Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa
File:                     db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa (raw, json)
Hash identifier:          bQ/Fzwgb1RL4I/1IJyEbvH1pavu5BaZ1hKvtGQB7K6Y=
Subject key identifier:   6A:ED:DC:EE:E5:D6:6B:69:DF:23:61:52:A2:2D:A6:C5:ED:CB:65:6C
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584ADECBB3D28B1DBE4EFC9A1F90
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     399150
IP address blocks:        52.128.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b3:d2:8b:1d:be:4e:fc:9a:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=dd706b93-0425-4635-ab5e-de95ac15c1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:11:58:00:12:e2:b7:f9:95:24:95:a8:05:
                    e2:51:a0:75:b9:ee:f1:e7:b5:d2:ec:87:82:b7:1e:
                    ab:c2:f7:ad:28:d9:03:33:87:7e:6b:bc:36:ee:4f:
                    03:cf:e5:14:35:16:87:a7:de:ad:d3:9a:10:dd:f7:
                    fb:24:f5:97:ac:13:78:2f:d8:9d:3c:ef:e2:7c:6b:
                    ce:ec:7e:d4:a3:28:8f:33:a3:c3:60:b2:a5:aa:2e:
                    a6:48:39:65:6e:e2:7b:ed:21:9d:a4:50:96:5b:4c:
                    be:2d:44:8d:17:dd:f3:24:85:50:0c:83:87:22:7e:
                    ef:4d:98:43:ca:04:ee:ec:e7:19:f0:65:9a:76:98:
                    e7:ca:df:91:29:d0:04:a8:6d:ae:01:bd:b9:2c:ff:
                    11:b0:f3:0c:55:df:91:fe:2e:3b:d7:a3:04:f8:67:
                    cc:5a:6c:69:72:20:55:17:89:e6:b1:bd:95:66:37:
                    55:f8:ba:ab:3c:1a:52:8e:58:38:81:4c:7c:2b:d3:
                    50:b2:43:2b:c7:8e:57:9d:c7:39:c0:e3:72:ec:b6:
                    9a:5c:ff:be:51:d4:9f:9a:7e:79:7a:58:fd:c4:1c:
                    61:4c:e8:23:30:8f:97:7b:8f:49:98:7c:95:ad:cc:
                    e4:63:2d:a1:38:3a:f4:8f:03:d8:1a:88:73:9f:0b:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:ED:DC:EE:E5:D6:6B:69:DF:23:61:52:A2:2D:A6:C5:ED:CB:65:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:a2:97:2b:8b:2b:90:07:70:63:24:81:81:a8:c8:03:0e:
         35:8a:35:af:a1:a2:dc:5a:eb:c9:aa:e7:57:a4:84:5a:e8:bd:
         3a:80:e2:51:b0:fc:3f:e5:10:88:cb:ea:d2:52:23:32:3a:54:
         99:3d:6f:52:3f:12:a4:8a:93:8e:b6:b1:4c:b6:cc:6f:13:09:
         05:cc:87:88:33:8f:96:70:6d:16:38:a2:57:61:c7:4b:d5:96:
         e4:06:f5:4a:71:08:f3:8b:49:89:bc:d1:56:ca:67:50:78:4f:
         70:71:fd:29:db:06:f2:4b:62:01:dc:0e:b1:f8:10:ab:68:a7:
         57:8a:17:ef:9d:b6:bc:20:2d:f2:23:3a:5e:8f:b6:b5:9b:1e:
         e8:b5:4f:ea:79:a9:4e:1b:be:3e:0f:1d:d4:a9:a4:8b:c3:cf:
         7e:7a:01:d7:3b:71:aa:90:e8:72:58:41:f2:1f:7c:a9:11:eb:
         de:d6:18:00:81:ce:78:ce:75:2f:cf:66:09:f4:d7:72:8d:ca:
         83:6d:f7:fd:e4:5c:26:9a:ca:d6:b8:6c:e5:27:7b:60:21:b6:
         4a:a0:0b:39:36:20:79:c3:92:e3:f3:47:13:e0:52:2c:c7:38:
         fd:f7:31:4d:9a:fc:7b:f7:73:04:cb:15:93:2c:67:0f:e0:00:
         70:35:90:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:15 2025 by rpki-client