Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa
File:                     91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa (raw, json)
Hash identifier:          U0J/w8vDwPtYVKRiefW7oqGMq2m4ncCA8/6gA3i4wvE=
Subject key identifier:   A0:FE:D1:0F:F4:AD:5D:38:42:73:18:1D:A8:AF:B7:DD:0D:91:AF:ED
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848F65BCFE2BE10204B3B52CE00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        52.129.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cf:e2:be:10:20:4b:3b:52:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=e2b5e6b5-84e4-4b2e-b186-76d6c2a90b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:2d:f2:22:49:f9:43:6e:5e:ba:93:19:aa:
                    7c:f8:02:85:9f:b8:fd:4c:52:c9:43:ae:8a:3e:2a:
                    d9:5b:e5:b9:1d:71:c9:ec:ec:fb:cf:f8:02:2e:58:
                    9b:65:07:4f:de:67:be:3e:56:e5:e9:f4:2d:61:19:
                    0d:5d:c3:65:88:d3:c0:90:30:8b:3d:b6:d4:c9:85:
                    2f:d4:62:26:75:3e:e4:b6:63:8e:f4:f7:19:8d:84:
                    5e:10:3f:e1:19:18:9b:9c:ba:bb:5b:fa:7f:49:ca:
                    d5:1b:9e:bd:08:3e:a9:16:d7:ed:8c:fe:ee:58:d9:
                    22:20:df:a7:b5:30:b7:7a:43:38:57:b0:e2:6e:45:
                    6c:13:f5:8c:39:29:49:17:6b:f8:40:46:cb:7c:a3:
                    84:5b:a0:1d:3b:a5:47:a5:06:c1:60:a5:e2:f3:e8:
                    26:e3:a8:b6:e5:ef:36:56:52:67:0e:cf:b3:43:f2:
                    ed:7b:f6:83:ca:aa:15:9b:7e:44:80:b7:bb:c8:64:
                    72:72:25:4d:18:55:53:30:ef:16:32:28:1d:3d:12:
                    c3:6d:92:65:c3:24:69:f6:ab:a1:43:9f:77:fe:14:
                    00:b7:35:08:59:6b:64:d3:ca:c9:87:d1:d2:84:a6:
                    a7:88:c1:0c:eb:dc:17:10:64:98:a7:5f:4c:f8:bb:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FE:D1:0F:F4:AD:5D:38:42:73:18:1D:A8:AF:B7:DD:0D:91:AF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:f2:10:98:52:71:12:04:f6:4b:f4:0a:12:24:1d:6a:cf:
         57:bd:63:0f:fb:8a:73:ca:15:eb:22:cc:67:9c:b2:8f:78:43:
         f7:0e:11:2a:df:80:bf:83:f7:c1:c3:33:c4:6d:59:5c:d4:65:
         d8:82:65:32:9b:5c:cf:64:51:ce:de:6e:80:b5:6e:6e:66:a0:
         6d:19:86:6d:9a:09:1f:e2:68:af:d5:9b:cb:05:0f:41:24:0f:
         aa:eb:7e:9d:cd:e0:95:fe:e3:b1:0c:46:db:76:9a:10:0b:91:
         f0:e5:5d:94:11:cb:54:35:81:b3:6e:a3:8e:35:b1:1c:8f:9e:
         61:6d:44:e7:44:0c:f7:e6:83:e4:4e:92:52:ce:26:e5:29:04:
         d9:66:2e:2c:ab:16:80:27:a2:ec:3a:fb:79:9d:6d:85:9a:bd:
         09:a4:63:70:c1:b9:56:77:a1:e2:d8:0a:aa:31:23:63:9a:eb:
         86:b0:eb:5e:56:29:95:8e:f5:ef:6c:97:55:f4:2d:36:37:58:
         63:a7:69:be:bf:ec:21:3a:27:c1:e9:4d:48:7b:f1:a6:52:f7:
         17:53:f4:0c:d6:be:1d:e5:c0:94:98:0f:d8:0f:8f:6b:cb:7e:
         d4:e6:33:91:8e:50:f3:db:67:3d:7d:b7:33:fd:14:b2:7a:35:
         83:8b:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:10 2025 by rpki-client