Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/a5427593-da48-3a06-b4aa-51d977c7606b.roa
File:                     a5427593-da48-3a06-b4aa-51d977c7606b.roa (raw, json)
Hash identifier:          Qzeu7zxGKeAXwY1H8JCVuC2h6RqPZP1jb42eQw7k7JE=
Subject key identifier:   5D:E4:FF:FD:32:FC:FB:3A:3B:C7:39:55:E2:22:54:FD:03:B0:A9:AD
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584D4D5A6AF3B69F6A19C9280B40
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/a5427593-da48-3a06-b4aa-51d977c7606b.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     11260
IP address blocks:        52.124.64.0/18 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6a:f3:b6:9f:6a:19:c9:28:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=62b76a65-fea2-46ac-b9de-b03c35f1d804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:eb:89:55:c2:90:c2:a4:6e:07:df:94:56:
                    78:d1:2d:73:14:25:ee:31:63:6f:c3:c6:ab:76:5c:
                    ad:8c:f9:05:a4:bb:08:c6:35:c6:ec:ff:95:8a:44:
                    e9:ee:2d:2a:9e:1c:fc:18:6b:5d:76:e7:71:79:01:
                    4c:6c:7d:8b:db:af:11:4a:76:96:5d:73:48:c8:ae:
                    6b:8f:49:aa:24:25:4b:6c:50:18:c5:b3:19:a0:71:
                    36:a9:8e:b8:c8:3f:e3:c0:7c:e0:18:5b:f3:fc:ae:
                    5c:7a:53:9b:58:8b:aa:5c:62:9d:86:49:86:7b:e9:
                    47:d2:d7:64:1a:57:7d:78:76:fe:f4:12:a2:72:6d:
                    9e:0b:3c:00:b5:e6:5d:fb:ed:09:e1:6d:26:9e:4b:
                    6b:31:9d:1d:40:6e:3d:82:e0:4e:70:2e:e8:c5:6c:
                    4c:61:40:71:c6:59:bf:e3:cc:3c:65:5a:45:cc:58:
                    0d:78:97:e9:d5:87:49:96:7c:7a:07:0c:a7:a4:82:
                    e2:e1:e1:a5:68:26:e6:d7:b8:c7:4b:6f:a3:4d:39:
                    cb:3f:fb:9b:28:7e:0b:49:80:91:f5:cb:9e:9c:6e:
                    84:d2:43:45:03:75:7b:e8:80:42:9e:02:88:f8:2a:
                    b9:e2:97:92:8c:a3:42:d5:37:a1:4e:74:f1:67:57:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E4:FF:FD:32:FC:FB:3A:3B:C7:39:55:E2:22:54:FD:03:B0:A9:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/a5427593-da48-3a06-b4aa-51d977c7606b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:ef:25:a7:24:d1:e9:8c:ab:ad:aa:45:23:2c:67:13:cf:
         f0:66:ed:bd:80:b8:c6:67:ac:6b:c7:fd:7e:07:cd:de:81:32:
         a9:d4:00:c4:6a:ce:0d:a4:e0:dc:b0:6e:a1:da:d3:55:b4:8f:
         51:1e:1d:c5:10:1c:df:09:02:5d:87:be:4e:d9:7b:3a:11:68:
         f2:49:41:83:31:ee:4b:87:5c:24:94:5b:29:e8:d0:ef:f6:3e:
         62:ae:eb:17:79:4f:aa:f8:90:34:87:54:05:a9:9e:27:50:d5:
         9b:4a:6a:4d:e4:a5:5d:6a:1a:da:3c:dc:d3:13:16:d9:c7:aa:
         bd:85:91:f3:29:bb:a1:c8:ba:1a:f5:55:86:7d:a1:79:d0:dc:
         3a:d2:95:89:b8:c1:21:47:72:ad:46:7a:96:e6:f5:43:84:5d:
         a7:b6:82:f1:7b:56:df:7c:c7:1e:b2:8f:40:fe:bd:8a:aa:dd:
         e4:11:3e:16:2a:93:96:bb:2a:8a:06:8d:cc:32:b1:15:fd:18:
         08:aa:66:dc:c3:56:6c:c4:90:41:0d:a9:c6:9b:90:9a:33:60:
         df:a1:ef:48:b7:fc:04:25:f3:60:d9:01:74:8c:51:e3:7f:e8:
         9d:ec:31:61:fa:86:8d:63:a8:b7:13:2d:00:f7:41:5e:21:f6:
         36:88:90:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmrztp9qGckoC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
NjJiNzZhNjUtZmVhMi00NmFjLWI5ZGUtYjAzYzM1ZjFkODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNvriVXCkMKkbgfflFZ40S1zFCXuMWNvw8ar
dlytjPkFpLsIxjXG7P+VikTp7i0qnhz8GGtddudxeQFMbH2L268RSnaWXXNIyK5r
j0mqJCVLbFAYxbMZoHE2qY64yD/jwHzgGFvz/K5celObWIuqXGKdhkmGe+lH0tdk
Gld9eHb+9BKicm2eCzwAteZd++0J4W0mnktrMZ0dQG49guBOcC7oxWxMYUBxxlm/
48w8ZVpFzFgNeJfp1YdJlnx6BwynpILi4eGlaCbm17jHS2+jTTnLP/ubKH4LSYCR
9cuenG6E0kNFA3V76IBCngKI+Cq54peSjKNC1TehTnTxZ1dS2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3k//0y/Ps6O8c5VeIiVP0DsKmtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvYTU0Mjc1OTMtZGE0OC0z
YTA2LWI0YWEtNTFkOTc3Yzc2MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGNHxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAql7yWnJNHpjKutqkUjLGcTz/Bm7b2AuMZnrGvH/X4Hzd6BMqnUAMRq
zg2k4NywbqHa01W0j1EeHcUQHN8JAl2Hvk7ZezoRaPJJQYMx7kuHXCSUWyno0O/2
PmKu6xd5T6r4kDSHVAWpnidQ1ZtKak3kpV1qGto83NMTFtnHqr2FkfMpu6HIuhr1
VYZ9oXnQ3DrSlYm4wSFHcq1Gepbm9UOEXae2gvF7Vt98xx6yj0D+vYqq3eQRPhYq
k5a7KooGjcwysRX9GAiqZtzDVmzEkEENqcabkJozYN+h70i3/AQl82DZAXSMUeN/
6J3sMWH6ho1jqLcTLQD3QV4h9jaIkPY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:20 2026 by rpki-client