Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
File:                     0400b87c-f24c-326c-a2a2-44c7961b7277.roa (raw, json)
Hash identifier:          9+7/khLjx/IXERDnbZxlMP245w2OildCt+nur2AX/Hk=
Subject key identifier:   30:B6:60:93:5E:F9:94:44:CE:47:96:46:83:6D:C1:6E:53:82:92:CD
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584ADECBB3E61896675C55AF4F80
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     399150
IP address blocks:        52.128.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b3:e6:18:96:67:5c:55:af:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=89850653-2b70-41c8-86b0-ec152bd71537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:62:e5:4b:59:02:dc:bb:39:80:31:73:31:
                    ad:2f:8f:6b:aa:2e:6f:eb:63:26:be:c7:5f:a0:eb:
                    be:dd:76:0a:13:a4:79:0b:4a:0e:85:5e:4f:4c:5b:
                    c4:ad:6b:21:93:e8:2d:31:36:3b:41:b5:98:84:4b:
                    60:52:3e:70:c8:6e:19:02:8f:3d:de:f3:0f:04:93:
                    06:1b:76:e5:a4:d5:5a:77:25:d2:2b:7d:71:96:6b:
                    4f:ab:30:b1:cb:44:ff:a2:6b:c9:4c:8e:a3:b4:db:
                    1c:6d:b4:8f:61:5e:91:01:2c:e5:f9:15:19:27:23:
                    c4:ce:8e:22:78:f1:63:8d:0f:72:b5:d9:06:53:f9:
                    24:3d:e3:de:ab:44:3b:22:d9:a7:36:c6:3d:51:f7:
                    f6:48:ae:df:2e:02:b9:08:b9:fd:1c:52:34:7e:25:
                    e8:9e:39:0a:47:31:d9:50:ff:d9:ba:80:97:83:9b:
                    af:2d:53:b3:9f:ff:29:93:a2:a9:22:15:b7:4f:da:
                    7e:48:a1:68:00:89:6b:98:3c:20:ce:53:48:1d:a8:
                    c9:1a:64:fc:c9:ae:f2:36:0f:80:5f:dd:25:6c:93:
                    d1:39:34:34:42:a3:46:44:0b:b2:22:f1:a8:b2:fb:
                    c6:fe:31:df:ed:67:db:0d:35:91:1b:fa:11:9b:6f:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B6:60:93:5E:F9:94:44:CE:47:96:46:83:6D:C1:6E:53:82:92:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:ad:ce:d4:03:d1:61:72:b2:1d:76:b1:2b:d1:5f:18:3c:
         8c:e7:b3:cb:f1:40:ff:9f:6f:8b:3a:f1:72:12:47:d5:fb:ad:
         0b:e1:63:10:15:45:18:6b:a2:40:a1:33:bb:c5:63:08:4a:9a:
         14:94:d2:46:30:d1:2b:98:a9:67:2f:1b:be:e5:59:16:01:3a:
         8c:d5:8f:f9:7c:a0:c4:aa:26:32:1c:2a:c6:9a:26:e4:5a:30:
         b4:d2:7b:e7:d1:79:02:4b:6e:30:04:b7:7c:4d:a1:4d:1d:d7:
         78:5f:98:4c:ba:ef:87:4e:8c:6c:85:6f:08:ab:cb:de:83:0e:
         93:0d:0b:27:8f:34:71:31:f7:ef:af:3e:55:0f:59:6f:b0:7f:
         8b:50:1e:e8:db:0c:4e:cb:69:7b:70:13:1c:11:17:f6:34:88:
         90:ec:b3:e5:83:29:b6:2b:96:0c:7d:cc:7e:7b:09:c6:b3:fe:
         99:28:43:f9:37:9a:aa:db:87:b0:9d:8d:b0:60:0b:fe:aa:3a:
         d6:b4:98:58:44:b1:06:5a:09:ec:31:7f:a2:36:2d:9a:83:57:
         97:77:f6:2f:39:20:2d:e7:f8:f9:e6:89:af:ac:cc:21:65:c2:
         e5:94:d0:7b:9e:06:84:8b:f5:d9:b2:92:05:d2:5e:9e:b0:fe:
         27:60:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:00 2025 by rpki-client