Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/55ade2b8-d208-3faf-933c-182d3bc6c237.roa
File:                     55ade2b8-d208-3faf-933c-182d3bc6c237.roa (raw, json)
Hash identifier:          pfZmpBOly2REPv8QmgxTSui2J4frS5vOvcyWbwtN/AU=
Subject key identifier:   7E:59:80:9F:43:28:A7:EB:CD:5D:9E:CC:E5:16:6C:7C:71:A1:70:1E
Certificate issuer:       /CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
Certificate serial:       010D0C9F4328584DB1DADB32822B17A72CAD9980
Authority key identifier: A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/55ade2b8-d208-3faf-933c-182d3bc6c237.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     53764
IP address blocks:        52.128.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:db:32:82:2b:17:a7:2c:ad:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=66196074-59b8-49d1-9ca6-3da76d1c10a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:a3:3d:c3:58:79:44:8d:2f:30:28:7c:aa:
                    64:2f:b9:38:5f:65:65:03:e0:9a:3e:fd:e1:64:9d:
                    d0:e3:be:7b:44:11:64:69:30:0b:41:a0:92:ab:f6:
                    ee:93:65:0d:41:c4:51:2b:54:ff:c7:45:a4:a6:74:
                    2d:d9:ec:8c:3c:2a:da:bb:cf:07:d3:94:b2:0e:77:
                    d1:06:8e:d9:05:a5:13:c3:7a:95:7a:f2:f3:c4:d9:
                    23:30:00:d5:a4:77:cc:90:44:60:83:04:c3:0e:7b:
                    d2:08:98:01:03:28:04:14:64:d7:97:60:a1:89:db:
                    88:f1:0c:10:27:7b:eb:01:32:83:eb:60:44:a8:02:
                    8b:c4:f3:c4:f9:6b:1d:98:2e:82:b8:35:57:99:51:
                    7e:5a:8d:01:e8:a8:cc:3f:93:dc:01:74:ca:57:29:
                    0f:7b:30:ba:f5:2d:01:6a:4c:39:0b:71:55:31:a8:
                    c7:93:a8:79:62:a8:86:3c:4f:97:8f:68:e4:c9:16:
                    63:9a:e2:14:e2:c0:12:f5:06:83:b5:a0:b3:d5:be:
                    34:73:06:7f:98:64:05:72:7f:23:b2:54:89:e7:0e:
                    8f:33:4e:bb:1d:61:f5:f8:16:e7:b4:f0:24:ff:e6:
                    d9:61:2f:f2:6b:44:de:3d:44:29:22:fa:1d:e9:aa:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:80:9F:43:28:A7:EB:CD:5D:9E:CC:E5:16:6C:7C:71:A1:70:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/55ade2b8-d208-3faf-933c-182d3bc6c237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl

            X509v3 Authority Key Identifier:
                keyid:A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0b:45:05:fb:d6:38:47:fe:53:82:16:5b:18:99:b0:8f:43:
         55:37:f2:cb:13:72:8b:1b:02:99:63:84:32:92:9e:ea:da:47:
         89:2f:df:2c:02:f1:04:0a:f1:8a:87:83:1f:bf:cc:36:f1:fb:
         ad:c5:0b:fa:8d:ae:e1:9b:a5:3b:15:a9:6e:9e:99:f1:6e:d4:
         6d:0b:9a:43:94:3f:ed:41:e3:08:44:51:47:8e:8f:e3:34:df:
         3c:a7:c8:cb:39:62:03:75:21:ac:bc:bf:ca:3a:58:9d:7f:da:
         a4:26:44:c5:7f:4e:38:3e:60:95:36:65:34:b0:34:6d:57:e1:
         85:1a:9e:bf:ef:b6:fc:87:77:62:f5:b2:12:38:4b:3a:b2:2d:
         7c:0d:f9:58:a9:5d:ca:96:ad:b9:dc:73:fd:cc:a0:8f:14:c0:
         a6:23:7f:96:f2:33:7b:ec:2f:22:1a:3c:7c:be:83:4a:0d:96:
         8d:39:ee:9f:9f:15:6d:fe:d2:40:3f:0e:a0:17:80:0c:74:b1:
         1a:b6:38:06:56:9a:73:2c:66:ae:9c:15:e3:17:11:bf:56:cb:
         70:d8:40:1f:2f:b3:0f:60:bc:ea:0c:1d:24:49:b5:5d:92:39:
         f8:77:95:66:32:a7:c7:08:6e:b3:cf:03:0a:b7:82:70:d4:6f:
         48:4d:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:04 2026 by rpki-client