Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777/0e7c2c04-834a-3f58-9db6-738a948fdb23.roa
File:                     0e7c2c04-834a-3f58-9db6-738a948fdb23.roa (raw, json)
Hash identifier:          exzRT7MRA/pINDnfrB6hqi53vwA0BMiEmx6lbSxPGtQ=
Subject key identifier:   48:FB:42:E4:4C:48:21:DF:5C:06:82:B7:EF:72:42:48:79:44:11:57
Certificate issuer:       /CN=6999aef0-2111-49c3-8292-2aad7f564777
Certificate serial:       010D0C9F4328584E8DEFA0AC4E45C7114F704200
Authority key identifier: D9:66:AC:35:E2:C5:CB:59:55:A4:BF:7F:08:DD:6D:5A:02:78:32:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777/0e7c2c04-834a-3f58-9db6-738a948fdb23.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     400116
IP address blocks:        52.144.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777/6999aef0-2111-49c3-8292-2aad7f564777.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777/6999aef0-2111-49c3-8292-2aad7f564777.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a0:ac:4e:45:c7:11:4f:70:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6999aef0-2111-49c3-8292-2aad7f564777
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=1581ddf3-641d-45d9-9039-e5f5e6cb693c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:48:07:3a:2e:00:00:07:d9:82:56:7c:05:
                    b3:a4:d6:8e:e4:c5:85:2b:48:97:3f:c1:f1:06:3b:
                    7e:d4:1d:d4:05:82:c5:d7:25:8d:a0:15:90:56:be:
                    9f:e2:90:32:77:48:b2:93:8d:28:00:4c:af:75:2a:
                    b9:ac:61:33:cd:80:53:b1:fa:c5:bb:ee:10:9e:4e:
                    20:33:98:20:8d:bc:64:64:42:b1:b7:e2:12:cd:81:
                    a7:3b:9b:fb:e9:8c:a4:8a:bc:7e:2f:0a:75:6e:e0:
                    1b:02:2e:85:60:fd:c5:28:38:d2:fa:c4:bd:58:96:
                    1a:1d:de:1d:98:01:f3:fe:b9:0b:77:2f:a3:f3:00:
                    12:f8:5e:fc:ca:5e:01:b0:ac:d6:9e:9d:1f:53:53:
                    4d:e4:20:10:21:71:b5:21:ca:d0:38:1b:0f:06:71:
                    7b:a6:ef:a1:f7:da:13:e7:36:c7:53:cb:28:20:5a:
                    5f:fc:d3:2f:2d:f1:68:8e:19:11:9a:b9:ca:ed:66:
                    af:07:62:68:6f:0b:ec:36:bd:93:17:df:5c:9e:5e:
                    53:a4:12:f0:a9:68:1e:79:20:de:d6:c3:4d:e7:62:
                    2d:97:7a:aa:17:29:de:40:aa:14:f5:47:e8:af:51:
                    36:da:43:b5:e9:ab:14:9f:af:d6:7c:99:e5:e3:26:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:42:E4:4C:48:21:DF:5C:06:82:B7:EF:72:42:48:79:44:11:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777/0e7c2c04-834a-3f58-9db6-738a948fdb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777/6999aef0-2111-49c3-8292-2aad7f564777.crl

            X509v3 Authority Key Identifier:
                keyid:D9:66:AC:35:E2:C5:CB:59:55:A4:BF:7F:08:DD:6D:5A:02:78:32:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6999aef0-2111-49c3-8292-2aad7f564777.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d7:eb:7a:fb:01:d9:4a:dd:af:ab:4f:8b:d2:a7:44:a9:44:
         a9:01:19:30:a6:57:7a:c5:ea:7f:d3:88:a5:da:b2:6c:80:49:
         95:dc:1b:cb:5d:ea:ad:f5:fc:f6:84:06:59:2e:7a:14:06:e2:
         f4:b3:f0:80:9c:c0:60:5f:ef:74:6e:05:33:c3:0f:3b:a4:08:
         d2:77:fc:58:71:46:0d:1f:68:15:1c:fe:74:87:cc:a4:8b:9f:
         51:6b:dc:8a:ad:47:a2:8e:38:b5:95:f7:ba:11:f2:a3:a1:89:
         0e:36:2f:9a:30:06:92:78:0d:21:77:9e:c4:f3:01:2a:6d:a3:
         e3:c0:25:85:0a:3f:88:6d:b0:da:10:6f:a6:ef:40:da:e6:a8:
         e1:73:6e:d4:cd:a5:b9:78:5f:85:89:11:ad:dd:70:9c:8a:8b:
         4e:90:dd:c8:77:e2:26:8f:27:e8:55:60:38:3a:7c:94:d2:cf:
         9e:65:6b:60:22:93:fa:26:a7:4b:d7:b8:ff:88:e9:fd:a3:64:
         5e:29:1b:60:f6:08:e1:dd:60:d4:c0:55:43:7b:66:cf:91:cb:
         91:b1:54:c3:15:3f:72:6a:39:05:e5:af:d3:08:bb:f2:58:2b:
         ad:48:b4:42:e8:b5:36:c9:c8:30:08:a4:33:15:ce:de:64:aa:
         59:a9:84:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N76CsTkXHEU9wQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk5OWFlZjAtMjExMS00OWMzLTgyOTItMmFhZDdmNTY0
Nzc3MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MTU4MWRkZjMtNjQxZC00NWQ5LTkwMzktZTVmNWU2Y2I2OTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiVIBzouAAAH2YJWfAWzpNaO5MWFK0iXP8Hx
Bjt+1B3UBYLF1yWNoBWQVr6f4pAyd0iyk40oAEyvdSq5rGEzzYBTsfrFu+4Qnk4g
M5ggjbxkZEKxt+ISzYGnO5v76Yykirx+Lwp1buAbAi6FYP3FKDjS+sS9WJYaHd4d
mAHz/rkLdy+j8wAS+F78yl4BsKzWnp0fU1NN5CAQIXG1IcrQOBsPBnF7pu+h99oT
5zbHU8soIFpf/NMvLfFojhkRmrnK7WavB2JobwvsNr2TF99cnl5TpBLwqWgeeSDe
1sNN52Itl3qqFyneQKoU9Ufor1E22kO16asUn6/WfJnl4ybhowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEj7QuRMSCHfXAaCt+9yQkh5RBFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82OTk5
YWVmMC0yMTExLTQ5YzMtODI5Mi0yYWFkN2Y1NjQ3NzcvMGU3YzJjMDQtODM0YS0z
ZjU4LTlkYjYtNzM4YTk0OGZkYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjk5OWFlZjAtMjExMS00OWMzLTgy
OTItMmFhZDdmNTY0Nzc3LzY5OTlhZWYwLTIxMTEtNDljMy04MjkyLTJhYWQ3ZjU2
NDc3Ny5jcmwwHwYDVR0jBBgwFoAU2WasNeLFy1lVpL9/CN1tWgJ4MhcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82OTk5YWVmMC0yMTExLTQ5YzMtODI5Mi0yYWFk
N2Y1NjQ3NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJAYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGLX63r7AdlK3a+rT4vSp0SpRKkBGTCmV3rF6n/TiKXasmyASZXcG8td
6q31/PaEBlkuehQG4vSz8ICcwGBf73RuBTPDDzukCNJ3/FhxRg0faBUc/nSHzKSL
n1Fr3IqtR6KOOLWV97oR8qOhiQ42L5owBpJ4DSF3nsTzASpto+PAJYUKP4htsNoQ
b6bvQNrmqOFzbtTNpbl4X4WJEa3dcJyKi06Q3ch34iaPJ+hVYDg6fJTSz55la2Ai
k/omp0vXuP+I6f2jZF4pG2D2COHdYNTAVUN7Zs+Ry5GxVMMVP3JqOQXlr9MIu/JY
K61ItELotTbJyDAIpDMVzt5kqlmphB4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:49 2026 by rpki-client