Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa
File:                     c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa (raw, json)
Hash identifier:          o/XTVOU/DspHWXBefYHrQuaRj4GZXFoqkZYZWBmIDAw=
Subject key identifier:   CA:00:B2:C9:DE:54:DE:F5:FA:C8:2E:D4:4F:6A:9D:21:9C:8D:C7:0D
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584AC8765BA3594273E3FA515300
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        52.128.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:5b:a3:59:42:73:e3:fa:51:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=4ac1b46d-72da-40fd-8152-7559ac0d9699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:79:c8:d7:f4:45:74:a7:4a:b6:59:49:97:
                    74:e4:d7:91:a1:49:ce:51:1c:0a:b5:10:74:35:de:
                    ca:92:d3:40:75:ff:f6:25:85:f2:dc:92:02:34:88:
                    b3:77:a8:ac:22:46:8f:cf:f4:30:31:5f:1b:10:cb:
                    2e:77:6b:8a:c4:4f:15:1c:6c:5b:c1:d6:9f:2d:b2:
                    f5:e7:59:86:04:58:b7:0c:9d:6c:a5:21:4e:95:97:
                    ec:a3:c5:60:fb:1f:7e:40:cd:7a:70:be:a0:54:99:
                    c9:9f:4a:7f:bb:d8:cf:70:84:46:ef:fe:20:1e:0d:
                    79:51:53:3c:dd:f1:97:24:03:31:bc:82:dd:73:0b:
                    b6:8e:9d:ac:8e:38:98:26:33:2e:3e:d2:78:95:7d:
                    bd:9a:cc:92:cc:0f:1a:81:f2:08:f5:07:c2:4a:52:
                    3f:9d:24:02:3a:48:03:c4:bb:9a:2c:95:7b:23:55:
                    eb:d0:f4:fb:b9:92:e6:14:de:16:6f:d1:64:34:ae:
                    94:9d:e7:88:77:ab:d4:19:02:e6:2a:18:5b:8e:b2:
                    9a:3d:53:a4:5e:58:bd:5b:fd:f0:fc:99:1e:3c:34:
                    0c:3c:fb:cb:40:a9:49:0e:fc:a4:c3:3c:3f:d0:7c:
                    c6:40:19:ad:6a:78:2e:63:cf:0f:3b:8a:1f:10:80:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:B2:C9:DE:54:DE:F5:FA:C8:2E:D4:4F:6A:9D:21:9C:8D:C7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:77:49:0e:c9:ec:1f:d8:08:cc:91:1a:a8:7a:4b:6f:95:62:
         59:29:3c:4e:b6:13:86:4d:69:d5:0c:9d:c2:b9:2d:ef:47:5c:
         37:c9:7c:68:0b:b8:8a:de:8b:84:c2:79:a9:2e:81:2f:6a:e9:
         00:54:7e:f2:27:86:e4:bc:05:47:ca:7a:87:50:2f:7f:1f:ef:
         93:ab:0d:a5:2d:61:5f:24:94:d1:d6:db:f6:aa:ef:94:64:89:
         ab:4e:5b:01:5b:4e:ba:a5:79:1e:b7:d7:b7:01:49:bb:d2:50:
         a7:da:5a:42:76:6e:8d:ab:2a:b2:3c:0e:c4:b2:44:ac:ac:77:
         5b:57:7b:62:37:93:dd:63:4a:86:54:92:43:5c:a8:9f:46:e4:
         ee:6e:ac:ce:06:06:9c:e3:0f:63:b7:2e:44:d2:4a:49:82:9b:
         3b:64:7c:86:34:b1:96:28:65:87:7c:00:f2:f0:d9:5c:ec:d4:
         ae:bc:f9:da:5d:2b:08:a6:1f:c4:73:4c:d1:1e:22:5e:77:d5:
         e0:ea:89:b8:ec:15:d3:df:dc:66:ea:70:a6:f3:45:18:29:a2:
         c0:c4:4e:d8:18:05:19:57:4f:66:3b:76:df:81:79:f5:b6:6d:
         93:45:4c:ee:79:c0:ff:c9:c2:4f:75:9d:d7:24:7c:77:d4:a0:
         0a:78:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:42:15 2025 by rpki-client