Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa
File:                     db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa (raw, json)
Hash identifier:          +g25dkMjEBkB9YVvRLg81wlbSppDqgDZ4+Twe0dK3Lk=
Subject key identifier:   4C:DE:AE:5A:35:13:22:6B:83:F4:CC:51:B1:59:98:A1:FD:3B:E5:25
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584D80FFE5E8C89441CE6764DF00
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     399150
IP address blocks:        52.128.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e5:e8:c8:94:41:ce:67:64:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=472345dc-c646-467b-8665-a40b1b8b2c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:0e:34:2c:f0:a8:a3:a7:25:08:f5:4a:b0:
                    f3:c6:41:0b:91:09:e1:91:68:86:6c:94:68:68:10:
                    62:df:61:fc:14:28:34:40:46:00:78:c1:06:45:bb:
                    00:bc:15:0d:7d:84:c7:3f:c0:e1:7d:f1:06:61:7a:
                    e4:ce:f1:9f:e4:27:22:c3:22:bc:91:6c:09:1f:a7:
                    ed:a5:b5:b4:6b:ef:8f:1c:90:df:b0:f2:a7:e0:5b:
                    6a:8a:bb:dc:f0:51:ac:01:bb:e1:5c:99:15:98:d6:
                    c3:13:54:a6:7c:74:26:e3:fc:f1:b1:5a:af:a6:e0:
                    6d:89:e8:a8:c5:68:d8:de:2a:a0:47:e4:e9:a3:b6:
                    51:a0:c8:57:56:c0:31:f9:11:9e:52:c5:ea:3d:ed:
                    78:a7:02:c8:08:77:c0:0c:7f:71:ef:1b:b4:12:87:
                    a1:1e:89:89:43:39:4d:ca:f6:f8:60:1f:64:82:d7:
                    2f:a1:73:66:f6:e1:c3:c9:b4:7a:03:1b:f0:95:ea:
                    17:2d:22:ee:2d:18:f8:b0:78:9c:eb:62:f2:47:aa:
                    9e:53:7c:7d:9b:6a:12:0e:0d:99:ff:75:19:99:4c:
                    4f:78:ee:8b:e6:3e:44:30:e0:60:b8:02:12:3f:88:
                    8b:12:c3:0a:79:4b:70:d8:80:4d:cc:51:b0:55:de:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DE:AE:5A:35:13:22:6B:83:F4:CC:51:B1:59:98:A1:FD:3B:E5:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:aa:34:15:4b:c9:ae:7e:ad:59:53:d8:b2:d2:57:de:c4:
         66:d1:a9:24:69:36:b8:50:50:68:80:69:32:94:40:d3:0e:04:
         52:7d:a0:5e:56:15:2c:42:a0:41:d9:f5:9e:c5:31:0a:10:20:
         47:15:46:a1:79:8c:81:3c:19:a6:56:4b:c7:81:76:5f:65:f7:
         eb:6e:50:54:8b:bf:0b:af:6a:c3:7b:9a:ef:9b:15:52:a5:6c:
         c1:8a:6d:8a:d2:60:f5:eb:0e:a6:79:be:37:8f:80:b0:0a:09:
         c4:f9:79:75:84:90:59:ff:a7:b6:2b:87:4e:33:9a:1d:06:94:
         0d:7c:04:2a:72:41:78:33:90:af:48:38:73:f5:2e:64:4d:e7:
         fd:33:32:10:10:fd:74:5e:7c:ee:a2:25:67:10:66:d3:3a:27:
         cc:5f:3d:0b:26:fe:0b:a7:ef:3d:65:f9:55:09:c0:b5:61:6e:
         42:b4:45:07:8c:7e:03:0c:7f:00:02:dc:8a:b5:8c:38:c4:62:
         83:cf:ec:1d:cd:04:93:3f:1f:4b:9d:38:77:d0:45:0e:50:26:
         9b:a6:91:4a:d9:f6:dc:a7:4e:31:1a:0e:ec:48:49:e7:07:52:
         d5:01:e3:ca:7e:aa:61:c3:68:32:16:a5:a9:4d:d7:45:1d:e1:
         0c:fb:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:23 2026 by rpki-client