Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2055a175-d3fe-3300-9c5c-36af8067a58e.roa
File:                     2055a175-d3fe-3300-9c5c-36af8067a58e.roa (raw, json)
Hash identifier:          0h3k+L8/T0Gm6YKZXI2YbJXcP7uNhCIE4tIJ23OwY0k=
Subject key identifier:   E1:98:1F:8E:5C:95:19:1E:63:69:49:59:88:1A:B2:62:85:5E:7B:4E
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F4328584AC2E0E73E039E18DC7D5CAAC0
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2055a175-d3fe-3300-9c5c-36af8067a58e.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     46489
IP address blocks:        52.223.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e7:3e:03:9e:18:dc:7d:5c:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9528be04-03a2-4255-88b5-c8ee4ac7ad79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:bb:23:b3:9a:8a:68:4b:fd:b9:55:87:fc:
                    eb:62:4b:d0:ef:6b:62:f3:19:ef:b0:76:6f:98:cb:
                    dc:e9:1d:80:a0:42:70:1a:03:4e:cf:2b:ec:ec:09:
                    43:f2:aa:0d:dd:b2:f9:6f:32:38:9b:b5:9c:3d:12:
                    15:e7:96:98:11:70:bc:98:a7:7d:21:d7:e9:4e:99:
                    2e:e8:81:ea:40:f2:20:fc:b4:e3:c9:54:99:e5:64:
                    e1:87:8c:61:18:72:11:c2:b3:4f:7e:fe:ba:87:55:
                    1a:72:32:ca:b6:94:fe:6a:2b:06:46:57:1f:90:08:
                    9d:ac:d9:79:6f:fe:62:a7:3d:26:de:12:3a:32:fb:
                    bc:42:0a:02:c4:28:24:7f:bb:6a:14:19:d2:6b:a3:
                    3d:c0:a9:14:9e:f6:af:73:d6:1b:df:2d:b4:0b:74:
                    29:11:f7:95:26:dc:11:9c:ac:fc:22:c6:ba:bc:d2:
                    7d:65:3d:8d:16:90:57:76:af:58:23:1c:2f:0e:ef:
                    16:41:9f:e7:34:b1:c8:77:b7:11:19:bb:05:f4:2f:
                    ab:8c:fe:d2:a6:85:d6:27:3f:fe:54:a6:40:95:e7:
                    2c:21:2d:58:00:d7:68:e7:4a:c0:b6:ca:68:9f:01:
                    61:18:62:f8:cc:3d:0b:53:19:14:a1:23:57:91:75:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:98:1F:8E:5C:95:19:1E:63:69:49:59:88:1A:B2:62:85:5E:7B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2055a175-d3fe-3300-9c5c-36af8067a58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.223.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bf:a9:76:14:e8:65:7c:70:ca:5f:31:f7:ad:b7:40:08:e0:
         06:b5:11:66:df:62:b2:b1:7c:e7:49:c1:2e:6c:14:14:8f:34:
         3c:08:d7:26:95:eb:05:35:6f:4d:99:6d:cb:a2:01:33:68:f8:
         e4:e2:36:c9:44:c5:f9:8c:e9:a5:eb:72:c5:ff:c1:f6:13:8b:
         1b:a0:14:75:6a:0a:6a:0c:ac:0f:c4:c0:17:9e:b7:9f:bf:2b:
         06:2b:67:75:a8:01:b6:31:bb:b1:2c:58:b1:ba:af:6c:63:0d:
         20:c6:cf:b2:e8:ca:40:10:4c:9d:9f:41:b5:a6:c0:6a:38:84:
         0e:96:3e:68:fc:65:d8:78:64:64:aa:a5:bf:a7:33:a4:a9:45:
         9e:ff:77:e3:98:7f:12:72:ea:8c:39:7c:50:b6:e4:30:31:3a:
         51:a3:2c:1a:17:5a:24:34:ca:26:09:85:4d:0d:1c:43:0c:6d:
         d4:2c:dc:11:a3:32:6a:e8:06:4f:7e:af:1d:01:8d:ff:d9:21:
         5c:df:ef:cb:9c:19:35:9e:b7:0d:fd:f6:fa:61:e5:f5:6e:cc:
         c7:f2:93:6d:a6:ac:fb:ae:86:04:a9:f6:5f:18:bb:32:ed:bb:
         ac:69:da:3a:ed:18:b0:16:f5:5d:ca:8f:57:89:4f:6a:f9:a3:
         ac:80:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:47 2025 by rpki-client