Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa
File:                     91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa (raw, json)
Hash identifier:          qwA9GV7XxXn0SC75N3QvRVTaibNjsJB5bI0RzG/yIUU=
Subject key identifier:   65:54:8B:C9:AB:53:56:37:D2:98:21:54:40:D8:04:66:86:6B:25:C7
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E37646783886418F871F6D1A0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        52.129.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:67:83:88:64:18:f8:71:f6:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=06434ccd-f00f-4835-9641-85f8343a3c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:0e:db:ad:e6:8f:36:24:f3:ce:9c:77:45:
                    15:d3:d9:8d:d9:e5:69:e5:f9:89:18:a7:62:b1:48:
                    6e:eb:eb:66:4b:51:f7:56:15:58:19:15:e3:71:ba:
                    e9:53:79:e6:cd:07:6f:c5:48:fe:1b:0b:49:8e:1c:
                    15:62:59:0d:4a:ac:8a:fd:3e:f2:53:17:51:96:08:
                    7c:17:c3:60:4a:fc:26:91:2d:12:2e:9e:37:02:c5:
                    6e:c9:25:a7:12:b5:55:3a:d7:c3:1e:1f:c8:e3:a2:
                    5a:42:33:aa:44:c4:4e:62:ba:65:64:34:f4:04:7c:
                    6a:b2:cd:c8:5f:10:13:d4:29:00:41:be:e1:2a:ec:
                    f5:24:1a:50:91:20:13:c7:cd:80:26:90:ce:7e:a4:
                    39:80:b0:5f:3b:5a:21:a3:90:de:75:31:a6:29:fc:
                    9b:2c:27:9a:ce:21:1b:76:48:c7:62:03:5f:03:73:
                    8b:fc:0f:6f:fc:50:1c:43:f1:4f:97:8e:94:70:75:
                    3b:28:33:76:cb:c8:54:6a:c0:04:c9:3e:15:fa:b1:
                    b9:1a:69:9a:fd:30:72:04:b6:1d:0e:15:77:27:21:
                    02:96:14:57:b6:4b:ac:51:1c:58:9c:da:4c:6a:b0:
                    de:32:d6:ca:41:61:cc:2f:5d:75:e7:6d:5b:8e:64:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:8B:C9:AB:53:56:37:D2:98:21:54:40:D8:04:66:86:6B:25:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9e:45:06:c8:61:fa:d9:63:29:3b:95:09:f2:74:68:e9:b9:
         64:36:d6:34:31:5a:3e:7c:09:11:6e:34:58:f5:30:3e:c6:c8:
         b5:3e:1a:6d:b1:91:74:4e:e3:75:29:ed:06:d2:17:6a:e9:34:
         9f:30:8e:59:df:f2:2e:36:2b:13:fd:3c:aa:d1:f2:02:93:10:
         41:2a:f3:df:c7:d8:76:99:75:99:32:a9:88:6f:a7:dd:a6:32:
         6e:8e:d9:25:a4:f4:14:f8:6d:f2:e0:57:f7:de:68:5b:f2:5d:
         2b:a6:b2:81:bf:90:ef:fb:f1:a0:5f:39:ab:75:6d:d7:d7:db:
         6e:e4:89:13:27:1b:02:3c:b7:4c:cc:2e:06:e3:c9:5f:4e:ff:
         5e:ec:42:1a:fe:bc:9d:70:4d:24:7b:ff:e9:94:7c:41:45:04:
         fa:30:81:f7:f1:e2:3d:98:cd:c2:bd:dd:02:03:45:a1:97:2c:
         16:26:ea:1f:66:35:6e:5d:05:fb:37:4d:8b:7b:aa:53:14:6e:
         95:a6:09:45:f0:92:08:7f:2a:cb:96:f8:90:3a:d2:51:21:9f:
         47:21:ad:33:59:8c:76:50:39:75:a6:84:b2:46:fa:a6:de:ab:
         f5:b3:83:02:2f:a5:05:17:4f:1d:54:b6:9a:25:b5:4e:58:4b:
         a7:53:db:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGeDiGQY+HH20aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MDY0MzRjY2QtZjAwZi00ODM1LTk2NDEtODVmODM0M2EzYzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsygO263mjzYk886cd0UV09mN2eVp5fmJGKdi
sUhu6+tmS1H3VhVYGRXjcbrpU3nmzQdvxUj+GwtJjhwVYlkNSqyK/T7yUxdRlgh8
F8NgSvwmkS0SLp43AsVuySWnErVVOtfDHh/I46JaQjOqRMROYrplZDT0BHxqss3I
XxAT1CkAQb7hKuz1JBpQkSATx82AJpDOfqQ5gLBfO1oho5DedTGmKfybLCeaziEb
dkjHYgNfA3OL/A9v/FAcQ/FPl46UcHU7KDN2y8hUasAEyT4V+rG5Gmma/TByBLYd
DhV3JyEClhRXtkusURxYnNpMarDeMtbKQWHML111521bjmQ5hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVUi8mrU1Y30pghVEDYBGaGayXHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvOTFlNDUzY2ItYmU1YS0z
ZDJjLWEwZWMtOGYyNjFjZDA4NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOeRQbIYfrZYyk7lQnydGjpuWQ21jQxWj58CRFuNFj1MD7GyLU+Gm2x
kXRO43Up7QbSF2rpNJ8wjlnf8i42KxP9PKrR8gKTEEEq89/H2HaZdZkyqYhvp92m
Mm6O2SWk9BT4bfLgV/feaFvyXSumsoG/kO/78aBfOat1bdfX227kiRMnGwI8t0zM
LgbjyV9O/17sQhr+vJ1wTSR7/+mUfEFFBPowgffx4j2YzcK93QIDRaGXLBYm6h9m
NW5dBfs3TYt7qlMUbpWmCUXwkgh/KsuW+JA60lEhn0chrTNZjHZQOXWmhLJG+qbe
q/WzgwIvpQUXTx1UtpoltU5YS6dT20Q=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:08 2026 by rpki-client