Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa
File:                     132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa (raw, json)
Hash identifier:          Slqas7e2sZekhSixg901pMxK4izwJLcEaBuFhqK1y/M=
Subject key identifier:   02:BD:6A:5A:ED:F6:87:0B:F6:4D:69:E2:D5:D7:E1:72:B3:CA:E2:D7
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F4328584D40CA414B46BD7BA3CA6D4780
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        52.128.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:41:4b:46:bd:7b:a3:ca:6d:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4994ad18-623e-485b-8043-d3063700e0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:f4:88:0f:74:0f:1e:31:27:49:25:4f:e7:
                    3f:62:7b:32:39:0e:22:57:ff:3c:9f:70:2d:07:06:
                    5e:00:7e:2e:1b:78:42:8f:ec:59:d3:1a:0f:dc:e1:
                    91:b3:2a:96:42:74:05:62:38:d2:83:02:8f:e5:4a:
                    e8:f3:b3:71:e0:d8:04:1c:b0:3f:f2:ff:78:0d:4c:
                    34:a5:57:cc:c7:8e:91:89:dd:78:37:42:fe:72:71:
                    4c:59:d3:6d:46:29:99:9c:24:af:4a:65:be:13:4f:
                    75:4d:b9:24:a2:b9:bf:89:6a:22:2c:ba:bf:d4:d3:
                    9b:be:db:6a:ed:94:5a:1d:50:97:c6:79:11:17:ee:
                    34:e5:ac:56:1a:ce:5b:92:3b:e2:66:66:f1:15:b6:
                    46:89:08:3b:19:db:e2:91:c0:70:3f:65:4c:48:c6:
                    c7:ea:c3:b2:33:a7:da:2e:18:70:e2:2c:af:6a:a5:
                    6d:88:f5:3e:e9:c4:33:e2:ac:b4:2f:58:dd:af:b6:
                    90:f6:f8:ab:90:56:ef:77:ca:02:eb:d1:27:4a:16:
                    69:97:1d:e4:05:ed:03:38:7a:37:eb:f5:e0:3b:3c:
                    30:aa:63:b3:69:ff:7f:c8:14:78:ba:3d:7d:ee:b7:
                    36:14:6c:80:80:0b:11:9a:0f:ee:d0:c2:4a:5f:f5:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BD:6A:5A:ED:F6:87:0B:F6:4D:69:E2:D5:D7:E1:72:B3:CA:E2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:64:71:3c:84:b9:b7:95:58:3a:02:21:6f:1e:66:6c:9b:f2:
         57:98:95:34:0a:43:55:29:df:e5:ac:85:88:fd:9e:ab:a3:79:
         82:48:a7:32:f4:df:b7:34:fd:3b:0c:5f:b5:8e:9a:7b:06:6e:
         23:bf:30:e1:f1:0e:35:15:fd:28:92:18:e6:7f:d8:b2:71:41:
         69:78:74:c5:46:9c:a2:45:c6:af:0d:31:40:96:8a:bd:50:77:
         86:99:2b:22:4f:c5:08:be:11:97:24:19:93:fe:8b:0c:ee:fe:
         e6:17:cb:a3:2b:a2:01:66:a4:92:b7:3e:0e:9c:ab:18:a5:a1:
         94:8b:ee:30:30:c9:ee:ee:12:e7:6d:8b:49:3e:f5:58:f7:ca:
         14:16:b2:79:3a:9d:3a:b8:47:8e:15:c9:88:63:6c:f8:60:81:
         a1:d4:e6:8a:8a:99:49:f5:3a:05:98:4c:1e:bf:48:3f:b5:b2:
         16:de:06:e7:25:ef:51:fe:48:4b:67:0b:b1:c2:5b:5d:49:35:
         53:86:d0:47:d3:e9:de:86:01:0a:b4:d2:45:16:6e:e7:7b:75:
         d4:63:7e:b6:4e:46:0d:f6:88:c0:22:5d:c9:ae:00:6f:9c:37:
         4b:e2:52:6c:1c:36:2a:02:f7:43:78:e7:6d:9d:c5:8a:5f:79:
         df:7b:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:27 2026 by rpki-client