Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa
File:                     dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa (raw, json)
Hash identifier:          HY//gfxB3/fxDBXdatkFadvy3z36C3LILi+/gtvnF8A=
Subject key identifier:   22:BA:94:F0:75:00:37:6C:C5:D2:AB:16:6D:6D:40:C3:CA:3A:53:88
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F4328584D524353C50C16FBF8CF83DF00
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     16509
IP address blocks:        52.129.152.0/21 maxlen: 24
                          52.129.160.0/19 maxlen: 24
                          52.129.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:53:c5:0c:16:fb:f8:cf:83:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=92175dbd-291f-4c2d-9a54-76f909c81dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:4e:2b:80:91:0d:4d:4f:01:2a:f3:79:e4:
                    ae:97:82:6a:be:ea:26:18:d4:9a:97:45:d0:a4:b8:
                    19:05:06:91:04:97:8d:c5:73:44:ef:79:78:d2:71:
                    70:65:c2:13:2d:dc:d6:c5:91:ca:2b:78:b5:81:a3:
                    db:52:bd:f6:a1:d5:12:94:a4:bb:8a:dc:3a:97:45:
                    5a:8d:94:56:66:29:27:90:b5:89:43:9c:72:fe:b1:
                    ed:09:10:f4:22:70:91:dd:07:7a:89:43:82:d8:5c:
                    af:9e:78:f7:c2:17:60:1a:bd:3a:41:b0:ee:20:76:
                    57:e3:3f:6a:66:a3:cd:06:d3:48:01:9a:ba:d5:5b:
                    c4:c5:5a:13:1e:d5:f7:2a:67:0c:64:d2:66:a1:83:
                    32:7a:3e:3f:d7:ba:49:a5:95:69:1d:b8:bf:77:9f:
                    b3:1d:8e:9d:3b:2a:a0:3d:7e:75:44:b2:01:ed:95:
                    60:25:0d:8a:ef:e3:42:c4:b4:94:a5:4f:be:eb:5f:
                    1f:7d:dc:c2:4d:d0:5c:d3:ca:59:36:8e:e3:a6:15:
                    71:ae:91:f8:73:93:03:f3:53:bf:73:04:17:a0:09:
                    f4:c4:97:af:ad:16:c2:ce:4a:8c:4d:2a:58:ec:97:
                    21:ca:1c:70:e7:66:71:44:ea:b1:4f:e5:41:11:ce:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BA:94:F0:75:00:37:6C:C5:D2:AB:16:6D:6D:40:C3:CA:3A:53:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.152.0-52.129.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:91:81:c4:8b:33:3f:14:d9:56:37:91:ed:7a:01:cb:0a:ff:
         30:4a:67:83:05:6e:2a:28:41:b2:ec:01:eb:0e:0c:81:19:88:
         32:09:21:a5:e8:75:c0:95:59:57:84:d7:65:ed:45:18:88:fe:
         1d:92:c8:08:d8:4c:c5:6e:92:67:ca:5e:08:01:84:c2:9d:a2:
         8e:f6:de:01:c1:c6:a9:81:74:f4:a8:fc:5f:83:58:14:75:8a:
         3d:ef:87:1f:d2:c0:56:87:13:f8:f6:b9:5b:b0:5f:bc:33:18:
         09:af:fa:32:40:fe:0c:8a:79:44:b5:c8:c0:cc:c8:93:6c:1a:
         ca:b5:ce:85:f9:21:0b:59:34:3b:75:33:f6:b5:5d:3d:b9:0d:
         2b:37:33:4f:63:bf:9e:8d:16:08:c9:5b:2b:18:ce:4b:fe:90:
         aa:f9:96:1a:e4:9d:5f:5a:dc:ef:4f:71:11:3e:f7:d1:a3:b7:
         c5:61:a4:4c:7b:a3:14:15:1e:ad:9e:c6:47:b2:51:f5:c0:b8:
         a5:26:8f:ab:34:88:a6:ee:16:88:a2:3b:62:fe:7f:ec:cb:a6:
         fd:ae:bb:7d:91:6d:e1:a8:19:02:32:81:ba:a0:1e:de:99:35:
         e7:00:50:55:c8:b8:86:84:ff:66:72:4e:0e:4d:d1:5d:72:9c:
         54:6d:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:55 2026 by rpki-client