Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
File:                     e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json)
Hash identifier:          frletqvGG1IhS8NrspjQtu4ZcqW1omgeHw164rKeUuk=
Subject key identifier:   5B:78:63:F8:EB:36:1A:73:71:D6:55:27:4B:84:90:9E:F8:5D:91:DC
Certificate issuer:       /CN=91e8565b-cd85-4439-818b-0c669c1e609a
Certificate serial:       010D0C9F4328584EA787F53EB66F8B2B54220A00
Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400745
IP address blocks:        52.129.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f5:3e:b6:6f:8b:2b:54:22:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=18843939-5223-463d-aad0-e1003960d3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:87:78:93:b1:e6:bb:61:61:f1:30:74:59:
                    08:34:40:fa:c7:bc:34:26:7d:6a:12:61:7d:45:20:
                    81:af:81:1b:82:f7:a4:d5:76:8e:e5:0d:15:53:4f:
                    fd:14:c6:a6:80:48:dd:c5:1b:23:3b:ad:4f:20:19:
                    ac:82:dd:e4:4b:0d:16:91:63:ab:ca:0f:d7:89:96:
                    b8:93:73:56:94:05:cb:14:02:90:59:c1:db:b9:68:
                    95:53:35:6e:fe:b5:10:6b:cd:23:d9:f8:be:43:32:
                    1f:5e:d1:07:25:0c:5f:01:b4:58:d9:c2:54:30:e0:
                    7d:60:36:6c:c2:05:aa:0c:47:c0:51:e8:49:0b:ff:
                    4c:4a:fb:60:50:23:7f:78:04:a1:27:de:7f:31:d2:
                    6b:a9:17:a8:cf:0e:9f:ac:e4:8f:ce:6f:53:a2:72:
                    30:2a:f8:72:88:2a:e2:49:44:88:6a:8d:cc:39:8c:
                    94:3e:14:dd:36:c8:54:64:0a:a2:8e:4e:9c:55:37:
                    b9:10:49:a7:5c:2f:48:c1:8d:14:72:13:e7:b4:58:
                    07:b4:12:cf:f6:ec:1a:17:91:e4:04:03:08:bf:96:
                    b1:d9:1b:f4:4b:b9:18:30:78:48:fc:0c:8f:5a:bc:
                    25:3f:24:d6:28:81:ac:01:4e:9d:92:f6:8d:88:2e:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:63:F8:EB:36:1A:73:71:D6:55:27:4B:84:90:9E:F8:5D:91:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl

            X509v3 Authority Key Identifier:
                keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:51:ba:47:e3:d9:36:c1:7e:c8:82:d9:75:6e:5e:cc:31:36:
         22:59:cd:3c:53:72:40:c7:81:0c:47:3a:97:de:ef:32:3a:b0:
         4f:0d:80:9c:36:2d:5d:b1:31:72:f6:16:42:84:8f:b4:67:6f:
         b7:86:10:24:c3:5b:23:4a:aa:c5:40:ec:12:0f:e6:11:66:67:
         50:71:eb:2b:1d:84:66:4d:32:19:f7:61:dd:db:7e:f3:c0:61:
         b2:a7:ef:bc:b8:63:7c:c1:a6:1c:0b:0f:c1:04:29:fd:38:d0:
         ff:34:94:53:ba:be:d7:05:22:70:4c:37:eb:4d:d4:3b:6d:30:
         7d:b3:f8:c7:ae:e9:ee:13:72:f7:59:fe:53:66:61:e3:3d:bf:
         88:30:9a:ee:a5:62:29:a1:3a:93:05:a3:d2:af:48:f3:d0:2a:
         ee:ca:08:64:6c:45:32:3c:d8:94:cd:11:f4:1f:43:95:16:1b:
         40:83:ea:aa:2c:22:ed:b5:9f:f6:3d:9e:bc:5f:14:e5:2b:bf:
         30:ad:c1:4e:0b:7e:4e:39:5f:70:12:dd:14:77:00:4e:46:5c:
         3d:89:12:b2:00:6f:58:15:94:a8:32:34:1c:84:5c:b1:85:89:
         82:b1:46:63:d3:a2:ad:f2:48:47:76:39:8b:69:96:db:69:bf:
         0f:9f:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 11:38:48 2026 by rpki-client