Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8be4765a-2603-3372-9042-f8cfcc6399a6.roa
File:                     8be4765a-2603-3372-9042-f8cfcc6399a6.roa (raw, json)
Hash identifier:          4XanSnh4hixOrbfvkJSMtdtiuZcFs1Sp0E1stjlOtJw=
Subject key identifier:   13:1B:EF:34:5F:8A:51:7B:D2:8F:90:A8:A6:42:8C:AB:69:FE:94:12
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584EF3AFADD8B6C6A07BB379AE50
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8be4765a-2603-3372-9042-f8cfcc6399a6.roa
Signing time:             Tue 25 Aug 2026 07:43:55 +0000
ROA not before:           Tue 25 Aug 2026 07:43:55 +0000
ROA not after:            Mon 23 Nov 2026 08:42:32 +0000
asID:                     402867
IP address blocks:        52.129.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f3:af:ad:d8:b6:c6:a0:7b:b3:79:ae:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug 25 07:43:55 2026 GMT
            Not After : Nov 23 08:42:32 2026 GMT
        Subject: CN=57fbe5d9-4c95-4b21-8f5b-df83c5596c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:28:ea:18:88:4c:ba:21:1f:4a:66:c6:9c:
                    41:ed:07:dd:f2:c5:2e:76:9d:de:64:c1:fb:72:dd:
                    48:00:1d:f1:b7:e2:f9:31:c1:e2:05:88:fc:ec:c4:
                    2c:28:54:66:1c:a9:6d:36:32:25:ec:cd:98:27:6b:
                    7d:2a:30:a1:b5:d5:dc:a1:cd:43:c9:3c:c8:66:f6:
                    7c:32:58:53:fe:a3:21:7e:34:b5:30:df:a2:fb:b9:
                    9a:55:8f:46:0d:32:60:3c:73:2b:cb:c9:c0:72:f4:
                    24:31:16:c2:a2:3c:e9:24:25:72:5f:d4:64:64:50:
                    ea:16:14:94:64:2a:d4:ef:d5:e3:55:e4:4d:e9:bb:
                    7d:c6:ee:f3:62:4e:e6:c5:cb:b5:b1:b4:d1:5c:95:
                    56:7a:01:dc:33:52:4b:73:02:38:e0:9e:6d:80:46:
                    a7:f1:a7:c8:5e:14:eb:16:4d:a7:cf:a6:7c:96:f1:
                    e7:08:9c:80:ee:11:ba:5a:75:9b:f2:1e:f9:bf:b5:
                    75:68:b2:43:d2:a0:ad:40:1b:d5:5a:65:27:15:5f:
                    63:e4:c6:61:47:f3:62:b7:c9:bd:82:12:26:53:e7:
                    96:5b:d1:d2:33:8a:e3:11:7c:b9:21:10:28:07:6c:
                    1a:dd:92:64:bd:a7:a1:fd:bc:8c:0a:1c:15:3a:63:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1B:EF:34:5F:8A:51:7B:D2:8F:90:A8:A6:42:8C:AB:69:FE:94:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8be4765a-2603-3372-9042-f8cfcc6399a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:6d:77:21:98:ca:75:5f:51:f7:c6:66:7b:5f:c2:60:83:
         37:60:6d:a1:a9:49:3a:13:0c:cb:73:6d:61:ad:fc:d2:55:68:
         58:0e:25:d3:35:27:5b:1a:e5:94:60:fb:4a:b7:d1:4d:ee:ed:
         d7:6a:2f:01:62:5b:d7:5f:e9:fa:40:1e:41:fb:b6:c6:b1:29:
         2e:6d:06:eb:0d:0b:b3:78:3e:b5:33:f6:db:8b:b6:25:8e:06:
         4b:8d:82:ea:1d:41:21:b2:de:7d:78:6c:11:a8:f8:f9:af:bd:
         79:d6:f4:91:33:e6:38:71:f5:60:48:b5:46:9a:88:8a:b8:6d:
         0d:6a:27:af:82:87:18:82:bf:5c:65:46:41:8b:56:ad:78:2c:
         bf:ff:e4:94:13:fb:9e:d2:6f:d4:ea:15:81:dd:88:9a:e5:a4:
         a2:bc:1d:7a:80:14:3c:42:03:c0:4f:7d:c5:ad:ee:2a:4b:c6:
         2f:bf:9f:0f:73:3e:70:3b:b7:67:ee:36:17:56:c3:32:39:41:
         72:c0:03:a7:1e:d4:63:fa:24:74:b9:d5:6c:af:54:49:a2:3e:
         ee:8d:61:36:82:b0:17:97:03:f1:85:a5:be:8d:75:bf:2f:fe:
         e7:f7:75:53:98:6b:ec:f3:67:60:5e:a6:4e:e4:a7:c3:c7:fd:
         e9:0b:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:37:34 2026 by rpki-client