Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa
File:                     6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa (raw, json)
Hash identifier:          A5pjGhuelKj5kNf2J1xAP4CpdkmGUskYOeOws2aaGzk=
Subject key identifier:   D3:66:2B:EF:02:F6:EA:37:BA:68:0B:61:97:22:75:4C:83:BB:95:A5
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E37646B4C47F428A9E01ACD40
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        52.129.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6b:4c:47:f4:28:a9:e0:1a:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=0b05191f-60db-4cad-8633-fb8e1dee1fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:f1:93:a3:ac:9d:46:8e:28:df:ac:e6:98:
                    9a:53:eb:0c:39:cf:f7:9e:3a:2a:6f:02:dd:d9:db:
                    16:23:3b:28:82:e9:b8:ff:c3:8a:fe:ba:bb:0d:f5:
                    1a:32:29:a9:13:ab:08:85:05:2b:fc:37:6b:69:b2:
                    53:13:5f:1c:0e:dc:c0:d8:21:c3:8f:78:c6:fc:75:
                    a1:1f:05:db:94:47:91:f6:fe:7a:4c:b5:53:fe:ea:
                    f3:7e:a8:12:b6:d0:c8:33:a2:0c:13:77:7b:67:29:
                    cd:c6:a3:0a:81:d2:5b:f0:fc:e7:fb:83:49:a0:d2:
                    7b:6b:a0:1d:de:5c:a9:1d:da:e0:bf:34:4a:5d:65:
                    c8:8b:3a:9c:f6:ad:d2:42:70:85:01:68:59:9a:da:
                    9c:f2:fc:c6:a1:71:35:f2:5e:26:dc:87:10:c7:56:
                    e8:3a:1b:c5:bf:ed:24:2e:90:81:a2:70:5e:a9:6c:
                    7f:4b:b2:de:d7:e0:8c:e0:b6:4a:8b:0a:06:9f:4e:
                    48:dc:42:34:3d:22:0d:5a:a3:0d:01:26:8c:18:a0:
                    17:d9:87:33:b3:e0:1f:18:f9:67:dc:66:bb:e6:10:
                    1b:83:e8:de:68:25:0f:07:53:07:33:b6:52:95:ba:
                    7b:4b:bb:64:4f:cf:24:e9:e2:90:1f:cc:09:4a:04:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:66:2B:EF:02:F6:EA:37:BA:68:0B:61:97:22:75:4C:83:BB:95:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:5b:fc:a7:8b:da:32:02:6b:ba:87:27:b8:00:6d:2f:fe:
         50:9b:d7:ba:fb:6a:03:5c:39:13:8e:97:62:e7:a7:3a:2e:20:
         75:9e:6e:fb:d6:ef:b1:ba:49:2a:84:6d:4b:65:60:d5:cf:25:
         c1:f6:fe:8a:85:83:74:dd:f0:c9:ae:ab:86:bd:98:fc:45:e8:
         4e:32:84:db:3a:39:f7:4a:be:52:c9:6f:c5:69:34:a0:67:20:
         ae:3a:08:de:53:73:71:35:c8:41:f7:71:fd:9b:21:85:c3:a2:
         cc:26:02:56:cb:5d:e7:7d:75:03:e4:8f:21:73:43:c4:04:0a:
         78:fa:79:ea:d3:d2:94:f7:12:9e:6d:39:8b:df:1d:b0:da:73:
         e2:8e:21:6c:6d:98:e4:6f:8d:08:d1:bf:e2:ca:7c:91:e4:76:
         74:44:da:53:fd:bb:64:46:15:71:d4:2f:a7:9a:61:9c:cc:15:
         11:02:2f:4d:af:03:f9:93:91:74:3f:88:e5:a2:d5:41:e7:01:
         26:a8:a0:46:db:d0:ea:2b:00:90:62:07:20:64:b2:60:7b:81:
         c5:29:79:e5:63:77:de:d3:a8:3b:f7:3b:60:ef:ff:27:9a:58:
         d2:e5:9b:6c:7d:fc:c0:05:08:0c:a5:46:ea:99:3f:b8:4d:ad:
         f0:9b:15:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGtMR/QoqeAazUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MGIwNTE5MWYtNjBkYi00Y2FkLTg2MzMtZmI4ZTFkZWUxZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpXxk6OsnUaOKN+s5piaU+sMOc/3njoqbwLd
2dsWIzsogum4/8OK/rq7DfUaMimpE6sIhQUr/DdrabJTE18cDtzA2CHDj3jG/HWh
HwXblEeR9v56TLVT/urzfqgSttDIM6IME3d7ZynNxqMKgdJb8Pzn+4NJoNJ7a6Ad
3lypHdrgvzRKXWXIizqc9q3SQnCFAWhZmtqc8vzGoXE18l4m3IcQx1boOhvFv+0k
LpCBonBeqWx/S7Le1+CM4LZKiwoGn05I3EI0PSINWqMNASaMGKAX2Yczs+AfGPln
3Ga75hAbg+jeaCUPB1MHM7ZSlbp7S7tkT88k6eKQH8wJSgSRRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNNmK+8C9uo3umgLYZcidUyDu5WlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNmJjMmMwNDgtMzNiNy0z
NmMxLWE0ZGUtYTU0OWZkOGY2ZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwGW/yni9oyAmu6hye4AG0v/lCb17r7agNcOROOl2LnpzouIHWebvvW
77G6SSqEbUtlYNXPJcH2/oqFg3Td8Mmuq4a9mPxF6E4yhNs6OfdKvlLJb8VpNKBn
IK46CN5Tc3E1yEH3cf2bIYXDoswmAlbLXed9dQPkjyFzQ8QECnj6eerT0pT3Ep5t
OYvfHbDac+KOIWxtmORvjQjRv+LKfJHkdnRE2lP9u2RGFXHUL6eaYZzMFRECL02v
A/mTkXQ/iOWi1UHnASaooEbb0OorAJBiByBksmB7gcUpeeVjd97TqDv3O2Dv/yea
WNLlm2x9/MAFCAylRuqZP7hNrfCbFcI=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:37 2026 by rpki-client