Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa
File:                     65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa (raw, json)
Hash identifier:          j+fhtP3/7Ck5ynAjG+K/XGs0qRVZ97sQ2GewRzPLiVU=
Subject key identifier:   74:B2:B8:C9:73:10:09:AE:E2:09:46:B9:72:6F:DA:CF:C3:8C:EA:B5
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584B047C110C2159BA308CA275A0
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     397018
IP address blocks:        52.144.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:11:0c:21:59:ba:30:8c:a2:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=08197828-0ee8-4f06-8564-ff6bbb6072b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:70:f2:ec:f1:96:56:37:70:24:09:52:06:
                    d6:a5:19:ac:5b:6e:60:a3:f0:0c:7d:0e:8d:9e:aa:
                    8f:72:e7:82:f4:b4:12:b6:0f:1e:2e:8d:01:de:83:
                    dc:51:bc:d3:3d:67:3c:45:f2:19:67:be:94:82:db:
                    4f:c0:76:c8:eb:33:13:f3:ab:0d:3b:6b:e5:8c:0f:
                    8e:9b:1f:ac:ce:ce:7b:a2:32:03:07:4d:23:33:ca:
                    a3:4f:ba:1b:de:03:a9:4f:84:08:76:54:b1:6b:a1:
                    03:75:6f:6e:6c:7a:08:e4:50:58:0a:bd:47:ae:f8:
                    cf:b1:00:1a:6b:97:02:3b:7a:40:73:80:de:86:f1:
                    db:1b:54:b9:ed:b3:26:f4:29:48:0a:68:d6:0a:9b:
                    8a:c4:69:78:a8:91:04:ff:ab:cc:67:f7:a9:b4:63:
                    6a:57:1a:f9:91:84:60:bf:d6:c8:db:94:f7:2d:63:
                    43:36:fe:60:de:a7:1b:de:81:d4:de:dc:b8:3a:1f:
                    9e:17:fe:c0:8d:d6:90:df:ab:13:a1:f2:14:26:8d:
                    af:a3:b0:63:f5:4c:42:75:c6:30:57:3c:25:3d:d6:
                    c7:04:8e:ae:e3:af:3c:7f:3e:e4:e2:0e:63:0f:f6:
                    fe:58:57:88:f3:17:75:2a:aa:37:7e:62:a5:76:40:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B2:B8:C9:73:10:09:AE:E2:09:46:B9:72:6F:DA:CF:C3:8C:EA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b6:10:d2:32:33:55:91:65:bb:85:91:8d:b4:fa:a9:ad:ad:
         d5:03:4f:fc:5a:f6:23:86:71:cd:73:d9:9a:79:40:04:be:36:
         09:cd:93:b0:dd:00:ce:5d:06:c9:15:de:37:a7:b3:e1:5d:4f:
         23:e6:ff:39:b4:15:8d:02:f6:89:7e:0f:5a:b3:4f:92:82:fa:
         84:86:3f:e7:41:d3:6b:b0:89:de:5e:58:f6:6c:26:ab:12:26:
         b1:a1:b7:2d:53:14:b6:12:30:e3:47:67:d7:51:7f:d5:95:2d:
         8a:7c:ee:91:33:1c:24:f9:eb:93:5a:38:33:b8:e6:b7:a7:c6:
         1a:df:68:60:ea:3f:d5:df:62:4f:e5:38:73:6d:b9:20:d2:5a:
         98:05:4d:79:e6:61:ee:69:54:e4:2b:21:a3:f4:6a:ff:8a:1b:
         d2:b8:52:cb:15:7f:d7:34:4e:aa:7c:7e:ca:69:df:a7:d2:4c:
         21:59:bd:1d:4c:64:d0:08:77:0e:b1:dd:39:b6:ec:e2:91:d9:
         0a:ef:6c:e4:8f:0f:fc:17:1a:65:ba:da:b6:d6:89:e5:52:0a:
         f3:e1:dd:33:6b:fd:dd:23:b6:e1:7c:77:64:03:a1:76:9a:20:
         9f:60:90:ef:75:28:d8:17:09:f6:3d:31:ab:02:9a:92:ac:d6:
         6b:20:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:01 2025 by rpki-client