Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa
File:                     35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa (raw, json)
Hash identifier:          DY1Z/vYwUN2CE82y7Zw9yWCWA1VfQkV9QaohjvZimog=
Subject key identifier:   60:6B:D3:B9:37:AD:70:04:7A:C5:81:83:AB:26:C4:EF:CF:91:AF:95
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F4328584E0A6FF9F71F9A6B1A5674D420
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     14618
IP address blocks:        52.128.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f9:f7:1f:9a:6b:1a:56:74:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=17cdbff3-466c-4d19-884b-60b910fd6303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:05:40:a6:d6:84:2a:63:5e:8a:ef:89:6e:
                    0e:27:4f:3a:61:3c:b7:8b:ee:b0:3c:19:c1:27:22:
                    2f:b9:da:cf:8b:f8:2e:4a:f9:36:5b:fc:3d:6d:48:
                    85:a0:0d:b8:03:a1:83:c9:b9:7f:70:1f:cb:2b:b4:
                    35:7d:e8:7b:e6:a0:0e:b4:bd:1b:ee:dc:a3:9e:a7:
                    40:8d:4f:fe:23:3d:4b:dd:3b:d3:32:94:0e:0d:af:
                    34:b2:70:2f:10:33:60:84:0d:04:bb:66:a2:cf:87:
                    5f:04:b2:e7:ef:7d:f3:bb:54:d1:76:d8:5c:a1:ea:
                    1d:fb:87:5e:21:9b:c6:1b:22:9e:b4:9d:fe:0d:c3:
                    ca:d7:f3:a8:93:fc:43:fc:84:2a:bf:70:f2:ee:dc:
                    c9:c5:5f:f3:9f:95:2a:ab:e0:cd:aa:3a:b1:dd:54:
                    0e:dc:8e:07:da:21:a1:d0:d2:cd:18:9f:e6:cc:b9:
                    55:8c:8a:e7:12:91:6f:87:52:ff:59:7b:42:ea:fb:
                    16:da:2d:26:55:57:1a:2f:62:d8:c6:aa:ab:1d:a7:
                    43:da:b8:83:75:37:73:69:0f:0f:24:39:6b:4c:85:
                    f8:32:d5:72:77:44:f9:99:7f:77:f2:2f:36:5c:25:
                    f5:03:4d:ac:e8:45:2b:f7:10:2c:48:8b:1c:1a:63:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6B:D3:B9:37:AD:70:04:7A:C5:81:83:AB:26:C4:EF:CF:91:AF:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:c5:25:f7:dc:a8:40:5e:b9:e9:37:0f:2c:c9:1c:53:0d:
         7f:e4:ef:01:e7:6e:f2:cd:f3:9a:8d:90:a9:35:bd:8a:fc:7f:
         ca:1a:e0:bf:30:dc:1b:33:f1:49:b7:aa:26:d0:97:b9:83:a9:
         52:96:7d:3e:16:dd:98:80:8f:da:23:03:2d:57:34:96:1e:8b:
         4f:99:7e:f6:04:c3:17:54:68:78:64:38:b4:0e:ca:6b:a5:08:
         e5:b4:84:2a:fd:8a:79:24:a9:61:0f:45:74:72:e9:1a:7d:f2:
         59:d3:02:84:f1:d8:22:ed:91:2d:5b:bc:08:a8:b6:67:38:0e:
         1a:53:a6:17:ac:47:9e:d6:4f:b4:7f:f5:aa:d6:2c:b3:55:88:
         31:41:38:a3:2d:8e:47:18:33:88:c0:93:32:81:f7:9a:7f:63:
         cc:ad:d7:40:fa:3f:b4:e7:68:a2:92:bd:28:5e:b2:33:22:58:
         c7:20:d8:ef:6c:75:10:d1:a4:07:0d:7d:c1:7f:f8:ce:50:87:
         c7:1a:a2:4e:7e:95:87:e2:2d:f1:4b:3f:1f:8d:2e:29:f8:8c:
         ce:37:fe:84:3e:82:d6:fd:6a:e9:69:9a:4b:ad:6a:e7:25:ee:
         4d:70:24:0d:ee:3d:ae:2f:55:f7:36:6d:d9:03:2c:17:b1:7c:
         38:0e:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:08:01 2026 by rpki-client