Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
File:                     b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa (raw, json)
Hash identifier:          /Fp3X7bhWdgHt+LW0AW9NPxf0L8uU0IMBvpwwc7hFog=
Subject key identifier:   90:A3:92:4D:49:B9:DB:50:67:B8:69:78:1A:15:DB:2A:D4:A7:A5:27
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F4328584789EBF32967B3D7E49DAA42B0
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     46489
IP address blocks:        52.129.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f3:29:67:b3:d7:e4:9d:aa:42:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=a973bed8-1cc8-46aa-96f5-2280c31ce991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:73:34:ed:33:b3:3c:32:0a:ce:39:d7:bf:
                    0c:58:e0:17:b7:6e:58:52:94:49:ec:30:aa:d2:67:
                    37:13:6c:45:62:69:f7:eb:8a:68:2e:53:b4:20:c2:
                    f7:4d:a2:86:9f:38:ba:ae:d3:6c:04:06:b7:42:0e:
                    e0:90:18:76:ca:6a:ac:e0:95:36:1c:92:33:57:9c:
                    4e:b1:3b:17:34:b4:d3:29:97:26:4d:3b:83:12:b8:
                    2c:4e:84:8b:ab:32:08:93:ec:cb:fb:33:25:eb:af:
                    a6:63:22:ac:33:37:52:12:45:25:b2:d3:65:d0:e3:
                    43:73:70:33:61:c5:ae:e6:fe:9a:ca:f4:ca:69:ec:
                    0f:aa:28:1d:b2:03:2e:2e:85:c9:cf:13:2d:0f:fd:
                    4c:40:9c:07:d8:5e:87:53:df:a3:9c:0c:74:bd:c6:
                    0f:cf:02:48:00:cf:69:c6:8f:c5:f3:5a:7f:fd:6c:
                    b4:d9:f8:2e:76:59:92:eb:5b:d3:dc:99:c8:0e:f2:
                    89:91:50:5b:fa:e9:b4:c6:7a:53:49:47:9a:d9:14:
                    97:68:a3:cc:62:e5:09:bb:e7:25:5b:43:2b:db:2f:
                    21:2a:0f:7b:4c:2c:62:36:ba:da:95:dc:87:0f:40:
                    fa:82:e8:fe:85:4a:f4:46:6a:95:59:31:51:ad:9e:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A3:92:4D:49:B9:DB:50:67:B8:69:78:1A:15:DB:2A:D4:A7:A5:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:eb:78:73:63:f9:7e:fa:ca:52:a7:95:ac:58:88:94:ff:
         b7:ba:6e:5a:0f:e9:16:61:97:66:70:b3:b8:8c:d2:2e:88:a6:
         f1:81:5b:47:92:a7:28:5d:8f:bb:09:38:3c:aa:84:7c:5f:7d:
         a8:5d:5d:0b:6f:1b:8f:ba:33:2d:10:2b:6a:fe:9d:cc:b5:a4:
         06:44:b2:0a:c0:4d:cd:ca:01:1a:d6:a0:40:fb:6a:f2:c1:ad:
         4a:a2:f3:8b:24:c3:0e:e9:33:0d:57:c9:bf:1e:1f:90:76:22:
         45:50:63:41:98:28:15:66:80:10:ca:fe:c5:fb:3c:b0:15:d9:
         c4:6f:ea:1f:27:69:36:fb:52:62:fc:f4:d9:aa:f4:5c:b9:ce:
         41:81:04:85:9a:a6:c7:06:bb:12:ef:29:91:ca:bc:75:7b:3a:
         41:97:dd:8f:f5:b7:45:08:c8:bb:6c:f8:34:55:45:f2:1a:50:
         d2:fd:ec:7c:1e:f1:e0:46:c5:8f:9e:d7:81:2a:63:f4:d9:db:
         6c:a0:d5:e2:9d:88:70:35:94:0c:43:44:92:3f:2d:05:7d:db:
         00:3d:97:9f:6c:9c:ed:c2:b6:07:8b:ad:59:f1:6f:59:81:70:
         e4:d2:58:51:27:4a:e7:fa:c4:4b:83:a9:f5:24:bb:dd:0e:23:
         18:c1:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org