Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa
File:                     65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa (raw, json)
Hash identifier:          eWSYyO5WUGEfUKbI54mhIfgcs1Ert+HjuvroDnVtx6Q=
Subject key identifier:   30:C0:40:6E:A2:45:F3:9F:71:0D:3E:A9:C9:F9:85:A6:B6:7A:EC:1B
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584784567C9AA0B5A72A35F9C180
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     397018
IP address blocks:        52.144.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7c:9a:a0:b5:a7:2a:35:f9:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=e9b0bb98-e866-4e45-843b-0bfd66b90d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:94:06:f5:af:b5:77:8b:84:2d:b2:46:4c:
                    0a:c4:60:14:56:3e:03:f9:f5:68:03:7a:4e:1f:b2:
                    d7:2c:28:5c:06:4d:8c:39:8c:aa:b1:92:3f:e2:1b:
                    48:11:14:f0:fa:85:1a:c7:04:3a:25:6e:b4:4d:73:
                    55:4e:b8:ca:4e:39:e3:53:fa:b2:f8:ed:cb:fb:6f:
                    32:e5:1b:61:fd:b2:43:fe:5b:a4:31:16:34:61:e5:
                    ec:ef:b5:b8:d0:47:4a:1e:ce:a5:0b:98:2b:69:45:
                    21:ec:31:a2:37:47:db:a9:bf:c9:50:bc:3f:7c:c8:
                    49:e5:ec:b7:95:30:9e:8a:ca:73:f3:d1:a4:ec:0d:
                    04:60:5c:41:b0:df:2b:ef:a1:d5:e0:b6:4c:65:63:
                    2b:e7:d8:14:83:38:e4:c9:42:c6:75:1e:0e:c0:60:
                    2d:e4:c4:3e:93:cb:b7:b8:0f:f5:7c:95:67:f8:ba:
                    10:49:ae:55:5d:ca:df:24:e8:8d:70:21:88:ff:4f:
                    1f:59:f2:37:2b:72:ec:68:9c:3f:a2:09:bf:16:45:
                    7b:25:10:ab:34:1b:be:54:e0:17:41:63:15:9b:5d:
                    a5:19:98:a2:63:0f:c8:82:2c:55:04:3c:63:e7:cd:
                    6d:c8:0e:be:10:f0:37:bd:89:12:4a:df:e8:6c:2b:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C0:40:6E:A2:45:F3:9F:71:0D:3E:A9:C9:F9:85:A6:B6:7A:EC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/65d87ce9-84fc-33cc-afd1-c1a14f8f8523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a6:e9:dc:73:4c:e0:05:dc:92:1a:3a:fc:ad:ce:15:6a:19:
         50:e8:9c:a7:be:69:00:ed:fb:2b:3d:3e:ba:da:c6:1d:f1:3f:
         05:11:81:12:10:17:85:9a:85:44:0a:25:2e:65:eb:25:f6:70:
         c3:5b:a4:f8:f8:ad:0d:95:43:2d:e9:ff:d7:18:b6:d9:ba:f3:
         42:5f:60:9a:11:5a:9f:aa:60:de:dd:52:1d:e2:24:82:f8:66:
         41:6f:26:b9:d2:b8:7c:47:c7:f5:5a:2a:b2:de:97:a2:cd:7f:
         87:cc:c2:82:af:8e:a3:fe:93:ff:f3:94:e2:75:21:2a:af:dd:
         57:91:5b:32:e7:14:27:06:98:da:b1:1e:25:a1:51:6f:16:a8:
         d3:ab:aa:9c:97:bc:e4:19:5f:d2:63:32:f7:41:69:4b:32:4f:
         bb:65:a1:70:a4:72:f9:93:db:18:0e:a1:17:cc:95:8e:37:c1:
         a3:b8:94:da:37:1a:e1:dc:50:9a:1f:97:fe:eb:12:2d:cb:3e:
         2a:ec:e8:3d:8b:2b:d2:d7:de:6a:cd:b5:61:e9:74:f5:d9:04:
         b2:0b:e0:f8:e8:6f:b2:87:ed:e7:8c:df:7f:ef:9a:c7:6b:8c:
         e4:2b:ef:89:b7:f2:b5:e3:5e:a7:31:61:e8:64:0d:94:98:13:
         ab:5b:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:05 2024 by rpki-client on console-ams.rpki-client.org