Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/80fac0f9-0d4e-3e5b-92db-1bd7bf96336f.roa
File:                     80fac0f9-0d4e-3e5b-92db-1bd7bf96336f.roa (raw, json)
Hash identifier:          5NMSEfTEOHKgtDQZMTSi8sZXNKXWV7wVU7rUC0izrlk=
Subject key identifier:   E2:4A:79:E1:CF:D8:9E:D0:81:CE:40:B3:50:44:9F:05:C2:0B:EE:A9
Certificate issuer:       /CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
Certificate serial:       010D0C9F4328584E964FA20E6A00F03722889B20
Authority key identifier: A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/80fac0f9-0d4e-3e5b-92db-1bd7bf96336f.roa
Signing time:             Wed 22 Jul 2026 21:00:11 +0000
ROA not before:           Wed 22 Jul 2026 21:00:11 +0000
ROA not after:            Tue 20 Oct 2026 21:00:11 +0000
asID:                     53764
IP address blocks:        52.129.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:96:4f:a2:0e:6a:00:f0:37:22:88:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
        Validity
            Not Before: Jul 22 21:00:11 2026 GMT
            Not After : Oct 20 21:00:11 2026 GMT
        Subject: CN=b02e00c3-3d89-4e43-8033-571c52c407de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:71:2a:0f:65:71:da:d4:9d:d4:b5:d0:17:
                    f1:7b:52:45:7d:98:63:e7:1e:ab:70:f3:18:75:93:
                    78:a8:fb:bc:72:63:0f:e1:b8:86:3a:96:f9:18:a3:
                    3d:65:43:84:9d:89:0d:77:39:52:6a:c5:3e:4e:40:
                    64:2e:38:3e:01:ba:a8:13:4c:85:bd:aa:b1:83:51:
                    87:a3:b0:cc:a2:97:ea:02:50:ec:d3:5e:27:84:66:
                    f4:8c:01:eb:0e:ba:48:84:91:9b:98:e8:0b:6b:6a:
                    12:c9:dd:28:c5:98:5e:61:2c:7c:4c:fd:87:ed:b8:
                    78:c8:a1:9a:e8:ec:59:81:93:c4:9f:83:26:83:16:
                    1a:f1:41:36:84:11:bf:cc:ad:dc:9d:bc:d7:80:14:
                    6e:7a:92:cb:45:89:ea:2c:2e:a8:cb:29:92:36:cb:
                    0b:f9:8a:5c:83:dd:eb:0f:79:25:44:6a:a1:71:31:
                    59:72:2a:e8:d2:c0:1f:33:b1:32:a9:d7:5b:e9:db:
                    90:2d:81:48:35:e3:46:23:86:4b:0c:f2:dc:09:83:
                    d9:d4:cc:b4:93:96:46:cf:86:07:24:53:9d:3c:de:
                    fc:e2:83:9b:a4:41:00:eb:f6:51:84:ea:2a:33:36:
                    3f:4b:c8:08:7a:bd:5b:11:49:f4:03:e7:5a:a4:14:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4A:79:E1:CF:D8:9E:D0:81:CE:40:B3:50:44:9F:05:C2:0B:EE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/80fac0f9-0d4e-3e5b-92db-1bd7bf96336f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl

            X509v3 Authority Key Identifier:
                keyid:A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:70:4b:45:ea:12:5b:65:56:24:83:35:a0:88:df:c4:0f:a7:
         a2:d0:83:a3:eb:05:df:71:b8:5a:29:06:16:8e:9f:fb:52:c0:
         07:e1:ef:ae:3a:4d:49:c2:17:f5:b4:df:dc:ff:a2:bb:21:94:
         db:dc:0b:29:e4:0d:eb:a9:b0:cf:ef:97:74:65:06:88:ab:b3:
         27:d0:4f:bc:e0:61:4a:ab:ba:c9:73:08:ed:4e:2e:0d:50:0e:
         07:a0:9d:a6:68:e8:2e:b7:dc:2c:a1:2d:de:ef:0a:a9:9c:54:
         41:11:94:7b:88:d1:9d:c3:77:d6:1f:14:fc:e8:47:d5:c9:51:
         99:ec:17:7e:50:60:62:c8:8b:af:8a:f9:e8:d3:b6:bb:0a:05:
         16:05:7e:bd:a1:41:aa:54:76:07:b7:3e:90:b8:ba:fc:0e:56:
         bb:02:31:90:3e:f3:4c:ef:2b:15:7b:b2:e1:2b:09:8b:a5:17:
         3e:71:26:57:bc:21:b9:f1:c2:cb:4c:c7:ab:e4:8c:54:81:35:
         d5:f6:7c:a5:55:70:5c:6a:c7:a2:85:e8:f8:64:8a:b7:c4:74:
         5b:56:1c:db:ab:97:13:9b:22:84:48:09:f7:f0:f8:89:21:d9:
         c4:40:66:48:7b:9f:78:09:6d:1b:11:bf:ec:b3:03:a2:c5:98:
         f1:8d:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:47 2026 by rpki-client