Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa
File:                     a104e0ef-bc59-3bf4-807f-36926a598f6e.roa (raw, json)
Hash identifier:          WC8iQotRC5iJjPXVS870bugSp/YQXaXub5i4BtVcKtQ=
Subject key identifier:   00:A7:F0:B9:0C:47:10:32:8B:13:9B:AF:0C:6F:76:D3:F7:F2:13:E2
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584D80FFE087CCB0C474766F2150
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     398712
IP address blocks:        52.128.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e0:87:cc:b0:c4:74:76:6f:21:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=c89a8400-e062-4b38-a2f7-9b20331ebacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:ec:31:de:2a:a3:52:65:cf:59:aa:12:c1:
                    9d:37:65:a0:06:83:17:e3:5a:17:bf:56:16:70:1a:
                    65:3c:ce:57:82:40:61:fb:be:02:99:26:8a:a0:ee:
                    ba:83:00:07:a6:c3:f9:35:bc:9b:23:e3:13:1c:39:
                    61:59:2d:44:59:42:00:cc:5c:61:6e:ea:9e:00:0e:
                    71:51:d8:be:1f:97:29:3e:2a:d7:27:57:b1:26:00:
                    46:ec:71:d0:fd:9d:72:7e:8e:a2:c9:cf:8b:77:81:
                    c8:cf:b0:9f:3f:a6:b8:a7:3d:a0:e8:b8:47:11:06:
                    7b:9d:7c:2a:2f:f0:00:eb:5c:a0:b5:9e:80:fb:e7:
                    e2:c7:af:16:7f:fd:e7:1e:62:49:86:83:6f:97:b9:
                    80:32:bd:8c:eb:45:ef:11:f2:d4:62:83:b4:ec:85:
                    8a:07:50:6d:1d:86:e9:96:fd:b4:85:ff:d1:d5:7a:
                    ec:93:61:a0:e4:57:fd:d0:6c:d7:7f:e4:f5:28:10:
                    d3:90:f9:97:da:49:f4:b2:6c:fc:93:0f:66:ab:ba:
                    6f:bc:3d:83:9a:e0:74:7b:9b:bc:e2:4f:60:93:93:
                    eb:1a:c4:1d:2c:11:18:a6:bf:44:c1:1b:4d:8d:38:
                    a7:ef:c1:1d:6a:15:05:f1:3f:63:aa:c3:fd:e4:d2:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A7:F0:B9:0C:47:10:32:8B:13:9B:AF:0C:6F:76:D3:F7:F2:13:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:56:81:9a:63:bf:a6:53:6d:df:90:71:8f:f0:7c:3d:96:16:
         c0:5d:35:26:42:de:6c:c3:39:c5:90:85:10:4f:e9:d0:09:cd:
         6d:8c:fe:1d:ce:b5:37:97:c6:5c:bc:7b:c7:ef:73:5c:9f:47:
         97:68:83:01:8b:c0:ec:b9:03:95:86:02:57:6d:88:d8:7c:17:
         74:37:bc:aa:56:8a:45:70:d6:08:b4:81:1f:52:f4:6f:ef:0c:
         6d:7f:ca:58:c1:ba:8b:2b:17:34:7a:62:4e:b0:b7:72:55:d6:
         d6:4b:c1:73:64:f4:c1:5e:85:c8:74:16:33:b1:47:d7:f1:6e:
         bc:76:c8:2d:88:3a:e1:ba:af:f9:e7:e6:34:8f:3b:d8:01:73:
         d5:1e:53:c6:18:80:9e:ea:4d:a3:ac:26:0a:ff:21:d8:9d:e1:
         fc:db:2c:5a:0d:59:9c:dd:32:c9:6c:b7:73:06:08:2c:8c:e5:
         14:72:90:62:5e:04:8d:3b:70:37:4a:e8:96:11:ab:76:62:5c:
         ae:83:21:88:53:2f:60:ed:7f:b0:5c:b1:d3:db:1f:03:98:e0:
         b4:e7:ed:78:92:48:d0:30:23:ab:58:30:81:64:50:9d:15:23:
         8a:01:21:fd:da:08:93:1a:55:c4:d1:bb:a9:50:e3:d5:2b:cd:
         29:4f:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:50 2026 by rpki-client