Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c22202fc-2e4f-39e3-a518-2ed0240e9025.roa
File:                     c22202fc-2e4f-39e3-a518-2ed0240e9025.roa (raw, json)
Hash identifier:          fGepybuXsuCueDZKajzGOdtrlEJ5wjhUOQUOvQPVRkw=
Subject key identifier:   8D:C9:8F:4C:69:14:F0:B4:3C:84:02:59:8C:AF:47:E5:73:03:7A:25
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F4328584D40CA41C5C6FA177855203870
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c22202fc-2e4f-39e3-a518-2ed0240e9025.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        52.128.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:41:c5:c6:fa:17:78:55:20:38:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=9ebf99b8-6e17-444c-8115-8035720f6fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:55:af:3b:1f:7b:6f:53:99:6c:04:f2:d4:6f:
                    09:7b:ae:e9:bf:1a:64:b1:ce:3f:5a:fe:e2:35:94:
                    27:14:bb:a3:c5:ff:7b:ce:29:49:2a:7a:2d:99:7c:
                    2a:a4:3f:09:e8:fc:28:d0:59:ef:96:35:f2:31:2d:
                    d2:53:f1:9e:e4:1b:df:fe:95:47:fc:b4:f9:26:b3:
                    80:2a:2b:c1:86:4c:6c:1f:37:c5:a4:bf:ce:3f:6c:
                    b3:80:eb:dc:d3:92:f0:b3:8e:ed:de:4d:98:90:f5:
                    df:fb:7d:85:f9:fe:52:45:4c:36:bb:c5:c1:88:96:
                    86:1c:ef:7b:f6:98:91:3c:b3:f5:9f:3c:cd:5d:da:
                    fb:ca:e8:6f:b2:c8:af:43:6a:7b:96:d9:35:b7:b2:
                    d0:b3:a8:7e:dd:4c:1e:15:a5:a7:03:28:da:6a:27:
                    6d:91:ae:8d:05:ca:77:fc:d4:cb:11:3b:91:ab:70:
                    7d:18:24:2a:07:0c:e1:6d:3a:c7:19:b0:e4:e7:80:
                    69:54:c6:3a:0e:a7:5e:d0:35:32:ff:f3:b1:f2:a1:
                    61:1d:15:f8:3b:26:40:8c:0f:c2:c7:04:29:c8:b4:
                    1a:8c:78:c5:e6:09:50:f0:3a:59:0e:50:c6:18:37:
                    57:3e:85:19:8d:eb:13:78:9a:a2:68:1f:4b:7e:7b:
                    99:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C9:8F:4C:69:14:F0:B4:3C:84:02:59:8C:AF:47:E5:73:03:7A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c22202fc-2e4f-39e3-a518-2ed0240e9025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:30:5e:ed:be:e5:7b:43:b8:fe:f9:f4:3f:c3:11:81:d8:
         c6:32:c3:3b:86:b9:2b:e3:ec:e9:a0:a1:ab:7c:ac:c9:16:f5:
         5b:73:0b:a5:a2:fa:e0:a2:ef:88:b3:e0:e3:7d:ce:44:79:bb:
         ff:1f:25:7c:90:cf:d6:65:98:22:cd:b6:56:73:21:9c:1c:70:
         e9:54:1f:71:05:70:23:8a:18:db:bb:2a:46:39:b2:09:0f:a5:
         00:c7:30:57:06:9f:ce:f3:49:c7:df:2d:63:f7:70:f4:47:d1:
         e2:43:d7:dc:43:8c:c3:1b:74:da:79:a0:1d:2f:91:86:e7:c9:
         3f:3b:31:a3:fb:39:2f:bc:b5:bd:cb:66:7b:9f:80:33:de:5b:
         67:65:67:b0:cb:00:61:8a:84:fb:85:49:92:ba:5e:65:0e:15:
         a6:ce:d1:8a:8c:10:36:7b:e4:f3:2a:23:59:4c:6c:91:7c:b5:
         dd:d1:fe:bc:ad:69:32:4d:f3:44:2b:25:1e:ea:eb:4a:67:4d:
         72:a7:c2:e8:bd:1b:06:87:fe:92:92:46:67:76:31:7d:a7:a5:
         89:72:dd:5a:56:f9:3d:6d:8c:f1:09:92:89:3a:08:db:40:77:
         e2:15:58:47:45:8f:b2:89:c0:63:9d:63:f1:7b:a5:bf:aa:02:
         38:6d:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:12 2026 by rpki-client