Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
File:                     4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json)
Hash identifier:          C2xVO/qqGttjPc8U0QUx3eMuBMn99wZbPI4A5+mwQNQ=
Subject key identifier:   96:16:CE:18:C0:32:C8:62:18:4D:41:34:C9:E1:FF:05:6F:1A:C5:7F
Certificate issuer:       /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Certificate serial:       010D0C9F4328584C8476E959C626F2CA9161A428
Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     394875
IP address blocks:        52.144.25.0/24 maxlen: 24
                          2620:f9:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:e9:59:c6:26:f2:ca:91:61:a4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=827103b4-dcd3-4c1b-aa6a-01537e7a1540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:22:26:ca:9c:10:03:db:3d:1c:81:b9:c3:
                    e7:aa:a2:39:dd:a1:6e:26:b7:52:4c:e9:1b:2f:24:
                    ae:b5:49:90:c8:f0:ba:28:5d:46:c3:c0:db:8f:2d:
                    b9:00:7b:f8:b4:70:be:85:d7:66:74:f0:13:ec:a6:
                    ad:ac:be:cd:9c:db:e7:42:a5:76:25:0f:36:98:3f:
                    b6:38:e1:8d:9d:d8:f2:80:cb:63:52:d4:55:87:f0:
                    59:04:82:f9:df:a4:94:2b:ba:c3:b0:16:6e:46:5e:
                    3f:c5:fb:92:6c:53:2a:16:31:91:63:9f:26:a6:f4:
                    a2:05:8b:52:da:82:07:6a:7d:68:b6:59:41:0e:84:
                    1c:80:59:36:fb:ee:5d:53:3f:9b:ca:51:e6:56:53:
                    41:10:41:60:31:ae:5c:6d:b9:a9:3d:ea:d3:fc:27:
                    02:e3:f8:df:f0:21:52:e2:3f:01:e6:de:da:58:b8:
                    1e:46:cc:db:da:79:9e:b9:1f:f8:26:ed:8b:51:66:
                    6c:46:20:be:53:52:a3:65:99:65:31:cc:11:ac:f5:
                    3d:e2:7e:38:71:c7:49:41:6b:75:78:ea:ba:eb:a0:
                    89:7e:cc:07:4c:24:b7:a4:c3:0f:35:89:19:62:b5:
                    cd:f5:22:8a:ed:ac:53:03:a3:cb:36:cb:00:33:67:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:16:CE:18:C0:32:C8:62:18:4D:41:34:C9:E1:FF:05:6F:1A:C5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl

            X509v3 Authority Key Identifier:
                keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.25.0/24
                IPv6:
                  2620:f9:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:78:35:80:f4:52:7a:60:32:ff:d5:37:d3:3d:31:ab:ed:f9:
         c9:16:c7:a1:b0:1b:8f:dd:fd:b4:ef:51:da:93:a0:aa:17:a6:
         b1:6f:08:0c:36:b4:96:3d:e3:cb:75:ea:c1:7d:d3:bd:12:62:
         55:76:2c:2c:f0:bc:56:e6:1e:62:8b:15:fb:c5:8e:c5:84:9e:
         ba:c6:fa:bd:16:8f:0f:1a:8e:a9:01:cf:ee:c6:c6:ff:63:3a:
         fa:f7:db:89:92:83:ea:39:16:31:de:6f:79:80:c2:5a:fb:67:
         a9:f4:2f:ad:e1:41:d7:fc:b1:bf:f3:1a:96:ef:ee:74:4a:d9:
         4c:56:a2:26:90:c3:3b:c9:e2:dc:52:47:05:5d:65:bf:c0:0c:
         80:cf:0e:0c:01:e9:2b:1b:ed:9f:0c:9f:bd:d9:9d:5e:66:22:
         18:41:3e:41:53:e7:c3:7d:72:74:88:b1:d3:66:a3:94:1c:08:
         ae:4f:8e:c7:35:1f:2e:28:f4:97:74:1d:e7:c4:4a:6b:d6:f2:
         7e:2c:cd:ae:d2:43:ba:96:1e:ce:f1:6a:c5:63:d8:43:08:1f:
         b4:f9:63:5c:8f:26:9e:d2:60:66:15:88:9a:ce:19:26:15:72:
         73:16:bb:3d:6f:fd:8c:92:13:ec:dd:aa:dd:12:7c:78:33:1a:
         8f:5e:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:49 2026 by rpki-client