Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7e84690e-a89e-3dae-8365-29cde4251cc5.roa
File:                     7e84690e-a89e-3dae-8365-29cde4251cc5.roa (raw, json)
Hash identifier:          VnujvFaPQ97/omgqAT5uwO6ZriXJoMrtQE8ep0txWjc=
Subject key identifier:   B9:03:4F:5E:57:B4:AD:68:CF:F6:6F:A3:BF:6D:30:0D:ED:1A:5D:7E
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584B13D6C01D3A543CB668DDA000
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7e84690e-a89e-3dae-8365-29cde4251cc5.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     399091
IP address blocks:        52.128.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c0:1d:3a:54:3c:b6:68:dd:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=f2c1e824-1ef6-4bfd-9318-fdad0c59498e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:6e:f5:07:ae:a0:4a:ff:d8:74:37:c1:ca:
                    98:c6:cc:79:e3:d3:63:fa:c6:0a:00:61:53:24:86:
                    40:9c:aa:29:ad:c7:9c:27:5b:35:42:ae:83:7a:9e:
                    6c:f6:58:fd:1a:a4:c9:e0:f5:e8:53:7c:c7:1c:e4:
                    96:59:78:b6:ec:17:d0:49:51:10:1b:ca:81:21:82:
                    41:9c:e6:c7:c1:50:52:31:68:e9:1d:33:15:31:91:
                    fc:8b:4c:01:07:eb:7e:8a:b0:5c:5e:02:6b:c7:ac:
                    de:67:50:4c:82:1a:a1:32:d5:e1:9e:0a:c1:71:38:
                    da:f0:4b:e0:4d:75:c8:15:12:b9:54:51:6f:d2:bb:
                    f7:7a:45:47:0d:b2:01:bb:03:ec:ca:19:5d:ab:a1:
                    d6:e9:ac:3d:f8:e7:70:e8:ff:a9:95:65:76:92:f4:
                    52:7c:03:95:df:aa:b9:cf:37:97:d1:dd:f7:51:e2:
                    ca:3a:ec:e3:f3:db:6a:30:b6:76:84:f0:ef:b1:21:
                    9a:ea:ac:bb:36:d5:11:75:8b:50:53:3d:49:1b:00:
                    d3:f5:47:78:6b:04:67:fe:8b:c5:a4:ca:c3:20:57:
                    db:51:4b:cf:31:b9:7e:09:c4:00:d9:09:ac:a9:e5:
                    0d:e4:17:1a:08:27:83:cb:b6:b7:47:da:0e:e2:4a:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:03:4F:5E:57:B4:AD:68:CF:F6:6F:A3:BF:6D:30:0D:ED:1A:5D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/7e84690e-a89e-3dae-8365-29cde4251cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c9:cb:79:a6:01:f7:72:69:48:9b:a5:0c:89:f7:12:c7:bd:
         4d:ac:79:b6:68:a7:3c:49:71:16:b1:ab:d6:61:81:61:d9:d9:
         81:32:6d:e4:a7:76:3e:e5:26:6e:f3:88:e7:9c:d1:e8:06:d0:
         d3:b6:cf:3d:de:01:88:1b:4d:72:ba:33:41:d9:75:35:5c:65:
         2b:7b:a4:4d:7a:7f:a7:fa:a5:ed:ec:a0:8b:fb:64:be:36:5f:
         8c:0b:7e:87:68:ae:fe:c3:d4:06:66:0f:e4:d3:1e:d3:e3:8c:
         82:e6:0f:65:7f:54:b7:3c:72:9f:79:97:dd:c5:9c:9f:9c:fc:
         c5:b8:6a:a5:b6:5f:bd:a2:5a:0b:02:90:07:3a:a7:02:55:19:
         3e:a6:23:31:6e:58:0b:15:d8:05:72:8a:d4:75:47:4d:f0:22:
         20:a4:52:23:84:d1:56:89:ee:3d:a6:8f:96:b5:2c:40:ef:68:
         3d:1a:fd:e6:5a:d6:9d:f1:61:43:78:0e:83:8a:5f:ba:39:ba:
         e9:dc:10:38:9a:42:da:5c:1e:af:7e:72:15:fe:9c:d3:05:56:
         14:3f:d0:3e:88:62:f6:ba:ca:79:74:ab:d9:70:2c:1c:83:fe:
         83:43:65:36:53:e5:92:a1:da:21:b9:34:61:2e:84:87:84:35:
         cc:9d:0f:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sAdOlQ8tmjdoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm
MDk0MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
ZjJjMWU4MjQtMWVmNi00YmZkLTkzMTgtZmRhZDBjNTk0OThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm75u9QeuoEr/2HQ3wcqYxsx549Nj+sYKAGFT
JIZAnKoprcecJ1s1Qq6Dep5s9lj9GqTJ4PXoU3zHHOSWWXi27BfQSVEQG8qBIYJB
nObHwVBSMWjpHTMVMZH8i0wBB+t+irBcXgJrx6zeZ1BMghqhMtXhngrBcTja8Evg
TXXIFRK5VFFv0rv3ekVHDbIBuwPsyhldq6HW6aw9+Odw6P+plWV2kvRSfAOV36q5
zzeX0d33UeLKOuzj89tqMLZ2hPDvsSGa6qy7NtURdYtQUz1JGwDT9Ud4awRn/ovF
pMrDIFfbUUvPMbl+CcQA2QmsqeUN5BcaCCeDy7a3R9oO4kp0SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLkDT15XtK1oz/Zvo79tMA3tGl1+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi
NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvN2U4NDY5MGUtYTg5ZS0z
ZGFlLTgzNjUtMjljZGU0MjUxY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy
MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk
ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1
NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALnJy3mmAfdyaUibpQyJ9xLHvU2sebZopzxJcRaxq9ZhgWHZ2YEybeSn
dj7lJm7ziOec0egG0NO2zz3eAYgbTXK6M0HZdTVcZSt7pE16f6f6pe3soIv7ZL42
X4wLfodorv7D1AZmD+TTHtPjjILmD2V/VLc8cp95l93FnJ+c/MW4aqW2X72iWgsC
kAc6pwJVGT6mIzFuWAsV2AVyitR1R03wIiCkUiOE0VaJ7j2mj5a1LEDvaD0a/eZa
1p3xYUN4DoOKX7o5uuncEDiaQtpcHq9+chX+nNMFVhQ/0D6IYva6ynl0q9lwLByD
/oNDZTZT5ZKh2iG5NGEuhIeENcydD1Q=
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:07 2025 by rpki-client