Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/acee2ecf-753f-3e57-a1b4-6c15fc32e44b.roa
File:                     acee2ecf-753f-3e57-a1b4-6c15fc32e44b.roa (raw, json)
Hash identifier:          7ahyP6DYRYo/voB6XfDY9cV58itsaJeWb0g2d5rgPys=
Subject key identifier:   9A:93:3B:30:7E:81:33:0A:7F:D2:63:8E:84:69:2D:77:B4:90:68:AC
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584EF3B46AE04CC29989F752A700
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/acee2ecf-753f-3e57-a1b4-6c15fc32e44b.roa
Signing time:             Tue 25 Aug 2026 07:53:28 +0000
ROA not before:           Tue 25 Aug 2026 07:53:28 +0000
ROA not after:            Mon 23 Nov 2026 08:53:28 +0000
asID:                     402870
IP address blocks:        52.129.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f3:b4:6a:e0:4c:c2:99:89:f7:52:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug 25 07:53:28 2026 GMT
            Not After : Nov 23 08:53:28 2026 GMT
        Subject: CN=522091d4-453b-44b5-a77c-f664cf9c0bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:74:75:86:94:41:63:f5:3f:ba:b7:82:85:fb:
                    34:63:98:94:78:c5:6b:4a:9c:bf:c0:53:0d:5e:65:
                    de:4b:5e:1e:cd:28:53:95:1c:0d:5e:59:86:b5:4a:
                    2e:72:7e:21:2e:e9:e9:32:8b:a8:13:98:80:47:f6:
                    39:15:33:27:0d:44:d1:ee:a6:f1:34:89:9c:70:ec:
                    4b:37:3a:ea:05:70:81:9d:86:a4:12:3d:04:4c:e5:
                    26:3b:48:59:39:29:45:c3:5a:bc:04:3f:4a:06:46:
                    79:47:15:51:cc:dd:ea:e0:05:28:99:a8:1c:94:e8:
                    2a:81:49:7d:b4:fd:d9:76:a6:c4:c4:8b:fb:7e:19:
                    7b:b8:d5:ed:70:e0:f5:bc:8d:4e:01:65:b6:ff:c9:
                    b0:83:3b:7d:3e:25:d2:7d:d8:dc:83:48:8d:03:7c:
                    bb:54:bc:e0:d2:0c:4b:10:11:2e:89:eb:b2:d3:22:
                    c3:d0:10:46:1a:e3:d9:33:b3:2d:55:c4:fc:1d:6d:
                    06:7f:d7:b3:93:5b:a9:a5:23:ce:32:22:6f:a9:74:
                    f0:a5:17:ff:af:d9:8b:e7:d5:b5:6d:b8:ab:0d:fe:
                    3e:a2:32:14:05:2f:d0:bb:a2:d4:bc:eb:eb:4b:20:
                    de:56:05:df:b1:df:1d:25:f1:39:c8:cb:13:ed:ca:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:93:3B:30:7E:81:33:0A:7F:D2:63:8E:84:69:2D:77:B4:90:68:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/acee2ecf-753f-3e57-a1b4-6c15fc32e44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:72:94:e7:5b:02:20:04:d2:7c:bd:b9:a3:89:14:ac:a0:ef:
         d6:8e:3b:e1:72:f8:a6:49:da:0a:0b:69:d5:e7:9a:a7:0a:95:
         e5:ca:3d:93:ec:44:2e:72:c8:59:94:fa:f8:17:c4:f4:ca:d5:
         bc:57:e0:82:2f:b6:48:59:eb:44:76:9a:e9:89:ed:17:20:1d:
         8e:0a:92:e4:82:dd:b8:a7:46:6a:d6:5c:0d:1f:a8:8f:1e:ca:
         96:1e:03:7e:9d:ab:10:a8:9e:ff:9f:bb:e6:7d:eb:5d:e9:87:
         e3:db:df:47:72:c3:29:c8:53:e3:21:f6:51:05:56:0d:df:4a:
         cb:a2:dd:35:bb:dc:db:2e:c4:d1:f2:82:96:bf:c8:58:5f:98:
         e8:0d:f8:dd:4e:c7:43:23:ca:36:dc:cd:a0:ef:d1:e5:51:98:
         b0:25:33:d7:c5:4b:b0:70:46:9e:18:26:71:70:ac:30:3f:60:
         f7:b0:08:a2:4a:3a:94:4f:c6:d5:c2:b6:81:48:22:73:e3:bd:
         ff:42:8f:db:c0:f8:9d:0a:3e:20:5e:44:48:fd:57:4b:42:89:
         37:d6:2a:94:03:95:8d:7b:2b:2b:0a:99:34:c2:17:f8:5b:d7:
         79:70:71:fb:3a:ec:e2:f8:06:85:28:76:d5:1a:be:37:21:17:
         84:28:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:26:34 2026 by rpki-client