Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6add81ee-fba4-32b6-861e-8573634f18e6.roa
File:                     6add81ee-fba4-32b6-861e-8573634f18e6.roa (raw, json)
Hash identifier:          daqAGtOA+tcmu0CZUbm8IX/LGswTbLDRI1inLGoJ5Fg=
Subject key identifier:   5A:04:68:44:EB:41:48:76:48:9B:8D:A3:AD:15:A0:AD:1B:11:F1:DC
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584AB650D584EC759F2AEFAECB00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6add81ee-fba4-32b6-861e-8573634f18e6.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        52.129.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d5:84:ec:75:9f:2a:ef:ae:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=a644f25c-c720-4e3b-b8f1-6362813fbd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:c1:28:f6:0e:d2:ce:8b:a5:49:97:69:81:
                    48:dd:1a:d3:1c:76:f1:e8:88:7d:b8:05:7a:37:a2:
                    e1:87:ba:70:8b:d7:ee:02:82:60:9b:06:33:b7:db:
                    fb:d4:4d:26:c7:a0:69:a5:ab:7f:08:35:ba:84:d1:
                    b6:18:78:8d:cb:d3:ab:7f:a7:29:84:9c:7d:51:49:
                    bd:72:68:4a:1b:c7:11:c8:2c:f0:24:9c:cc:f6:ea:
                    fc:98:a3:fa:db:1c:b9:56:da:a1:90:d2:32:f3:41:
                    7b:bf:82:ea:7d:3a:2f:58:22:92:17:1e:f2:5f:bf:
                    4b:16:d0:ef:67:56:7f:d9:2c:20:85:fa:e3:41:78:
                    cb:1b:9b:7a:3a:0b:7c:0a:c9:aa:ca:18:5d:ab:35:
                    3a:af:58:3d:95:08:b1:42:08:17:ec:5e:4e:5d:60:
                    a0:b5:0c:e8:f2:23:25:a4:f0:71:e3:5f:e7:68:3f:
                    42:e0:6d:25:dc:28:90:c7:8b:38:1b:29:ed:fc:a4:
                    2e:72:4e:f7:d2:4c:88:24:02:b8:f9:ac:27:78:3b:
                    06:e1:93:eb:12:6d:6d:52:7b:cb:1d:70:bd:8c:ea:
                    14:13:37:dd:d8:07:76:61:0b:47:14:04:43:30:dc:
                    5b:70:da:21:12:d9:a6:62:c2:ed:48:ea:b7:e7:e2:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:68:44:EB:41:48:76:48:9B:8D:A3:AD:15:A0:AD:1B:11:F1:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6add81ee-fba4-32b6-861e-8573634f18e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:53:4e:16:92:e0:de:b1:62:ad:19:10:0f:11:c5:3f:e3:09:
         aa:87:1f:02:5c:84:fb:c8:d1:01:b6:4b:d0:82:bf:4b:01:8b:
         86:f3:45:a3:ba:df:54:09:df:dd:92:eb:f5:c9:b3:df:2e:f3:
         6c:25:68:4e:55:aa:ad:fa:0a:d8:dc:0f:8e:6e:c6:38:83:69:
         e0:77:a6:b0:19:b2:34:4e:9f:6a:3c:70:9d:fa:a2:38:23:71:
         2c:41:51:d0:6d:7e:66:dc:ed:6a:b5:7e:d9:b8:26:a9:fc:3c:
         01:67:57:af:88:28:87:6c:2c:70:2e:55:ce:30:88:a1:0a:d8:
         83:43:e4:1c:3a:dc:9a:a8:3e:95:f9:e7:d6:47:a2:51:c8:6a:
         d8:01:04:7e:16:99:e0:69:9c:32:25:b5:4f:76:42:e2:66:09:
         d7:9e:f6:cc:7d:c5:75:2a:c5:e1:03:2d:96:ec:7c:e6:a4:e2:
         fa:5a:ec:29:31:24:05:87:8a:98:2b:38:e7:a5:3e:4e:7e:46:
         e4:70:d2:a0:59:07:e1:ae:6a:50:87:c7:a3:1d:bd:51:77:d4:
         8e:7e:13:66:14:82:ee:c9:7c:01:07:e0:6d:f1:26:44:64:d1:
         6c:b9:b1:66:a2:b1:99:e9:13:b7:0e:19:4d:4e:52:ec:80:da:
         dd:09:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:43 2025 by rpki-client