Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6add81ee-fba4-32b6-861e-8573634f18e6.roa
File:                     6add81ee-fba4-32b6-861e-8573634f18e6.roa (raw, json)
Hash identifier:          oF8svwJepTS+ZF+ozrudoqlEDYA3Z/2DvXCHwzAgQ/g=
Subject key identifier:   B9:30:B5:D9:24:AD:59:EB:8D:45:C2:4E:16:5A:58:E5:19:52:41:00
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E376467C1DECB5B522A771860
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6add81ee-fba4-32b6-861e-8573634f18e6.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        52.129.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:67:c1:de:cb:5b:52:2a:77:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=3c990212-e281-47e9-9858-45a074f82e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:a9:b3:29:9b:77:d7:d8:41:f7:75:c4:2a:
                    c3:d9:12:cf:e2:46:ee:7b:e9:3c:88:40:b8:62:35:
                    3a:3e:49:34:6d:de:01:55:45:b2:f3:cc:1d:ee:1f:
                    85:50:fc:9e:6d:83:81:16:86:af:bd:77:32:22:7f:
                    ce:7b:0d:be:12:ba:a2:e6:c4:15:9a:cf:80:17:8a:
                    f5:db:15:d7:b5:8e:a6:cb:39:bb:6a:d7:c7:61:f5:
                    32:d2:65:53:1f:aa:6d:a9:c8:a1:cb:67:46:b0:e1:
                    7c:35:2e:6b:bb:bb:bc:cf:fa:06:21:1a:4a:37:be:
                    9c:9c:d5:c2:a4:4a:30:f7:2c:a9:82:03:88:b3:1d:
                    40:64:e5:45:34:95:46:b9:8c:cf:22:8b:ad:c1:84:
                    6f:28:3f:7a:97:c9:78:bc:ee:9f:58:85:69:cb:52:
                    20:46:e8:dd:32:05:14:ab:3c:f8:f7:42:0e:18:9f:
                    68:92:1a:ac:7c:69:a3:36:32:b6:86:90:de:8d:8d:
                    7f:55:7a:c6:92:f0:7a:fb:e9:46:fd:29:2d:c3:21:
                    12:2b:c6:e5:3a:ad:c0:ba:91:c4:c6:f4:21:04:a5:
                    86:8a:f8:8b:e1:4b:88:a0:3b:6f:11:9f:85:48:0b:
                    3a:db:d0:b5:78:dc:df:25:e8:84:4c:20:4f:b2:a5:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:B5:D9:24:AD:59:EB:8D:45:C2:4E:16:5A:58:E5:19:52:41:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6add81ee-fba4-32b6-861e-8573634f18e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3e:59:58:2e:3e:55:ce:6a:a4:49:0e:48:51:48:7a:cf:92:
         5f:2f:c4:72:28:1a:b0:6b:b9:1c:aa:e4:ec:03:70:15:09:ad:
         d0:1e:16:21:c0:9c:12:81:1e:45:bc:04:d4:66:1a:69:a7:c3:
         09:e2:f2:0a:4e:c5:47:e5:08:f9:f3:f1:7d:b5:a1:4b:5d:9c:
         94:0e:7d:55:98:df:10:b6:08:66:06:61:55:c9:1e:ca:88:3e:
         5c:16:5a:c9:28:af:82:a1:39:b0:0f:b5:ad:8a:32:d9:25:10:
         13:8c:bb:f5:20:4b:d8:d3:58:10:ed:4b:f8:7e:eb:c3:5a:5d:
         9c:d9:2e:10:8f:9a:9d:69:04:5c:f4:d2:f2:af:0e:4c:17:63:
         c1:ea:af:91:72:92:7d:cf:f9:0c:2e:fe:91:39:2f:df:a0:18:
         50:23:ec:53:c0:1c:5f:de:49:7e:8b:8e:6e:40:66:84:16:fa:
         62:19:43:9f:b6:4e:fc:1e:f2:b7:83:aa:96:f4:4d:1c:cd:2c:
         1b:a1:73:69:00:2a:2d:48:f7:9e:23:7e:2f:ae:80:7f:0e:94:
         fd:57:dd:53:30:ca:19:b6:1d:aa:d3:47:22:b0:ac:92:b2:88:
         0f:ba:76:da:7e:89:6c:e6:d9:72:10:a9:18:94:b5:ba:5a:5b:
         8b:cf:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:14:19 2026 by rpki-client