Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/44ee0493-2d99-3c55-8a1d-c064c47ed135.roa
File:                     44ee0493-2d99-3c55-8a1d-c064c47ed135.roa (raw, json)
Hash identifier:          S+E5Zt0RpvOwavovrXxIyx95X13zqDUp1PWTTxTeCMY=
Subject key identifier:   2E:F0:F8:39:19:78:D3:32:F5:D8:F1:62:8B:B8:61:FE:9D:BE:48:E7
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584B56C05C5FB2D93E97136AFF80
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/44ee0493-2d99-3c55-8a1d-c064c47ed135.roa
Signing time:             Sun 28 Sep 2025 00:14:48 +0000
ROA not before:           Sun 28 Sep 2025 00:14:48 +0000
ROA not after:            Sat 27 Dec 2025 01:14:48 +0000
asID:                     63201
IP address blocks:        52.129.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:c0:5c:5f:b2:d9:3e:97:13:6a:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Sep 28 00:14:48 2025 GMT
            Not After : Dec 27 01:14:48 2025 GMT
        Subject: CN=448d87f1-32cc-480a-87ef-f5bbb1373bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:5e:ce:d7:db:5c:27:b6:68:a1:8d:ad:35:
                    16:6b:2a:ba:0b:07:37:69:9a:7a:f2:99:1d:b6:5c:
                    1f:c4:c5:17:ac:90:e3:29:0f:3f:fe:f1:52:9d:bf:
                    ac:cd:83:7d:67:f6:32:89:13:91:ca:6d:99:c7:7a:
                    94:70:75:3d:52:29:e4:b3:0b:44:72:7d:95:90:44:
                    31:14:c1:45:39:2f:90:a8:06:15:03:d1:96:92:ee:
                    bb:b4:16:9e:4a:9f:65:45:b5:db:f9:e9:5b:74:aa:
                    ab:11:89:ae:21:94:5c:e9:a5:2f:84:41:1f:fa:bd:
                    e5:aa:e7:5a:53:35:63:82:72:27:ba:7e:ce:00:49:
                    47:dd:f0:d8:39:2c:a4:04:8d:e5:73:ab:9e:0e:ce:
                    7d:93:e0:c3:50:12:c5:78:be:f5:a6:0a:23:1e:4a:
                    54:41:39:6d:a0:cf:74:74:ca:75:1f:bf:98:9d:26:
                    43:40:49:f1:ba:46:5d:44:e4:29:60:98:f4:92:0f:
                    5a:ca:c4:cf:4d:8c:11:f7:07:9f:e8:e2:67:e1:6e:
                    3a:8c:72:60:9c:05:92:17:74:70:95:ca:75:d2:1f:
                    0d:49:c1:36:3e:30:64:df:82:56:30:c0:60:3a:09:
                    6f:b4:c6:d1:7f:a7:d3:17:c6:b0:74:d0:0b:8c:67:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F0:F8:39:19:78:D3:32:F5:D8:F1:62:8B:B8:61:FE:9D:BE:48:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/44ee0493-2d99-3c55-8a1d-c064c47ed135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b6:76:36:db:61:bc:d5:50:b2:b5:18:64:77:53:94:1c:f3:
         30:ba:a0:15:52:24:3a:9c:d9:85:30:ff:4b:85:98:d1:d2:a5:
         79:59:79:8a:d1:13:a4:f7:64:7d:2b:10:ea:ec:7f:3c:ca:95:
         bb:e5:ad:54:fc:3e:a7:8f:c7:99:15:a7:cd:fb:26:a7:63:6d:
         b4:f1:79:8f:1f:f2:c6:bf:f9:d6:b3:c4:50:d4:09:8b:71:0a:
         ac:5f:45:0d:3c:b3:54:ee:dc:fe:64:f0:c1:7c:53:10:bb:13:
         4f:79:a2:5e:4a:52:0b:a5:25:fd:7f:14:b6:37:fe:31:1a:4a:
         a9:57:da:be:9a:8c:0d:a1:85:f8:70:57:92:89:0f:e7:78:2f:
         43:cb:5e:ce:a3:96:44:40:86:2d:d3:f9:e5:ee:da:9d:dc:3f:
         a2:40:be:8a:0f:5a:bc:82:e1:4c:e6:07:f5:25:67:05:b9:e9:
         80:09:0d:df:27:ba:1b:0f:bb:5a:d8:86:f3:26:be:b0:cf:ff:
         20:92:9d:3e:be:99:dd:86:65:3e:4e:81:68:53:38:31:90:25:
         d0:cc:6e:a1:50:21:6f:62:1e:78:b2:1e:aa:d2:a8:70:5e:c6:
         37:dc:1a:5a:ee:c4:9f:80:08:f6:dc:d2:6e:16:8b:09:02:15:
         6d:84:85:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWwFxfstk+lxNq/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez
ODYxMB4XDTI1MDkyODAwMTQ0OFoXDTI1MTIyNzAxMTQ0OFowLzEtMCsGA1UEAxMk
NDQ4ZDg3ZjEtMzJjYy00ODBhLTg3ZWYtZjViYmIxMzczYmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FBeztfbXCe2aKGNrTUWayq6Cwc3aZp68pkd
tlwfxMUXrJDjKQ8//vFSnb+szYN9Z/YyiRORym2Zx3qUcHU9UinkswtEcn2VkEQx
FMFFOS+QqAYVA9GWku67tBaeSp9lRbXb+elbdKqrEYmuIZRc6aUvhEEf+r3lquda
UzVjgnInun7OAElH3fDYOSykBI3lc6ueDs59k+DDUBLFeL71pgojHkpUQTltoM90
dMp1H7+YnSZDQEnxukZdROQpYJj0kg9aysTPTYwR9wef6OJn4W46jHJgnAWSF3Rw
lcp10h8NScE2PjBk34JWMMBgOglvtMbRf6fTF8awdNALjGfB4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7w+DkZeNMy9djxYou4Yf6dvkjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw
ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvNDRlZTA0OTMtMmQ5OS0z
YzU1LThhMWQtYzA2NGM0N2VkMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk
NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh
Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz
YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIEkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe2djbbYbzVULK1GGR3U5Qc8zC6oBVSJDqc2YUw/0uFmNHSpXlZeYrR
E6T3ZH0rEOrsfzzKlbvlrVT8PqePx5kVp837JqdjbbTxeY8f8sa/+dazxFDUCYtx
CqxfRQ08s1Tu3P5k8MF8UxC7E095ol5KUgulJf1/FLY3/jEaSqlX2r6ajA2hhfhw
V5KJD+d4L0PLXs6jlkRAhi3T+eXu2p3cP6JAvooPWryC4UzmB/UlZwW56YAJDd8n
uhsPu1rYhvMmvrDP/yCSnT6+md2GZT5OgWhTODGQJdDMbqFQIW9iHniyHqrSqHBe
xjfcGlruxJ+ACPbc0m4WiwkCFW2Eha8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:22 2025 by rpki-client