Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
File:                     9d2235b7-541b-384f-9916-48c6dc43d957.roa (raw, json)
Hash identifier:          O0HTl8/W612IdY3qkQ9PT8ouDRie/+46NA6p1FDbjeM=
Subject key identifier:   06:69:19:FB:73:4E:FC:E8:F9:3C:76:7C:31:74:F5:27:5B:5C:60:19
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E37646B886D8BDD51AE8FC694
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        52.129.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6b:88:6d:8b:dd:51:ae:8f:c6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=c7528435-7ae3-4504-a7a5-e8b0c96e3314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:52:c3:82:be:35:46:c2:3b:ff:ec:b3:56:
                    af:97:a3:83:a8:d5:5f:23:3a:54:ee:12:3b:94:d7:
                    0c:0c:5d:3d:43:25:73:cf:ca:28:47:08:1f:45:51:
                    1e:b7:ef:cf:8d:cb:7f:c7:e5:bb:2c:01:ea:45:bb:
                    08:4d:21:b6:74:63:dd:43:0f:02:ed:34:04:07:c9:
                    46:c9:f4:7f:26:bc:c9:c1:3b:ca:04:ee:38:ea:29:
                    70:07:6c:3e:ff:79:b4:c3:14:e3:f8:e8:27:f5:6f:
                    18:6a:59:00:ad:00:92:ff:3a:a6:8d:fa:14:e5:fd:
                    b2:84:89:41:fb:fb:29:56:93:8f:54:bf:d7:d9:ab:
                    af:24:bd:33:4f:d8:4b:c7:70:ca:4b:75:5f:e9:8b:
                    e8:5d:89:0b:2b:02:d7:79:53:66:d2:0b:21:95:cf:
                    be:17:ed:20:a0:13:47:05:91:dc:d9:38:b6:76:dd:
                    20:39:c8:9a:59:74:03:e7:00:73:e9:35:d7:01:3f:
                    b9:27:dd:4a:c7:90:d9:b2:7d:69:81:47:d6:d1:fd:
                    31:96:8d:38:ef:5b:26:da:e9:7a:80:33:af:bd:ff:
                    cb:f6:8f:73:55:47:fa:a4:49:b5:3e:b8:bb:e1:65:
                    dc:27:e3:db:b1:43:fa:ce:33:cd:2b:89:4d:39:08:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:19:FB:73:4E:FC:E8:F9:3C:76:7C:31:74:F5:27:5B:5C:60:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:44:2d:60:f6:05:90:dc:4c:fb:be:8d:ea:04:cb:94:2c:34:
         e9:57:02:2b:d2:a0:6c:f5:e2:06:be:59:a3:a2:90:c8:7c:9d:
         5d:47:22:2d:5a:bf:be:6c:ad:57:dd:91:71:aa:f0:90:26:46:
         44:5e:1f:99:41:30:1f:a9:e8:b3:d7:13:b1:54:e2:e8:1d:da:
         29:f5:c5:3c:2a:f2:6c:2b:ff:de:99:f7:15:8c:42:6d:4d:0b:
         33:97:ac:f8:49:7b:a2:91:5c:63:1f:91:d8:2d:c7:87:cd:f8:
         66:1b:03:42:d5:34:0e:00:c9:50:02:8b:14:f0:61:a3:af:b7:
         72:cc:be:dc:37:5a:bc:2a:46:32:09:e7:80:fc:4f:57:35:fa:
         7f:94:3f:06:45:0b:c8:fb:90:4f:4a:09:fd:42:84:ca:2e:fa:
         01:f5:75:34:be:59:4a:10:87:fb:a7:48:db:ff:8c:f6:40:97:
         04:82:d1:28:57:41:dc:96:6a:f1:59:01:47:13:a3:bd:f1:db:
         6e:c3:67:01:e3:55:0b:f5:ee:13:1c:b1:32:95:bd:b3:aa:f0:
         55:37:04:3c:65:dd:0b:26:18:ab:6c:98:2c:3f:04:4b:3c:92:
         ee:d1:51:2b:fa:fe:8a:41:39:12:6a:cb:3c:5e:77:3b:04:88:
         ad:10:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:14:30 2026 by rpki-client