Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
File:                     10d72829-b71c-3de2-ab26-1eac86caaeaf.roa (raw, json)
Hash identifier:          wLUpqqJQcMovVMfa0vlp1txPuMNghKQ6mMVRB5typY0=
Subject key identifier:   00:7E:F6:A0:D2:D0:0F:B0:00:D0:B6:2A:AD:F8:07:B6:82:85:E9:D4
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584AB650DBC7F0197529B21D9DC0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        52.129.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:db:c7:f0:19:75:29:b2:1d:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=3f3a6013-9a93-40d1-b724-ae32fc981b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:f6:dd:89:93:d2:4f:25:6a:23:0c:08:84:
                    47:e4:6b:65:3a:8b:41:fe:36:81:f6:39:f8:84:31:
                    0b:06:58:85:c8:3c:10:40:48:3a:36:41:d4:75:f4:
                    4a:8c:46:0a:e1:24:5d:00:13:69:f6:e6:ef:ea:22:
                    9f:56:ae:e8:e0:29:69:53:b3:3a:94:11:d3:ba:98:
                    b3:bd:eb:79:99:63:73:01:2d:59:f8:9a:56:4b:05:
                    c5:29:e2:ea:dc:8b:9d:09:32:c1:78:85:0b:8f:00:
                    13:d9:45:3f:12:64:9f:34:a2:89:84:7c:6e:0e:3f:
                    25:3c:b5:15:5c:71:1d:98:94:ac:e2:ba:5f:92:f5:
                    5b:d4:68:2a:4d:88:23:87:1b:74:29:63:21:8b:f2:
                    33:86:c9:3c:99:d6:98:f8:56:0b:ac:20:60:6b:fd:
                    0e:e8:cc:d1:51:e7:69:99:da:63:f8:96:40:d4:ea:
                    24:ae:9b:41:7c:8c:50:f7:6b:b5:b9:55:75:0d:ac:
                    0d:03:44:e3:af:b7:81:79:67:d4:48:2f:e5:b2:79:
                    ef:01:e6:d1:ec:19:d9:99:ee:ac:e7:f8:cd:c2:ed:
                    3f:2e:db:ae:50:4f:ce:6e:bd:e2:ca:59:41:54:7b:
                    1a:80:88:ba:c5:0f:69:30:8a:33:0b:d1:14:4b:c5:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:F6:A0:D2:D0:0F:B0:00:D0:B6:2A:AD:F8:07:B6:82:85:E9:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:84:79:d5:ac:07:10:7d:12:1a:6a:23:18:4e:02:46:fb:e0:
         6a:d4:92:2f:5e:f9:67:8a:2f:ba:cd:da:3a:bb:d9:e7:47:9d:
         5e:9c:89:a9:7f:12:86:d3:ba:60:9d:ae:f3:41:1f:da:b4:ea:
         f6:12:4d:44:fe:93:8c:11:98:7f:23:7d:00:8d:74:50:85:e8:
         d9:0b:d7:e5:dc:69:05:74:e9:c4:19:92:6b:a0:c2:b1:44:fe:
         15:03:54:01:61:b5:48:ab:99:24:f0:06:6e:3e:14:a6:a0:b0:
         0f:5f:27:cd:cc:1c:40:25:a8:bc:3c:de:fc:21:54:c2:84:1c:
         b7:76:80:3e:42:ad:60:b3:68:79:44:39:98:b9:46:64:ca:e1:
         49:a5:1f:0f:26:9e:7a:0b:24:cf:ee:a7:34:23:9c:ea:6e:4a:
         12:ba:ff:67:1d:a1:d2:d1:2c:2b:1d:a6:4e:19:7b:98:d2:4f:
         7e:25:a0:7c:8f:6e:63:20:40:b8:3b:2d:8a:fe:fa:dc:40:4b:
         e3:f3:5c:a3:b7:5e:87:9e:21:9c:a2:a9:ff:c5:05:53:c0:56:
         62:24:7a:f0:d0:e9:c9:48:ab:80:dc:ef:89:e0:02:92:9f:3c:
         1c:38:a0:f9:d3:9b:d6:1c:b6:d5:62:6d:1b:bf:87:4a:1b:cf:
         d2:e0:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:46 2025 by rpki-client