Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa
File:                     dd878c77-8115-3bda-9142-aabe43c219b8.roa (raw, json)
Hash identifier:          b2/s9OFjbZaHkbIDpT12e4DI5LW3j6bb05RhsrE/2L8=
Subject key identifier:   44:75:F1:D4:8F:17:A1:94:D3:64:07:18:D4:15:39:6A:7F:FB:D5:0B
Certificate issuer:       /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
Certificate serial:       010D0C9F43285845B7B379449E651A8CF41A6880
Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        52.129.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:79:44:9e:65:1a:8c:f4:1a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=8cfac484-5c89-4435-9500-c56ac274cf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:9b:f2:5c:3e:b4:af:ab:48:d3:1f:99:82:
                    24:da:b1:78:c5:3e:e6:57:59:29:58:92:33:50:98:
                    81:c5:bd:07:1a:fb:48:17:a4:41:10:e3:64:d8:ea:
                    95:5f:be:ae:4c:05:5f:50:4c:dc:8a:ed:1a:52:b9:
                    a6:e3:13:09:9c:1d:36:40:c6:90:9d:be:1b:e9:8f:
                    b9:68:9d:9a:a0:da:d1:69:9a:9e:a2:34:15:87:69:
                    da:93:3b:9b:35:2f:7f:59:d8:8b:36:4a:14:2c:a1:
                    5b:3d:23:1c:25:b9:c2:e1:34:e9:be:16:5e:17:05:
                    8d:77:96:4a:43:21:03:80:75:dc:c7:82:4f:11:dc:
                    58:72:e4:ae:80:df:32:4f:5f:1a:27:b1:a5:d6:2e:
                    64:8f:29:4f:7f:9c:8f:d6:c3:b9:3e:d6:43:bf:09:
                    16:9a:af:e9:3b:f1:5f:05:29:5a:32:f4:48:f6:9d:
                    e8:76:ac:d5:52:84:80:8a:ad:3e:78:4c:29:b7:a2:
                    f8:69:da:52:dc:2b:61:36:05:04:f5:df:d7:5b:36:
                    f8:07:ec:d5:d9:15:f2:cc:9c:03:e1:be:2f:2f:63:
                    aa:7c:e6:78:f2:ca:a4:7d:9c:aa:45:87:c9:c0:20:
                    77:71:01:2d:89:37:d3:23:d5:d5:55:46:f9:3d:cc:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:F1:D4:8F:17:A1:94:D3:64:07:18:D4:15:39:6A:7F:FB:D5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl

            X509v3 Authority Key Identifier:
                keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:5c:ab:84:58:5e:24:95:14:1d:20:4a:42:7d:e3:43:00:0c:
         ca:13:24:22:64:27:0b:1e:3a:e7:e2:a7:9b:82:63:0f:2d:96:
         1a:cc:1b:88:75:01:e4:05:52:6d:8d:d7:22:79:d6:81:65:32:
         be:e8:9b:d2:68:a0:00:6d:62:3a:1c:d0:51:17:48:0d:f9:ed:
         a9:1d:a7:af:5c:12:4a:bc:7c:7d:10:52:a8:18:a4:1c:74:b8:
         9c:cb:7e:0b:e4:32:d6:16:81:c0:2a:44:6e:9f:1d:91:93:ee:
         79:f4:40:36:f5:c9:1f:d5:33:09:bb:f2:39:d6:da:1d:d0:5c:
         05:0e:7a:4e:0d:c0:e0:e6:71:29:0d:93:fd:73:be:4b:bb:de:
         bb:fc:f1:81:0c:4d:52:74:4a:b9:2d:ba:ef:51:40:71:db:ed:
         05:32:62:7d:99:0d:3f:f7:ed:f6:7a:0a:e3:f4:1e:7b:f6:6a:
         68:17:81:73:69:6c:8f:1c:f8:ab:b4:72:5b:97:aa:d5:a2:b4:
         bb:44:44:01:0b:c1:e3:ff:4a:32:ea:fa:dc:19:0a:87:eb:91:
         5b:bb:9d:f7:42:b2:97:39:bc:8f:aa:70:38:24:4f:3c:f1:63:
         d0:a8:6b:8e:0e:1d:37:32:a5:3e:0e:95:ba:ce:1a:9a:4f:ac:
         d4:cd:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:31 2024 by rpki-client on console-ams.rpki-client.org