Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/82b01326-5961-3efe-96d3-1f645b1da7d6.roa
File:                     82b01326-5961-3efe-96d3-1f645b1da7d6.roa (raw, json)
Hash identifier:          yG3dlmTxUB2Si62JA/FxxUXboS5H8p+DIvGhWdHFzuI=
Subject key identifier:   E4:98:FD:EE:B4:EC:AD:62:1F:2F:48:6B:74:80:E1:2A:12:65:3E:74
Certificate issuer:       /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
Certificate serial:       010D0C9F4328584AADF0FD615112F9A29BFC9F00
Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/82b01326-5961-3efe-96d3-1f645b1da7d6.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        52.129.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:fd:61:51:12:f9:a2:9b:fc:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=a1205869-a928-43d4-8dfc-083fbb029ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:24:86:d1:86:14:bf:91:44:21:ce:a1:a1:
                    b1:10:08:ae:84:3f:fb:5c:6a:dc:52:06:09:52:ce:
                    3b:83:5f:62:95:2d:40:3c:72:66:c5:c2:4b:92:bf:
                    86:bb:68:2c:cb:6c:02:72:c1:97:8c:96:e5:32:ad:
                    7c:1a:36:f5:8c:95:38:c6:b1:df:25:f5:28:19:61:
                    7c:3c:08:10:b7:6a:9f:03:1d:da:28:4b:06:60:8c:
                    24:8c:f1:f5:26:d9:8d:45:b9:0a:41:0b:38:bc:27:
                    dc:c1:c6:ab:37:87:74:90:cf:6a:4c:f5:dc:b9:fc:
                    ef:a8:63:d8:5f:cd:8a:56:f4:56:8c:84:12:ee:b1:
                    c7:f9:7e:4c:14:17:0c:82:f9:69:38:0f:50:4e:24:
                    69:18:bb:f2:38:b1:71:42:b0:b5:bd:56:f5:ad:d2:
                    7d:44:22:27:e6:55:5d:e6:0f:55:92:77:71:0c:2f:
                    63:7e:42:9b:47:d7:7e:81:05:7e:89:29:d6:38:ae:
                    30:9b:39:44:fe:39:02:f7:34:aa:e9:bd:62:92:99:
                    dd:8d:9c:9b:eb:a7:4a:8e:e0:3a:a2:60:45:29:aa:
                    e1:09:c1:05:17:65:e1:c6:3f:80:42:22:0d:3c:d4:
                    6f:55:ef:6d:ad:2a:d3:f0:bd:db:fd:82:53:63:b3:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:98:FD:EE:B4:EC:AD:62:1F:2F:48:6B:74:80:E1:2A:12:65:3E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/82b01326-5961-3efe-96d3-1f645b1da7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:42:89:6e:62:6f:cb:b1:82:80:fb:0d:9e:c4:f2:21:18:45:
         e6:f6:44:56:53:d7:93:11:a2:95:75:39:5f:33:dd:0f:3e:b2:
         65:c1:a9:da:44:b4:95:1d:e2:82:14:c7:40:5e:51:22:bc:5d:
         9b:b0:1d:81:a1:60:db:da:2e:1e:64:48:f5:42:35:93:43:06:
         5a:61:f2:46:ea:02:e1:a6:be:40:b6:d3:c9:52:68:7c:ac:99:
         8f:2a:a8:74:ff:10:64:32:6e:e9:be:37:8f:6a:60:55:6e:c2:
         3a:0a:ae:db:0e:25:cc:3a:fe:c6:52:ec:a4:08:a0:a6:dc:aa:
         a2:c6:d5:3e:87:d9:d5:1a:37:d0:de:c9:dc:8a:57:d2:8c:3f:
         79:7e:7e:af:eb:e6:a2:b7:6b:f9:98:cf:47:c5:69:4e:0d:99:
         52:86:dd:3c:ac:d2:b4:fd:8f:c5:81:72:43:45:d2:6a:65:99:
         98:45:3f:80:04:71:36:78:50:8d:f1:0a:ae:db:8a:08:87:05:
         b5:50:30:09:38:1d:5f:eb:c3:15:48:a9:1d:0a:b6:62:c8:80:
         9b:e6:f9:22:47:88:a1:5c:7b:16:be:9c:ed:f7:f1:e4:92:d9:
         3c:ae:69:2a:46:f6:61:52:4f:f0:24:b6:57:ae:a3:fe:f5:3b:
         ee:63:ea:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:42 2025 by rpki-client