Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
File:                     9d2235b7-541b-384f-9916-48c6dc43d957.roa (raw, json)
Hash identifier:          SSQeVKWvaZoW9gWA9U4ObLiQiCk2UOV+chJ4ksmZGNg=
Subject key identifier:   C2:7C:29:DD:1B:82:BF:F7:0D:F8:32:5E:1A:50:ED:09:F1:63:C5:70
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584ED9C74824FF3297B2ECCB5120
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16509
IP address blocks:        52.129.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:48:24:ff:32:97:b2:ec:cb:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=be185abc-c4ec-4d6e-a061-0fa4b8adeb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:94:60:d6:42:de:85:e4:b4:48:4f:fb:10:82:
                    e5:c3:1e:8b:62:1d:9f:6c:04:c9:5c:b2:7b:42:e8:
                    90:e6:83:b5:dc:41:9c:d8:73:8d:4e:a9:18:93:fe:
                    d2:f2:72:64:a6:db:b6:16:5e:7c:0d:9b:4a:a1:95:
                    bb:33:72:b3:d9:e2:49:97:7b:f4:e9:6e:4b:97:e7:
                    54:c7:00:3f:bd:9a:90:72:e7:0e:2e:28:64:27:bd:
                    4e:51:61:6e:95:52:0d:a4:9d:5b:59:59:b4:f4:3a:
                    20:ea:14:f6:d3:dc:ef:a3:e6:ce:2b:d1:b5:f1:56:
                    6c:8d:ad:87:05:98:1f:47:d4:ca:79:50:6d:26:85:
                    b8:c6:76:66:93:81:48:c9:57:b6:93:f4:99:13:3d:
                    ed:2d:e4:ea:55:2f:fc:24:05:ab:28:c2:db:84:b1:
                    ca:8f:31:5f:f3:c2:98:96:77:34:19:07:c0:b6:a4:
                    3e:07:7d:3d:4e:37:47:0c:d5:45:9a:b4:89:d6:ba:
                    62:ee:b5:48:6e:7f:fe:e7:12:f5:56:40:0a:e2:d7:
                    24:62:9b:fa:e9:5c:3f:59:0a:67:52:fc:25:03:89:
                    a3:75:7e:a2:ab:96:9b:ce:20:b4:cd:6e:18:16:eb:
                    5e:d2:1b:56:1d:be:d9:88:8d:1f:46:e7:82:b0:c9:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:29:DD:1B:82:BF:F7:0D:F8:32:5E:1A:50:ED:09:F1:63:C5:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:24:d8:10:5e:94:26:84:65:79:11:0d:d0:fc:31:09:80:d8:
         e3:9c:4b:ea:9f:89:ca:51:29:b7:c9:7b:cb:1f:f4:d9:e3:96:
         b1:38:dd:c5:0a:84:7a:27:30:2d:a4:b5:8d:6b:97:b0:2e:4c:
         dd:9c:28:2f:95:82:ca:65:11:c6:c4:52:0b:25:7c:c0:37:7f:
         be:31:b6:03:5e:94:eb:45:db:2a:b9:37:a9:94:51:ba:8f:74:
         93:05:69:c0:44:93:2a:83:f5:7e:3d:3c:17:96:b6:89:74:c6:
         10:e4:4e:3f:dd:d9:10:b4:4b:8f:3b:aa:ec:24:28:a7:1b:2e:
         56:b5:0d:4a:8b:d9:1e:03:12:51:c7:93:b8:24:c2:07:ea:2c:
         62:66:3e:aa:ac:3c:6b:cd:16:b0:5d:88:3e:e2:bf:58:05:c3:
         4f:f5:18:fe:a0:39:df:4b:31:15:68:4f:67:36:fd:17:11:c0:
         f7:52:a1:44:13:65:e2:cc:b9:95:f6:35:b0:e0:aa:dc:d2:44:
         7b:7b:a3:cc:64:57:dd:36:14:17:31:1c:38:67:75:79:55:fd:
         2d:03:b7:fd:d1:4f:b3:15:1f:21:56:da:55:4d:32:b6:11:31:
         b9:63:2f:ce:6a:27:01:57:75:4a:3d:24:c2:1c:9c:48:57:5e:
         69:1c:64:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx0gk/zKXsuzLUSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
YmUxODVhYmMtYzRlYy00ZDZlLWEwNjEtMGZhNGI4YWRlYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Rg1kLeheS0SE/7EILlwx6LYh2fbATJXLJ7
QuiQ5oO13EGc2HONTqkYk/7S8nJkptu2Fl58DZtKoZW7M3Kz2eJJl3v06W5Ll+dU
xwA/vZqQcucOLihkJ71OUWFulVINpJ1bWVm09Dog6hT209zvo+bOK9G18VZsja2H
BZgfR9TKeVBtJoW4xnZmk4FIyVe2k/SZEz3tLeTqVS/8JAWrKMLbhLHKjzFf88KY
lnc0GQfAtqQ+B309TjdHDNVFmrSJ1rpi7rVIbn/+5xL1VkAK4tckYpv66Vw/WQpn
UvwlA4mjdX6iq5abziC0zW4YFute0htWHb7ZiI0fRueCsMmlNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ8Kd0bgr/3DfgyXhpQ7QnxY8VwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvOWQyMjM1YjctNTQxYi0z
ODRmLTk5MTYtNDhjNmRjNDNkOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkk2BBelCaEZXkRDdD8MQmA2OOcS+qficpRKbfJe8sf9NnjlrE43cUK
hHonMC2ktY1rl7AuTN2cKC+VgsplEcbEUgslfMA3f74xtgNelOtF2yq5N6mUUbqP
dJMFacBEkyqD9X49PBeWtol0xhDkTj/d2RC0S487quwkKKcbLla1DUqL2R4DElHH
k7gkwgfqLGJmPqqsPGvNFrBdiD7iv1gFw0/1GP6gOd9LMRVoT2c2/RcRwPdSoUQT
ZeLMuZX2NbDgqtzSRHt7o8xkV902FBcxHDhndXlV/S0Dt/3RT7MVHyFW2lVNMrYR
MbljL85qJwFXdUo9JMIcnEhXXmkcZKg=
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:34 2026 by rpki-client