Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa
File:                     52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa (raw, json)
Hash identifier:          V0obnIRyngEpf//T8ZOt34I8bxAP392tZeQzlqz0zCs=
Subject key identifier:   91:02:50:CF:4B:FC:E0:A4:6B:F6:57:3C:D0:1E:E5:73:D3:DD:18:0C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965277525BBD138C771E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.44.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:52:77:52:5b:bd:13:8c:77:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=cbc1d4e9-1e62-485c-9abb-f92c22d7c1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:23:2b:45:15:2f:ee:79:ca:a3:91:87:8f:
                    ec:68:4f:1f:0e:3d:bc:e9:d0:f2:24:1b:d9:82:52:
                    83:61:79:8a:5e:df:d1:1c:7c:5c:a9:52:48:01:1f:
                    2f:ca:ca:ae:0e:53:6f:fd:7c:f8:a5:bf:3a:26:8e:
                    73:f7:be:2e:34:67:aa:fc:c4:79:82:85:af:65:15:
                    5b:37:3f:e5:1c:13:07:d4:d2:99:6a:2d:a1:b0:af:
                    b3:64:32:01:f9:d0:af:bf:37:2f:1a:fa:b6:15:af:
                    3a:77:5c:a8:2d:d2:c9:f3:33:4d:fb:5a:40:9a:8b:
                    fd:4b:77:3f:8c:f8:cf:f8:02:3d:b9:76:ea:1b:fb:
                    57:75:5d:02:b8:ed:be:56:f9:28:af:e9:1e:6d:d3:
                    70:09:5c:02:30:0f:10:53:9a:9f:bd:0b:b1:64:5f:
                    b1:c6:10:ca:53:a4:fb:7d:a3:5a:dc:1b:26:65:08:
                    76:9f:73:61:c4:2d:77:62:74:6b:93:8b:e2:70:8f:
                    ee:73:b0:06:e6:69:5d:99:2f:c5:67:c2:96:15:c7:
                    62:53:28:a7:9f:f1:17:82:b7:81:85:06:a4:04:33:
                    3d:90:c8:56:6a:29:63:90:63:85:7b:a9:12:d7:88:
                    83:8f:e2:8e:be:46:43:51:ce:da:05:2b:17:f5:a3:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:50:CF:4B:FC:E0:A4:6B:F6:57:3C:D0:1E:E5:73:D3:DD:18:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:cc:8a:01:27:65:5d:00:c7:22:01:49:c5:1d:2f:9f:88:
         ae:cb:5d:56:12:f3:53:6b:91:a4:7b:20:f7:18:dc:5e:01:52:
         c4:00:c4:9d:21:31:2e:50:77:b7:f2:f2:0b:43:44:97:37:ce:
         39:db:f3:49:40:02:47:76:f5:02:d3:3e:5c:ec:88:23:af:84:
         52:4f:df:72:ee:46:40:53:fd:05:20:d1:dd:cb:c2:39:83:57:
         ff:ba:6e:69:a1:33:0a:f9:a5:5a:7d:35:09:2e:05:f6:5e:d7:
         52:0f:b8:51:b4:0b:72:e1:0e:c8:2a:05:a4:e0:34:be:0e:c0:
         c8:0c:68:4e:54:4f:c5:5e:4a:c1:b6:26:50:68:af:b6:11:ae:
         8f:50:b7:ad:8f:8d:e7:27:e1:f1:a0:09:3a:22:4c:25:86:8d:
         5a:9f:37:c5:81:fe:52:3b:69:98:79:80:c2:18:63:24:b1:ea:
         5e:52:28:02:04:65:40:b6:fa:5a:71:29:7b:83:60:3c:45:1c:
         85:ae:3e:5e:08:4a:8b:e9:43:3b:f1:b6:1f:31:1c:77:3d:55:
         c6:99:70:a3:b0:9d:a5:c9:5f:45:cd:37:5c:0b:c4:dd:3a:14:
         3b:e8:63:cb:1b:c1:43:6d:fa:5a:6c:2f:7b:ec:e3:4d:25:1e:
         84:10:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:20 2025 by rpki-client