2-aded-6ff5e7d866bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:bc:6c:93:82:15:dd:8a:ff:af:30:91:96:
                    f4:7a:83:e8:25:40:d4:97:4c:8a:a9:7d:bc:c4:cb:
                    1c:8d:51:2d:ae:00:a0:f6:4b:db:b9:f9:0f:43:74:
                    15:a7:db:3b:ef:14:18:22:67:a7:c7:16:d2:a1:85:
                    29:fc:75:52:0d:f0:03:05:ba:89:2b:2c:df:20:7b:
                    c5:69:6b:f8:f8:43:93:3e:71:fa:ba:86:07:b9:ae:
                    37:0a:51:34:e0:0f:ed:97:d1:41:02:40:93:58:3a:
                    d6:2c:6e:9d:b6:13:cb:2f:a0:7a:7a:a7:6b:0f:37:
                    6b:66:55:26:1d:33:19:6d:e1:a3:c5:b1:ae:04:44:
                    ae:d5:26:a3:7e:98:be:36:fb:6f:b9:7a:76:b3:9a:
                    1a:e1:8a:6b:05:cf:5b:8d:40:ad:c1:ee:55:56:58:
                    1c:aa:59:4f:c4:a0:73:4b:c4:a8:dd:c4:02:94:e5:
                    34:94:eb:40:b3:b9:85:bd:3a:9c:12:65:12:cd:70:
                    ef:3d:0f:37:29:8d:cc:6d:4d:d7:4c:94:75:f8:64:
                    83:b8:3c:a7:e4:1b:ff:50:8e:5f:7d:86:67:6b:f1:
                    05:fa:25:70:70:a4:17:2b:21:48:04:be:80:c7:dc:
                    ba:92:9b:49:19:70:fd:8b:7a:bf:a7:e1:cf:ca:8c:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EF:D9:03:B6:76:2D:87:18:FB:E1:88:8B:D6:11:FA:95:15:65:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:aa:da:4e:b2:2b:07:54:a3:1a:60:12:63:b1:94:a5:43:b1:
         49:6b:86:be:2d:d3:a8:ab:2d:56:39:64:4a:d4:df:f7:3d:57:
         5f:6f:3a:04:a9:ab:67:4e:34:d8:50:5d:fd:05:af:31:02:09:
         e0:f1:9f:6e:15:76:d0:14:bd:3e:56:5f:8c:0d:1e:e1:bc:04:
         1f:4f:c9:2f:dc:eb:37:49:71:69:ce:21:1b:3a:06:d7:8d:5c:
         66:dc:68:fb:f8:e3:b9:0f:b2:6d:78:82:74:20:d7:b7:17:d1:
         8c:04:2f:f5:87:c6:6d:bc:d2:03:cb:05:c0:b3:7a:8f:f7:42:
         76:5c:72:a3:d7:6f:e6:8f:e3:53:de:60:e6:ec:f4:7b:ff:b1:
         a9:be:54:e8:f9:92:0a:1e:9f:3e:1e:0e:88:6e:3f:67:81:78:
         2c:e2:e0:c0:36:61:3f:19:99:81:45:53:4d:c6:3b:77:f7:2e:
         98:46:31:16:4f:18:64:48:83:8e:f8:0d:c5:04:64:fb:7e:b1:
         46:2f:37:f7:aa:2f:c2:9c:ca:a1:01:07:11:17:8f:47:97:56:
         81:69:1b:5d:2d:22:cc:d1:66:1c:c2:9c:26:ae:51:86:7e:91:
         d6:b5:77:7e:68:9a:97:2b:2c:52:57:f5:58:68:9b:6e:dd:fb:
         c1:a3:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:46:51 2026 by rpki-client