Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1b79461b-5899-3b0a-830e-757ffa2d0c33.roa
File:                     1b79461b-5899-3b0a-830e-757ffa2d0c33.roa (raw, json)
Hash identifier:          s6qW+0G+8u//lTy2v2vSjLZEFkVcSegV1QLBxza7xWw=
Subject key identifier:   4B:56:B3:B4:9C:0F:20:69:0A:9D:3A:3B:8D:F2:83:98:78:26:A7:9E
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584B2CF6DBA1332EC994B54CEE00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1b79461b-5899-3b0a-830e-757ffa2d0c33.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        52.129.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:db:a1:33:2e:c9:94:b5:4c:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=6be25342-5ff5-4187-9509-8442546f69d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:65:bd:f9:46:aa:f5:b7:db:b3:49:9a:f1:
                    ab:d2:1b:d6:4c:7e:10:bb:59:f5:d2:66:f1:97:04:
                    43:58:0f:f4:9d:7a:80:40:7e:50:57:26:a4:7f:12:
                    20:68:0f:9b:1e:64:37:ee:66:4b:46:89:58:a0:6d:
                    89:d8:3f:d6:bb:3c:e7:28:47:7f:82:e6:ea:c7:f9:
                    a5:7b:4f:c5:c6:99:28:f6:6f:f2:fd:41:66:dd:07:
                    65:52:d6:17:1e:aa:72:3e:48:c6:b8:78:85:c9:88:
                    60:16:97:ab:fa:23:f7:70:67:a3:a0:90:d2:69:e2:
                    ef:82:52:17:ad:47:ff:60:27:6d:38:a8:34:74:2c:
                    7b:72:eb:f5:ba:38:05:f5:c9:76:bd:94:bd:58:ac:
                    ec:81:94:8f:b3:a1:17:a6:99:92:38:76:40:37:a9:
                    70:ef:ec:67:43:b1:ae:67:50:ab:54:86:fb:c7:fb:
                    60:67:b0:7b:9b:f6:36:9d:65:cb:50:31:58:f0:c2:
                    f6:60:6f:c1:3c:48:5d:3a:2c:c2:96:b5:e3:0e:19:
                    cc:f4:45:3f:c1:92:c7:13:63:41:66:85:07:fa:47:
                    7d:72:4a:d1:2b:7d:78:76:61:92:dd:9b:4d:e1:41:
                    0b:07:08:73:a2:64:b6:48:9c:f9:01:f3:3f:f5:be:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:B3:B4:9C:0F:20:69:0A:9D:3A:3B:8D:F2:83:98:78:26:A7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1b79461b-5899-3b0a-830e-757ffa2d0c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:fd:f4:3d:51:b8:94:01:c9:47:aa:f7:51:5d:b5:e2:a2:
         b8:bc:d3:7f:78:4d:2f:51:fe:65:c7:d1:8a:27:a3:5f:d6:03:
         30:98:dc:8f:fe:87:58:d0:5f:d7:5d:66:a3:cf:b2:a0:07:2e:
         c5:fd:b3:84:4d:a6:c4:3e:ba:af:1f:79:7d:b7:75:f7:a5:f0:
         57:41:9c:cb:50:05:a2:3e:05:3b:da:b2:36:2a:7c:6e:f3:1d:
         c9:ea:8f:b1:3f:92:f6:e7:92:14:74:ec:57:0b:9f:7e:5c:a9:
         54:2d:0e:44:24:74:c4:83:e3:4c:ae:f4:d2:a0:81:8c:86:c0:
         9f:20:49:ba:14:27:9e:ad:18:f7:4b:67:e2:d9:cf:5f:95:a6:
         0f:9e:67:a2:05:4b:a0:af:7b:89:00:0c:0f:77:65:9b:e3:ae:
         8c:3b:8a:9f:56:74:cb:27:0a:bf:c5:1d:84:2e:a1:ec:ff:f5:
         97:38:7d:a3:35:ac:7c:b0:d8:06:2a:db:74:88:c4:f4:52:58:
         6f:04:4e:a1:a8:c0:b0:c7:29:c0:7a:69:72:36:78:60:9e:81:
         66:23:58:9c:c3:6c:67:f1:01:ef:52:9c:99:b2:bc:ad:eb:d4:
         d7:e8:3f:85:3b:d4:34:47:48:e0:2b:d0:53:72:c0:87:a4:f3:
         dd:c9:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:32 2025 by rpki-client