Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa
File:                     6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa (raw, json)
Hash identifier:          TrvCeNmqQev1WmjGf1OThitb0L0hhtsU4Y1ePD7qBgE=
Subject key identifier:   40:21:A1:47:B9:F2:74:48:22:66:5A:EB:5A:7E:C9:F3:31:BF:1B:D3
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584D571FA57530046C835AE09380
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        52.129.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a5:75:30:04:6c:83:5a:e0:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=5229d375-e63c-45c3-98d7-6a9046b74986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:80:05:34:ea:f5:b7:14:2a:62:ca:6e:2b:
                    b7:30:cb:b5:92:e3:08:30:d7:1f:56:7d:fc:20:61:
                    c3:52:f9:a5:cf:51:7c:49:23:6e:82:4c:8a:46:0e:
                    fb:53:39:57:ba:6c:c9:21:79:6b:e5:9f:cc:bf:ff:
                    ac:6f:ec:72:ff:57:36:0c:45:52:06:ba:f2:23:00:
                    a9:cc:5a:ad:d1:62:44:87:1f:6f:77:3f:f7:f1:fe:
                    1a:0d:ef:9a:d0:ab:53:dd:75:4d:47:89:28:dc:b8:
                    27:08:5f:63:51:d9:77:07:05:43:a6:60:a0:48:4a:
                    bd:3e:ad:8c:a8:ee:4b:71:c5:96:04:77:1b:5b:a1:
                    80:86:5c:fe:da:8a:52:56:5e:7a:04:b3:5c:20:7e:
                    72:7b:2f:3e:9f:b5:3b:fd:f1:3c:2a:4e:3f:1f:c7:
                    f1:69:d1:a1:81:4f:40:64:4b:cc:07:dc:34:1e:3b:
                    fb:4d:c8:bd:9d:a7:4a:6a:8d:19:c3:e2:c9:88:fb:
                    98:53:8e:a8:bc:82:f1:42:6b:c7:b5:aa:51:ee:01:
                    d3:0a:3f:ec:ab:a0:07:ff:e3:59:66:50:86:1b:3d:
                    24:9f:8e:d3:68:ad:3a:13:9e:ce:74:c2:1c:0b:21:
                    4e:57:fc:43:c5:be:a4:de:1b:26:fb:d0:da:0a:f8:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:21:A1:47:B9:F2:74:48:22:66:5A:EB:5A:7E:C9:F3:31:BF:1B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6da6c0f8-ff9e-3ad0-90be-6954d287179a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:37:36:16:4f:02:7e:f3:0c:1f:d3:0a:88:e6:a4:0b:3a:
         02:5b:1b:32:c0:df:bb:9a:3a:1c:92:ac:0c:1c:25:56:98:0e:
         06:cd:9b:c5:0e:b9:31:98:a6:03:58:ed:ea:35:3c:ee:29:45:
         e8:ad:01:16:48:9d:89:e6:e0:46:a8:70:48:2d:53:fc:ff:7a:
         92:ad:c8:77:55:f7:9e:06:27:82:dc:c7:e2:d7:cf:ed:2e:48:
         c1:ba:4c:3d:eb:39:60:e1:44:e0:66:00:e8:9c:7f:c1:2e:6b:
         5d:0b:f3:c5:58:21:69:a2:89:b3:55:bb:df:88:6f:19:66:c3:
         27:f4:ff:8a:cb:a8:00:37:1a:94:d2:34:bf:34:7c:d8:48:83:
         99:52:cf:04:c1:d6:3a:2c:64:3a:4f:5b:0b:f5:44:8d:ad:a9:
         c1:ce:81:a8:98:16:09:8a:ef:c4:5f:c3:eb:83:cd:10:ad:64:
         72:bf:76:70:7d:f4:ec:e8:6c:c1:31:a9:b5:25:8b:64:d7:61:
         b9:22:5b:be:66:26:12:db:7e:9f:49:24:2c:45:0d:ca:19:4e:
         81:da:40:a2:1e:ec:09:ef:b4:e1:38:3a:74:2c:e4:9e:fe:21:
         3f:66:b6:76:ca:cc:f4:e9:6e:c1:61:34:f3:4b:3c:63:63:5e:
         88:f2:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:08:35 2026 by rpki-client