Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa
File:                     dd878c77-8115-3bda-9142-aabe43c219b8.roa (raw, json)
Hash identifier:          wam78yENbDYd1Pf2MeFh1WZIVnfUntryTsITQ4G3RsA=
Subject key identifier:   67:E0:DC:5E:CB:A7:15:02:84:4D:C6:32:66:FF:26:0E:F5:91:38:9C
Certificate issuer:       /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
Certificate serial:       010D0C9F432858477660FF127E54B1073FCF3240
Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        52.129.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:ff:12:7e:54:b1:07:3f:cf:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=c49f3a8f-9da5-4ebc-bf2d-8313d4117d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:1a:29:56:8e:2f:27:fb:a1:ea:c0:69:46:
                    c0:30:3e:36:1b:68:83:8c:90:c6:3f:a0:81:91:12:
                    c0:80:6a:83:85:39:08:62:95:3e:b9:e8:ac:ae:6a:
                    fb:dd:8a:87:6c:2e:b5:0c:e8:81:1c:30:68:19:44:
                    c8:1e:99:a6:f7:e8:0d:17:b4:38:6a:2f:88:4e:78:
                    f0:f8:5a:54:73:38:3b:4e:40:19:c5:32:8d:c2:e9:
                    b1:f1:d6:50:0c:fd:1b:41:0d:56:13:4f:03:16:d7:
                    36:c7:ea:f3:0d:0f:25:08:64:82:f2:70:fe:a6:60:
                    14:27:ea:c5:69:6b:4d:1e:a2:d7:ae:48:88:5b:8a:
                    c1:40:14:89:5c:4c:04:18:e5:2c:a6:ac:e5:3b:52:
                    31:08:f7:d3:47:5c:26:eb:2f:d4:c9:a5:52:34:2f:
                    9b:02:a5:ee:85:29:94:40:82:02:87:06:d7:ab:03:
                    ae:52:80:c0:87:e5:9f:ed:1b:dd:00:04:32:fc:d8:
                    13:f8:3e:c8:d8:14:2d:f0:b4:9f:1b:31:0e:94:9c:
                    2e:e9:da:d2:56:28:25:d5:fc:e3:0f:82:19:d9:a6:
                    93:e6:cb:d4:99:c1:2b:53:71:39:bb:9b:11:5d:eb:
                    8d:23:70:d2:2c:9b:08:9f:5c:47:5c:04:ae:a7:21:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E0:DC:5E:CB:A7:15:02:84:4D:C6:32:66:FF:26:0E:F5:91:38:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl

            X509v3 Authority Key Identifier:
                keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:df:66:ff:44:ba:e6:0c:7b:08:b5:9a:3e:56:1d:11:80:b0:
         41:bc:06:c2:55:2a:e5:67:10:04:0c:db:4e:a9:39:44:85:b9:
         b1:f8:4c:a7:59:ee:36:bd:b3:9f:9d:44:bb:d0:49:b1:8e:45:
         8d:99:00:30:89:f8:60:f2:ce:3d:c5:73:b7:16:03:b5:91:7a:
         16:6b:d0:1c:a6:41:6b:9c:18:24:34:fa:67:35:a7:23:7b:e4:
         88:cb:8d:1b:a6:e9:5c:34:48:69:29:60:27:ff:64:e7:4e:91:
         f5:df:a0:e5:1f:92:eb:e3:f3:a7:c2:63:c2:27:a4:86:22:f9:
         c0:85:8a:72:0a:61:42:96:83:e4:6a:a6:7d:a7:fd:11:37:63:
         86:6f:ad:57:87:db:9e:72:c3:6d:75:57:9b:f1:74:46:1f:af:
         d6:cd:21:81:2c:c6:c4:6c:88:55:c3:08:f3:cd:10:df:a1:d2:
         a8:8d:13:9e:3a:a1:c8:a9:e1:0f:8f:62:fd:49:ab:39:b4:57:
         dc:81:02:86:d4:c3:64:ce:58:48:ef:b1:70:0b:8a:5a:9d:9f:
         12:34:a1:64:5e:34:c2:ab:08:74:82:16:d8:1d:a7:f6:be:22:
         06:48:59:f2:bc:e5:5a:7b:7e:48:9e:1c:6c:1c:fd:dd:d4:35:
         ac:c2:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:51 2024 by rpki-client on console-ams.rpki-client.org