Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8b9c4684-3f13-3b4d-9962-8c867c03bcda.roa
File:                     8b9c4684-3f13-3b4d-9962-8c867c03bcda.roa (raw, json)
Hash identifier:          +lJtPxiJClPX2F/ORimovHUuS1HdoVmjWkzKH1gWi7A=
Subject key identifier:   40:BE:13:08:AA:E7:A9:92:91:C5:3D:06:F4:2D:4B:47:3F:20:8F:93
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584B970CD28A86EE704227337BC0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8b9c4684-3f13-3b4d-9962-8c867c03bcda.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        52.129.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d2:8a:86:ee:70:42:27:33:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=adff14d8-cadc-41fc-8804-552d92231368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:a9:d3:32:69:62:8d:a9:fb:1e:7f:51:a3:
                    b7:e4:a8:27:fc:ef:7e:ad:dc:ff:0e:84:01:f0:62:
                    88:ac:d3:cd:59:ea:13:80:5c:68:ff:dd:3f:24:30:
                    d7:3d:03:96:d9:36:0b:62:fe:02:32:1b:fd:dc:c0:
                    6b:6c:c1:3b:26:7a:91:80:b7:72:16:ec:69:57:c2:
                    70:26:d6:66:85:6d:63:6d:e6:4f:e4:99:45:7c:ae:
                    c4:1c:59:06:b9:e0:73:55:b5:d8:0e:80:2c:36:2c:
                    2f:84:ab:ed:3e:52:22:f6:a4:5e:50:49:c5:81:73:
                    94:e1:8a:0f:1c:c2:15:ac:d2:91:9d:61:fa:e6:c6:
                    4c:54:fe:78:c4:2e:00:3f:7b:77:73:4f:af:47:30:
                    ab:6b:df:31:4d:c9:8d:eb:d3:fa:1f:15:cd:4e:12:
                    f7:e2:f6:ae:77:bc:c0:db:32:14:ab:76:c2:22:15:
                    08:e0:79:90:49:da:d1:f7:a7:a5:11:5a:6f:3f:f7:
                    1e:27:4d:69:93:9e:1c:b7:40:3b:8b:09:32:e4:cb:
                    4c:93:b6:41:f2:91:80:8f:1a:20:ea:df:d4:25:fd:
                    ee:00:67:8c:7e:d4:b5:a4:8e:e4:eb:45:58:16:6a:
                    e7:7d:f5:70:3a:15:57:31:8c:52:f4:7f:48:e6:a8:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BE:13:08:AA:E7:A9:92:91:C5:3D:06:F4:2D:4B:47:3F:20:8F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/8b9c4684-3f13-3b4d-9962-8c867c03bcda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:59:e4:b5:8a:4a:af:bc:49:2d:8e:ba:09:cc:4f:91:73:0e:
         d5:03:a0:48:94:da:ce:2d:cb:e6:10:c2:f6:78:0e:c1:7c:f2:
         62:2e:9d:ef:ce:8f:52:e0:dc:06:cf:7a:34:1a:29:ce:14:09:
         cb:ed:07:c3:5e:e1:08:be:64:b9:ad:5e:ed:34:07:27:03:0a:
         4e:12:53:57:04:b1:7d:44:2c:a9:8f:4a:b0:1a:4c:47:27:1e:
         2a:cf:c4:f7:f1:0f:64:e2:83:a7:3c:26:77:2f:5d:ef:8d:1b:
         bc:de:ba:66:f2:2b:4e:59:7b:4a:68:97:48:c9:38:c5:3b:0b:
         84:2a:51:46:45:40:eb:78:c0:05:bc:b8:f9:6d:14:0f:66:dc:
         60:13:bf:cd:b2:e9:ee:e8:50:b0:44:b0:f2:4e:79:8a:75:92:
         c0:3b:09:62:75:e3:92:a9:c0:fb:c0:d0:6e:aa:85:70:78:1b:
         93:1c:b3:f4:65:ae:5c:db:e6:b8:3a:7f:58:f3:4c:e0:9b:59:
         bc:b6:13:5f:c9:a6:b7:aa:f4:ba:d4:f3:6c:68:30:43:a3:46:
         7b:65:e6:7d:1a:16:1f:1b:e9:68:68:12:fb:b6:c3:c5:4b:47:
         78:c2:a4:f0:22:a5:2a:e5:82:f3:51:82:bd:29:fc:ce:50:41:
         ed:93:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:03 2025 by rpki-client