Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa
File:                     094143c8-ff7f-3f51-8461-0fce2db8fe81.roa (raw, json)
Hash identifier:          Sv0ms9IPUJDh0WpVrzJpVH4O9U/DTuQAEvkojGWwiQ8=
Subject key identifier:   C7:CD:40:56:77:B8:EC:06:B3:EA:12:4B:48:AC:13:C5:9F:F0:A7:1E
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584BBFA59381A09EE9AD6CDFF600
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     399150
IP address blocks:        52.128.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:93:81:a0:9e:e9:ad:6c:df:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=09f4de0e-d1ec-4679-9792-e59893ec754d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d7:52:e4:93:38:29:35:74:af:ff:40:c3:f2:
                    16:48:77:08:18:11:ec:cd:16:87:e4:72:f3:2b:5d:
                    61:de:a4:ce:5b:b2:dc:0b:bd:8e:a1:ad:0f:66:be:
                    b3:08:da:0d:1d:3b:e0:c1:d4:9f:1b:e5:66:c3:a7:
                    67:d6:e9:61:8b:03:e8:e4:47:e6:f2:8f:ac:07:45:
                    04:81:4d:d9:53:04:be:4e:a9:08:44:d4:a9:63:a6:
                    14:0c:3c:65:1c:18:10:f1:9a:ba:18:4f:80:12:ff:
                    bc:cf:4f:25:2e:35:2c:25:8b:c1:c5:a6:86:3f:8d:
                    ce:07:07:b6:13:59:57:2c:69:7a:31:6b:5f:a0:ce:
                    01:b2:3d:2e:84:50:a6:8f:d4:b5:2a:a5:8b:bd:7a:
                    fc:8e:85:9e:f6:38:d4:c3:a7:6f:e3:84:fa:46:59:
                    22:a5:3e:74:de:6e:6d:f1:b5:10:ac:94:cf:48:85:
                    a5:1f:1b:25:04:27:1d:d8:6d:2a:f1:25:ed:5c:09:
                    f1:51:9e:10:0b:f2:c3:a7:df:69:a2:c5:af:10:7b:
                    31:4c:b7:cf:73:9a:74:8b:8f:b3:62:42:35:13:bc:
                    2b:fa:6e:26:49:95:e7:8a:f1:f4:6a:ac:9a:40:77:
                    83:75:87:9f:83:e0:9a:d1:b2:d6:26:ab:dc:f1:0e:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CD:40:56:77:B8:EC:06:B3:EA:12:4B:48:AC:13:C5:9F:F0:A7:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ad:f6:75:90:d5:c9:d8:35:2b:70:66:d1:88:e9:54:38:d9:
         b2:20:e1:97:a9:fd:5d:ac:08:19:ef:43:66:ea:60:0c:51:7b:
         f0:4a:19:71:9d:40:47:f1:6a:57:5c:24:b5:af:33:b8:30:ac:
         3c:52:a8:25:8c:f6:34:19:b1:9a:d6:72:31:dc:0c:f4:3f:23:
         d7:c7:0a:fc:61:e0:ba:23:22:e3:e0:b6:dd:5b:b6:3a:b0:95:
         75:ac:b2:ac:6b:e2:57:9e:c3:54:08:60:01:06:3a:6a:df:cc:
         a2:e8:11:c8:8f:a2:95:38:b6:18:5d:dd:48:9b:79:48:dc:43:
         2e:bc:d7:63:d4:94:ec:4b:bd:f1:a2:5e:66:c3:ab:19:31:a1:
         f8:af:22:4e:09:f1:2a:89:a2:e9:9f:a5:ac:6d:05:f7:87:4d:
         6a:4e:f4:db:dc:2f:ed:d6:fd:57:41:1f:3b:58:f4:b4:63:89:
         4c:66:82:be:34:81:0d:85:7e:79:79:b2:2f:f1:2c:1f:e9:06:
         b6:8d:3c:8d:20:dd:37:8b:02:34:b6:0e:0c:8e:3c:b8:af:3c:
         aa:a6:76:20:3b:ea:ca:11:ee:bc:80:df:8e:10:e4:e8:24:bf:
         20:c7:10:ac:10:a0:c9:86:89:84:db:ca:2c:5d:0e:e2:7e:5f:
         ad:e6:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:57:23 2025 by rpki-client