Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa
File:                     ad214fa9-5028-3913-a474-0fc7cd823fbd.roa (raw, json)
Hash identifier:          8qf2mOcAcHjwcBtZ5aFuC8A9WG25xipYeSexs+sCkr8=
Subject key identifier:   26:F0:2E:3A:17:06:13:63:90:99:F3:2C:3B:91:E6:20:0C:EE:FC:29
Certificate issuer:       /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
Certificate serial:       010D0C9F4328584D0217A7B2CA3F9AE90920A400
Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        52.129.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:a7:b2:ca:3f:9a:e9:09:20:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=202c8bc6-799a-407b-9383-6aeb461379ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:ad:0a:4a:6d:17:b9:ae:7d:b0:ad:69:a8:
                    47:78:15:9a:1a:22:89:fd:04:77:83:95:ba:0c:c1:
                    d5:03:a9:28:30:dd:94:8a:72:f8:b0:ad:96:d4:60:
                    9b:f9:19:20:b9:e0:8a:20:1a:6e:d5:f9:b1:28:f0:
                    ac:c5:cd:99:8c:5a:ef:12:6b:36:2c:4d:f9:02:1e:
                    d3:db:c6:f6:b0:f2:8a:5a:7f:a7:2b:a1:27:8d:03:
                    90:5c:c3:86:83:90:39:26:8d:7c:b4:32:f6:62:6a:
                    12:d8:55:2a:ac:5a:87:8c:1b:51:68:03:f1:36:35:
                    85:9e:ec:bb:ff:5d:ee:aa:46:44:ff:8c:ef:88:4c:
                    03:bf:67:e6:f2:b3:4c:fe:c6:f6:df:c0:a9:2c:f2:
                    b6:0f:15:bd:89:d2:98:8f:1b:1f:7a:e4:44:0b:a9:
                    97:d8:65:56:11:7d:d1:33:02:bd:af:04:7b:89:d7:
                    70:5a:32:6f:48:93:49:89:8d:49:74:07:cb:87:4a:
                    f3:35:50:1b:43:34:3b:6a:7b:c2:01:2c:2a:c0:9f:
                    d2:71:76:97:ed:c6:98:70:96:b9:9e:47:36:96:d3:
                    c2:47:7f:cc:ff:ab:e1:60:22:2a:06:62:cf:ff:51:
                    70:ea:22:c1:3a:1b:84:f1:c8:24:3b:f8:f0:da:27:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F0:2E:3A:17:06:13:63:90:99:F3:2C:3B:91:E6:20:0C:EE:FC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:33:c8:09:97:48:d9:6b:3a:e1:3b:62:d1:f1:46:dd:59:9b:
         7b:65:85:28:06:0b:a4:d1:5b:1f:83:5d:3e:4b:fe:31:d5:38:
         d8:e0:c5:9c:81:67:28:cb:8a:b6:89:5c:09:99:ac:b5:30:b2:
         9f:ef:1a:67:60:56:a4:a7:b1:e8:60:b6:9e:b9:73:a8:d8:17:
         66:1e:46:3a:06:7a:23:71:72:f1:f0:93:15:bb:94:42:54:3f:
         8d:6f:6c:36:90:5e:89:28:ae:11:f6:c6:e5:8f:dd:ab:35:2f:
         be:a7:45:b2:d9:f9:73:cf:16:7f:17:9c:3f:bd:88:a5:4c:c6:
         69:9c:92:b6:6d:fe:f1:af:30:86:05:b0:ab:9c:bf:9c:a6:ec:
         9b:fc:68:90:96:99:93:f3:62:41:df:b8:74:30:24:0a:34:45:
         b7:0a:72:13:37:7b:a3:e4:aa:22:7f:44:0a:27:f4:3d:4a:1e:
         e0:68:64:2a:86:da:05:36:b7:35:46:25:41:2a:0c:bf:5d:89:
         9f:5e:39:4c:e9:0e:1a:b7:7f:ad:22:fa:e9:76:51:bb:2c:2f:
         7d:0b:ec:ed:c2:7e:18:ea:55:7b:3b:8d:0d:4f:04:c0:d2:ca:
         c2:40:3d:86:06:a8:13:b7:88:c5:ad:34:d7:0c:3d:68:2f:69:
         2b:94:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:53 2026 by rpki-client