Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/238dc678-ce0b-332b-9562-f74b9c0b467a.roa
File:                     238dc678-ce0b-332b-9562-f74b9c0b467a.roa (raw, json)
Hash identifier:          qUPY1DJL3eQgJHK/2cUnkH3TpUGTtbPr4BDOrpGQb2w=
Subject key identifier:   08:64:6A:AF:7E:6D:18:BE:19:35:47:B3:42:7D:C2:84:65:C9:39:59
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F43285849FE0FE6605A89CA6C5D5BD140
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/238dc678-ce0b-332b-9562-f74b9c0b467a.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     398712
IP address blocks:        52.128.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e6:60:5a:89:ca:6c:5d:5b:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=9c2ed22a-6091-4fae-88c5-1a914a23d787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:ac:3e:ec:31:37:b9:48:c4:6e:91:b7:91:
                    23:8e:08:bb:d7:2c:5c:1c:90:44:43:c9:65:9d:1f:
                    8d:1d:6b:5e:93:65:2d:95:59:92:17:a0:4f:c8:7f:
                    c8:30:fd:8b:75:56:3d:ac:46:c1:14:25:90:8a:6c:
                    2d:fe:a9:03:49:9e:50:2a:25:3a:3b:4a:f5:02:77:
                    66:19:8e:40:d0:22:46:07:a6:f6:65:15:7e:90:ce:
                    2a:88:a8:df:a0:3f:20:fc:c6:2e:74:71:88:b7:6c:
                    74:c5:36:d5:b8:2f:5a:e0:d1:92:86:4f:fb:12:82:
                    9e:65:37:74:3d:7a:e7:4f:02:78:7e:5e:de:e5:77:
                    a6:28:0c:5e:91:df:ce:24:bd:db:08:5a:bf:cc:22:
                    b3:b9:13:2e:61:95:78:27:c8:cb:fe:11:85:9b:f7:
                    2a:a6:43:ec:69:0a:48:ef:6d:65:fc:b4:1d:14:fa:
                    51:ac:a3:28:a4:11:9f:94:36:c4:be:6d:23:52:dd:
                    2e:0f:fb:ad:39:a8:b8:62:1f:1f:7c:44:29:96:1c:
                    c3:a9:65:06:b3:16:3c:bc:b7:de:48:28:0d:05:04:
                    17:8b:89:13:6d:a8:50:08:6e:86:9f:92:af:8c:b2:
                    ca:40:66:6b:2c:2c:7d:66:0b:d5:6f:94:80:cf:1a:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:64:6A:AF:7E:6D:18:BE:19:35:47:B3:42:7D:C2:84:65:C9:39:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/238dc678-ce0b-332b-9562-f74b9c0b467a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:15:50:bc:61:ae:79:1a:36:44:00:2b:86:0f:14:ca:63:ca:
         29:4d:3c:0f:c7:12:1e:e5:b2:7c:46:15:ab:6f:ba:78:32:42:
         83:f0:ee:82:cc:e0:ff:e6:e9:62:9e:73:7c:42:eb:76:a2:68:
         00:57:c3:92:ec:5b:fb:8d:bd:2a:21:df:8e:8d:3b:48:9b:a9:
         23:fc:d8:56:30:8f:a9:e7:7d:f1:0e:a0:6e:d7:c7:de:fa:f3:
         49:fd:3f:b1:7a:e0:74:46:c2:4f:ac:8d:4d:0f:a1:b6:68:76:
         86:5b:74:37:b2:c3:7a:a2:a4:5f:f9:db:43:92:49:0d:38:cf:
         3e:19:16:ae:23:c9:1e:68:a9:a2:8a:b8:1f:fb:6a:40:fd:80:
         ee:bf:36:77:f8:ab:e9:06:9d:35:46:0a:13:4d:5a:e2:45:20:
         d0:43:c8:6d:1a:4b:81:1a:21:4e:ba:7e:55:43:f8:43:1b:ef:
         4d:19:be:87:68:62:05:02:0b:8d:e0:17:2b:18:a7:43:78:6c:
         9a:84:f5:96:80:8b:1f:66:48:af:6f:df:10:15:5b:03:5e:f5:
         1c:d4:b1:0b:94:41:28:a2:9c:12:ed:50:7b:c7:2b:2f:7e:8d:
         d6:64:c4:32:4f:82:20:c9:52:24:19:52:8b:ee:d4:f3:da:68:
         74:39:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:08:15 2025 by rpki-client