Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa
File:                     a104e0ef-bc59-3bf4-807f-36926a598f6e.roa (raw, json)
Hash identifier:          PkFyoJyA1Ym70CO1xrYj6gyrbi1BSNSA85U4EB6XbOg=
Subject key identifier:   94:BC:32:8E:2D:3A:91:13:B6:96:03:46:9F:09:23:87:1E:7F:50:69
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584E6144A7AC4F49C91628F27760
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     398712
IP address blocks:        52.128.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a7:ac:4f:49:c9:16:28:f2:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=2e5a8e63-cf8d-4e73-ba39-89d304fed29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:03:a7:f6:25:bf:50:1f:eb:79:5b:0e:ac:
                    fa:53:31:df:2f:c6:37:6b:b3:e7:bf:f2:e5:af:f3:
                    f2:4b:70:3b:c1:6b:10:66:13:f4:fe:c1:95:e4:bb:
                    b0:fe:13:09:e9:2a:a9:cc:ef:46:9b:42:d0:6f:74:
                    17:75:cc:4c:9b:4c:e0:15:cb:a2:2b:ae:72:95:5a:
                    a5:20:93:42:57:c4:76:e0:81:bc:f0:22:42:35:85:
                    71:c9:8f:4d:5e:a6:2d:9d:19:61:81:f9:3e:80:eb:
                    8b:55:d5:cf:4e:60:4e:55:a3:3a:46:83:ac:de:a5:
                    b1:5d:d2:d3:10:b2:21:d6:26:af:72:ef:ca:e8:3a:
                    91:83:be:88:f5:d1:f2:49:7d:af:9c:1b:79:e4:0f:
                    38:32:0b:92:e6:7b:99:bc:54:de:29:11:09:40:f8:
                    90:c8:cf:0e:27:b1:fd:f0:e0:da:20:4a:f3:a3:53:
                    3f:09:01:be:74:b6:78:9b:e8:e0:78:1f:ff:4b:2f:
                    d7:52:f1:a8:95:9f:3c:ed:0e:fd:eb:10:75:6e:3f:
                    b8:28:00:57:75:17:be:95:7b:bc:25:3c:76:c0:46:
                    1f:d5:1f:1d:18:e4:00:0f:16:bc:17:b5:1a:de:6f:
                    44:2c:c6:72:03:5d:b3:ee:52:70:51:db:0c:99:ae:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BC:32:8E:2D:3A:91:13:B6:96:03:46:9F:09:23:87:1E:7F:50:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fe:98:41:e1:74:46:17:cb:24:7c:fc:31:e1:df:c2:49:b1:
         23:ec:34:39:60:83:2d:67:35:7b:cf:1f:f5:2b:32:59:1f:d2:
         e7:72:92:bf:a1:fd:d9:76:23:a2:6c:ee:44:86:e6:64:2d:64:
         71:9e:0f:3d:59:6c:0c:d6:d7:35:2c:72:3b:4d:ea:2e:c0:1c:
         4a:48:70:18:6c:2d:de:21:9d:36:97:91:91:e7:07:20:75:6f:
         a9:71:6a:91:39:a3:95:6b:85:5b:cb:b8:d0:14:54:3c:83:c0:
         8f:1d:b2:67:91:c3:7c:79:87:56:58:9e:22:9e:6d:fa:a9:5c:
         bd:bb:61:b2:39:2d:d2:64:07:92:f5:19:98:c2:46:6a:e0:3a:
         a0:f6:5f:a7:bb:9d:b4:bf:60:f2:08:ac:ce:e0:75:13:61:91:
         a7:d2:b6:0d:cb:8f:bb:35:33:3b:05:42:af:c9:f9:24:38:c2:
         d9:72:1d:7d:9c:38:38:31:41:e2:0d:85:e1:fb:0a:60:d3:a8:
         9f:29:a6:38:5f:3f:b1:db:18:6a:27:96:a2:1b:2a:f6:e5:f5:
         e6:49:85:93:ac:a4:27:92:4f:11:34:6c:03:14:9b:4c:4b:d7:
         c7:d1:53:f0:7c:64:1e:80:28:fd:1f:97:15:c3:1e:04:de:49:
         1a:c3:a0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 22:54:14 2026 by rpki-client