Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa
File:                     094143c8-ff7f-3f51-8461-0fce2db8fe81.roa (raw, json)
Hash identifier:          hiIFEDl7mAXhw0nHOJ06I2rAPH12IbFgyRDnzM905W0=
Subject key identifier:   5E:71:6F:14:D8:D4:CC:8B:C4:41:1D:9B:61:82:C9:AB:AE:CD:81:D3
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584ADECBACDB08CFE89A4327F4C0
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     399150
IP address blocks:        52.128.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:ac:db:08:cf:e8:9a:43:27:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=4b15ce7a-bb20-4d4b-bdea-ba704c65e7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:31:42:a0:96:99:5d:36:7c:41:b8:2c:f5:
                    7b:f6:e6:98:cf:78:73:8b:af:a4:7a:c9:72:e6:88:
                    f3:a1:d4:2f:14:06:cd:28:10:48:88:b4:01:6c:b2:
                    6f:14:27:b6:f0:40:76:19:ea:30:3e:ca:b6:38:99:
                    9e:ee:19:7c:ca:4b:77:63:3c:64:3a:1a:c2:cf:4c:
                    9a:7b:14:10:55:cd:cc:e4:90:16:be:90:d8:77:74:
                    24:ad:92:23:01:e5:68:59:65:09:c1:11:6e:f3:be:
                    b8:6a:b8:69:e2:0e:a0:7d:f7:ef:bd:58:75:89:c3:
                    17:4b:7c:2b:95:b4:d4:16:b2:45:ef:11:44:55:ed:
                    ba:f5:17:5e:24:6c:55:59:ce:26:cc:9e:7c:c3:77:
                    7d:89:13:e6:81:33:63:89:ef:c9:82:3d:96:c7:e6:
                    ea:c0:78:fe:37:84:66:bb:36:d9:9c:f0:9b:81:60:
                    18:be:7f:43:11:86:8b:34:19:13:3f:aa:76:eb:a9:
                    88:96:56:8c:62:85:bc:da:d2:89:73:ce:86:f2:3f:
                    2b:4b:71:ce:8d:e4:9a:0c:ed:15:59:db:4f:b7:89:
                    ac:5b:6d:8c:8c:42:15:a1:e8:a9:bb:ff:59:11:1a:
                    fb:ad:12:67:09:40:89:1d:29:e6:26:e4:91:68:3a:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:6F:14:D8:D4:CC:8B:C4:41:1D:9B:61:82:C9:AB:AE:CD:81:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:1e:58:2a:ad:0a:f6:ae:1c:c7:13:1e:64:17:84:a2:4f:
         94:61:b4:78:2d:43:43:21:e5:cd:80:d7:6f:28:00:13:b2:01:
         d0:75:dc:ac:d7:f1:8f:3b:37:d1:14:2c:00:0a:17:72:1d:fc:
         e6:10:7b:cb:95:46:88:9d:6a:59:9b:7d:5c:c0:18:e9:67:6b:
         5c:08:da:3e:e2:08:fb:01:0d:02:aa:7f:36:bc:14:3d:f0:02:
         ab:38:0c:45:20:63:ce:d2:8d:a2:bb:7d:77:d0:41:19:09:d3:
         19:ba:18:1e:87:1f:a0:1e:69:49:68:37:88:19:10:5e:98:67:
         45:2d:82:db:74:b9:e4:ee:bc:ba:0a:22:ca:e1:53:a8:68:be:
         6a:e9:c8:b7:62:27:0e:1b:a5:74:a0:73:78:58:f4:03:9e:ec:
         25:2f:e5:c3:d2:25:21:45:45:a9:0b:b4:8b:87:25:51:d5:73:
         a7:e0:89:d5:37:6f:d3:b9:bb:d4:84:a6:2a:c2:c1:e8:a7:fb:
         98:a1:65:62:7a:1c:ec:b0:3e:69:e9:59:f7:17:21:4d:46:b3:
         ff:6e:b4:a5:13:f3:e7:a2:05:94:98:8e:df:f6:d6:c2:25:83:
         6d:00:3d:db:00:1e:69:ba:70:24:ac:46:a8:c8:4a:0e:72:42:
         21:6a:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:07 2025 by rpki-client