Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/b8ca5150-1a37-3bb7-81b6-9e14aba49bd3.roa
File:                     b8ca5150-1a37-3bb7-81b6-9e14aba49bd3.roa (raw, json)
Hash identifier:          J1UZwKKJgw99jqIIHmnBgSpT4RyEDyKOprm7HfuGm0c=
Subject key identifier:   26:53:97:3C:38:16:2D:CE:49:3B:90:87:F5:74:B6:62:F9:30:17:04
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584B970CD9B8CD2D70F2DDE6E580
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/b8ca5150-1a37-3bb7-81b6-9e14aba49bd3.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        52.129.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d9:b8:cd:2d:70:f2:dd:e6:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=979bd554-c8e7-4329-993a-f2051e627e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:c2:a2:f0:e9:00:3d:8c:37:78:20:da:c8:
                    0c:f0:c8:4a:90:00:41:9b:0c:a1:f8:44:ee:30:57:
                    c8:a4:b6:03:d2:25:c1:98:d0:26:37:72:da:08:3d:
                    b9:f4:a3:4d:e8:c7:a9:b2:e3:e8:1b:74:61:5e:5a:
                    88:f5:4b:c4:04:7a:c9:d0:17:4a:9b:12:e1:8c:a9:
                    c9:6d:ce:a8:d6:ae:da:42:49:28:fc:0c:50:05:8b:
                    a2:97:6a:87:9e:d9:1b:43:46:ba:54:13:a2:52:c5:
                    fd:0d:17:cb:31:1b:b0:01:c9:df:f0:2f:b9:ae:4d:
                    b4:f3:43:51:e3:6e:be:84:ad:40:19:34:a3:9f:6b:
                    48:97:84:70:b6:05:63:36:f7:72:fd:31:65:64:5b:
                    44:ce:79:c5:df:42:46:81:51:ff:8b:ae:39:f9:42:
                    30:d8:55:17:2d:23:92:42:59:0d:bc:bb:af:ab:26:
                    7d:5f:2e:b5:4d:6e:71:05:bf:63:a2:eb:14:62:16:
                    5b:43:e7:a6:db:0e:55:de:52:72:e2:bd:23:b9:60:
                    a9:88:4a:b1:d0:aa:cd:b7:d9:0d:11:ec:eb:a4:74:
                    a9:8d:a3:06:ee:57:66:58:cd:28:b3:95:87:73:8a:
                    04:83:62:56:f2:8e:8d:78:4c:39:78:5c:af:95:75:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:53:97:3C:38:16:2D:CE:49:3B:90:87:F5:74:B6:62:F9:30:17:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/b8ca5150-1a37-3bb7-81b6-9e14aba49bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:fd:0e:bf:1f:68:c7:b4:b6:1f:ea:d9:d9:8d:5e:40:3b:
         ff:ce:bc:ee:7b:42:24:7b:8c:08:2d:49:d0:58:4d:76:4d:99:
         02:da:e9:c6:c7:7c:f7:29:15:4f:92:60:9f:d9:e0:e9:3f:63:
         8a:f6:08:11:42:95:44:41:6d:f2:14:01:bd:b1:9d:83:1b:89:
         70:63:68:00:86:e5:ed:27:18:c8:5d:d4:3d:89:4c:90:88:00:
         08:18:cf:8a:5a:f7:6e:a4:50:6d:ac:d8:72:9e:a1:e5:a5:06:
         00:09:fb:f8:13:9a:20:fd:3c:e3:f9:7d:88:51:6c:2f:13:76:
         9b:08:9a:4f:86:2a:04:d2:61:e3:59:16:50:5a:de:21:5a:98:
         16:7c:6b:39:5d:8a:04:8e:85:9d:b1:f7:b4:2b:e9:29:70:9e:
         ab:6a:f6:b8:7d:2f:a5:6d:31:0e:65:3e:fa:15:0a:c6:84:e5:
         3e:5e:5e:a3:43:fa:52:3b:e9:ab:27:9d:9f:68:09:fc:ee:c6:
         94:25:d2:c4:73:53:fe:47:15:01:b8:7e:f8:20:10:a1:5a:ff:
         e6:a9:36:b3:be:11:db:56:1f:85:e1:67:e0:62:2a:bb:74:40:
         01:37:49:df:99:7e:c3:63:fc:3d:ee:94:6d:d9:25:ed:33:1e:
         c8:c4:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:30 2025 by rpki-client