Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
File:                     36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa (raw, json)
Hash identifier:          p29A9GLZEsDPJy8uGohETYwO6JvG+F/dNibsL2bQ560=
Subject key identifier:   C6:0A:34:2C:BB:99:21:A6:10:4A:93:47:A2:9A:91:20:A3:54:0B:A5
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584BBFA59311F431F2DCD88F1F00
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     398712
IP address blocks:        52.128.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:93:11:f4:31:f2:dc:d8:8f:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=fae93385-7059-444c-823f-f35b203fa2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:02:78:30:b5:04:c8:a6:c7:db:5a:2b:d4:
                    37:b7:1b:d4:1a:10:db:41:3c:d6:ec:5f:67:cf:0a:
                    f0:0c:ef:2b:70:fa:70:66:51:29:f9:0d:ad:0c:4e:
                    78:89:28:5a:05:c5:45:6f:5b:01:12:cc:f9:de:89:
                    26:83:a8:98:59:74:dd:8b:9e:a5:4a:38:e4:28:e1:
                    df:57:65:21:2e:d7:81:22:7e:70:b6:6d:81:7e:36:
                    77:06:b7:e9:df:e8:56:ae:8a:f0:f2:75:e8:9e:77:
                    37:1e:6f:19:1d:61:96:5f:f3:0a:2c:04:a8:07:66:
                    26:f5:c8:92:d7:4f:12:17:96:a7:de:e5:dd:8a:b5:
                    66:c3:da:ce:ef:47:5a:34:85:0c:27:00:53:88:03:
                    4f:31:10:de:99:85:ba:35:ba:6f:10:dc:fc:ad:97:
                    23:a1:90:1a:c6:11:3a:45:f9:26:99:18:27:60:35:
                    d0:67:b7:42:cb:24:7f:a4:b1:d9:37:39:0a:f6:2b:
                    bb:9a:f0:8a:f2:a3:3c:a5:bf:e6:3b:d6:81:26:84:
                    62:ef:4d:fc:72:1c:d3:55:51:b7:c2:d1:97:bc:5f:
                    06:9e:ac:dc:a6:a7:49:78:53:cc:11:a5:4c:3a:9b:
                    ec:53:07:db:c3:e2:75:47:9b:31:48:fa:80:73:d1:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:34:2C:BB:99:21:A6:10:4A:93:47:A2:9A:91:20:A3:54:0B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:54:83:2c:41:42:78:28:0b:48:e0:8a:96:f7:fe:a3:5a:a0:
         15:cf:e5:27:c6:f1:95:5a:6d:b9:d4:09:05:61:ad:22:e0:3a:
         5a:8d:26:58:ac:69:1a:0a:73:9b:fb:f0:2a:c5:cd:da:d8:4a:
         e7:dc:c3:ea:f4:05:4d:09:a1:22:77:28:21:f0:95:5b:fb:06:
         32:ce:0b:98:ac:39:0c:03:77:00:00:81:3c:10:7d:4e:f2:09:
         81:12:fb:27:04:d3:df:4b:c5:85:10:c6:81:28:70:72:3c:6d:
         f5:c3:32:ec:9d:78:ac:74:34:e4:aa:5f:84:60:4f:a8:08:0c:
         6e:26:bd:d7:81:75:db:2e:e5:d7:33:92:2b:2f:7b:bb:e3:63:
         62:41:a5:7f:95:84:fb:d5:68:60:e7:d2:e0:1c:43:db:6c:a3:
         94:96:18:d4:d7:cc:93:5b:3a:01:5c:6d:59:ad:6e:0d:ea:6f:
         ed:a1:cb:77:94:6a:ca:a2:e5:bd:53:20:5b:90:75:2c:2f:fe:
         4a:38:6b:cc:05:66:f7:95:eb:0d:87:9c:ea:6c:af:59:fa:70:
         d7:22:f8:d7:18:47:72:90:95:27:90:78:84:34:b7:9f:90:16:
         c6:ed:d2:ae:a5:dd:84:29:7e:9b:f8:fc:d0:1e:ca:89:5f:13:
         de:b3:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:38 2025 by rpki-client