Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
File:                     1f825b44-9c70-33dd-b03f-6d808154234c.roa (raw, json)
Hash identifier:          1SVo1ZMMvyp1KjTqEauYswyHyt6kDLstJTLh3kEcrSM=
Subject key identifier:   8F:9C:C3:61:F4:BE:FC:A4:D0:96:C7:21:8E:F3:77:AF:88:E0:4C:F7
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F43285849E7BA89888BC6478CE2A89300
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     7018
IP address blocks:        52.128.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:89:88:8b:c6:47:8c:e2:a8:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=571c6929-6080-4112-85c8-b5fada41185c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:f5:07:1a:2b:c9:a7:9a:6a:69:e2:59:6d:
                    5c:03:73:50:36:75:5a:be:5b:b9:39:eb:33:d2:27:
                    82:40:df:2f:e4:6d:db:00:81:44:90:de:f6:21:2f:
                    9e:33:cf:0e:cb:95:f8:e9:c0:14:a6:b2:62:aa:23:
                    66:c1:63:65:f5:0d:9d:b9:43:ff:6c:4f:c4:12:4d:
                    39:bd:20:b6:a1:c0:0c:b8:29:a4:72:d6:42:62:05:
                    21:07:46:5e:95:2e:93:b4:b7:a6:38:0a:1d:25:3b:
                    1c:9a:21:77:54:b4:90:3d:3f:38:03:dd:7d:fd:fb:
                    0f:dd:1a:1a:6d:9c:e6:f5:01:eb:63:a8:87:50:a4:
                    60:a9:2c:1d:46:2d:f7:9f:8b:f4:11:b9:28:32:be:
                    e1:64:f4:57:ab:5d:4a:be:98:0c:ab:8f:00:f5:7f:
                    9d:a2:95:75:3c:32:a7:bc:24:42:bb:fe:89:49:df:
                    66:82:99:14:e0:00:83:b0:d5:3e:6d:3d:b6:4f:2d:
                    b1:81:3a:a1:c8:8d:69:34:85:7d:bc:b5:3b:c3:b0:
                    97:95:75:d7:f2:94:3b:75:36:34:40:3c:5b:46:5a:
                    00:06:b1:20:d7:b4:99:11:f9:5a:a5:46:d1:f8:40:
                    09:25:1d:47:4c:82:2f:b3:22:cf:a6:68:94:12:3d:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9C:C3:61:F4:BE:FC:A4:D0:96:C7:21:8E:F3:77:AF:88:E0:4C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:50:d8:cd:55:6d:57:61:65:81:25:06:24:ab:83:4d:3c:
         5e:20:33:cc:3d:12:2a:c2:92:62:8a:30:49:4e:6d:1e:e2:4f:
         6b:1f:5c:94:26:53:64:24:e3:98:ba:64:70:e2:b8:61:3b:8c:
         70:76:92:69:7d:d0:23:78:52:2e:bd:16:73:27:c1:38:5e:d6:
         d0:8c:14:ff:30:b1:2f:56:2e:3f:90:22:cd:ed:87:41:b3:de:
         23:ec:bc:e0:50:06:86:23:00:2c:df:67:58:89:c4:db:f2:07:
         05:6f:d2:55:6a:eb:d2:01:23:15:0a:0c:19:30:25:fc:ef:22:
         ee:18:6c:e1:9d:64:37:b1:fd:84:6f:0a:0d:32:3d:e2:9d:71:
         03:23:79:97:6b:d9:e9:32:02:eb:5c:93:0a:c3:e9:41:12:77:
         87:28:7d:53:9d:fb:6e:25:f2:97:c9:18:bb:92:b0:9e:87:21:
         a2:ad:25:71:9e:92:b0:13:14:d3:9c:e8:3b:2a:64:25:ec:e7:
         48:8d:af:5a:9e:9f:08:9a:e1:14:2f:a8:5b:b9:36:52:14:20:
         c1:8e:17:b8:fe:5e:4f:57:9d:06:51:c8:07:83:c0:6f:b7:5d:
         60:1c:1b:3f:1c:f1:46:05:d1:72:36:8b:c9:92:d4:9d:42:1e:
         05:1b:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:45 2025 by rpki-client