Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa
File:                     cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa (raw, json)
Hash identifier:          CO4Qe0ThwdGFOMIwG3ewEdZw64JenUBRzqSjmkMrktE=
Subject key identifier:   43:B5:27:A9:3F:7F:5A:54:9F:1D:3B:DD:1B:46:EC:EA:95:29:3B:8C
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584D80FFE5C9DF73EF1179924100
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     399150
IP address blocks:        52.128.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e5:c9:df:73:ef:11:79:92:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=8ca5c9fc-452c-4cf0-884b-f2b6142e2bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:ac:5d:1c:d7:bf:ec:ce:30:ad:f1:d3:4c:
                    a8:89:18:35:c8:80:d9:81:91:93:2a:b8:dc:3c:8d:
                    6d:05:57:f6:03:0b:3e:ad:94:cb:83:0d:ff:10:dc:
                    30:1a:ec:b6:1b:4f:7f:88:c4:54:f0:d6:65:be:3f:
                    95:a6:f8:42:35:a3:91:b0:54:77:2b:3a:db:ba:24:
                    91:1e:86:e1:2f:2e:ae:c1:51:88:d5:b3:21:8e:20:
                    08:14:b7:11:83:b4:5c:62:57:d6:b8:60:f5:a8:0a:
                    32:9d:02:3e:fa:be:01:94:ec:51:ea:8c:1c:84:fe:
                    a4:91:5b:0d:09:ad:e5:d3:30:06:26:78:fa:d0:c7:
                    91:e0:75:a6:d2:20:8c:ee:2d:e1:5d:a5:ad:3d:b8:
                    a0:99:f1:8d:83:79:74:df:a9:90:97:99:20:28:9a:
                    4d:c7:3a:19:8f:d6:f3:4f:3a:b1:2d:ff:49:7e:3b:
                    32:f2:4d:c8:42:6f:f5:5b:87:ff:93:82:4a:e4:53:
                    f8:ac:76:9a:1c:ac:59:2f:88:7a:e6:d3:05:85:4e:
                    6c:d8:60:9f:09:76:e9:8f:05:53:44:3a:78:1f:ce:
                    ca:27:1b:e3:29:f2:d8:14:46:ac:26:b3:90:b6:a0:
                    30:73:32:7b:81:92:33:51:57:1c:f1:d0:e5:29:5d:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B5:27:A9:3F:7F:5A:54:9F:1D:3B:DD:1B:46:EC:EA:95:29:3B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:13:f3:ef:1c:84:d0:20:04:93:89:ef:5b:40:e8:84:cb:
         cb:16:f3:4a:9f:7a:21:5a:6b:2c:3e:b4:4f:bf:2b:27:17:fa:
         67:46:99:9f:41:4a:d8:9a:70:df:4a:01:11:8a:a9:12:89:09:
         2b:07:ff:60:6b:5e:63:cb:6a:f5:34:b0:86:50:4a:b2:8a:9c:
         8e:72:0b:d2:bf:0a:e2:a0:ce:1d:35:9b:42:54:fa:ad:91:54:
         ae:51:b6:98:50:e4:e2:be:4d:04:c5:44:bf:2c:42:b3:70:5c:
         71:28:03:b1:d6:86:46:1d:b9:c0:58:fd:12:61:26:1d:2c:56:
         7e:ca:c9:64:cc:8d:e1:39:c5:b4:fd:18:9c:53:41:1b:e6:54:
         72:ff:18:61:a9:b7:82:35:14:46:b1:92:37:fd:d2:45:f0:a7:
         25:91:68:53:10:24:75:8f:65:d0:56:8c:0a:f5:d6:69:63:4c:
         9c:6b:f8:c8:20:6a:6e:67:0d:be:b7:11:c0:d1:ed:cd:6f:09:
         c5:cf:5d:2a:63:13:75:3d:8e:d7:58:5a:89:bf:7a:3f:aa:9c:
         55:e7:57:0d:f4:ea:72:ba:3e:1a:3f:67:54:84:9a:54:e6:20:
         09:89:78:43:cc:7e:d7:f7:0a:c0:f6:0f:d9:6e:ac:a4:ec:2a:
         85:82:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:07 2026 by rpki-client