Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0dd994a8-d72a-3dcf-91fa-c64edc8e45df.roa
File:                     0dd994a8-d72a-3dcf-91fa-c64edc8e45df.roa (raw, json)
Hash identifier:          S0MhlFlHikihuPK5w1A8c56aHWPks3s8Xg/rU4y0gxM=
Subject key identifier:   35:03:78:FF:6E:5E:9A:19:DE:34:54:BA:0C:51:47:1B:0D:A5:CA:43
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285845777DDEBDB3436718E2853CC0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0dd994a8-d72a-3dcf-91fa-c64edc8e45df.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        52.129.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:de:bd:b3:43:67:18:e2:85:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=a5e1f602-2e90-43df-8d16-b002c12ad5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:bb:6c:af:48:b0:08:78:2d:75:c9:83:96:
                    a3:5c:0c:24:64:33:70:27:bb:0a:c9:2d:90:83:c3:
                    6e:03:bd:14:8f:31:55:12:b0:4c:c5:65:78:59:1f:
                    72:81:61:6c:59:54:48:71:b5:72:4d:be:ce:a4:52:
                    a1:55:ed:39:3a:73:6f:bf:b4:65:02:70:ee:3a:e9:
                    cf:45:e6:d2:aa:d9:9f:96:c2:50:67:41:dd:0a:c4:
                    f7:54:dd:12:92:eb:4a:eb:fb:c3:92:86:e1:cf:72:
                    e3:3a:db:2d:c4:9a:c5:ab:8a:f6:1b:8a:33:ab:31:
                    a1:82:02:58:c1:49:91:68:4c:0f:80:84:d8:c4:8b:
                    eb:d6:08:d3:80:e2:af:78:5c:f8:57:b2:ff:09:2a:
                    d7:cb:e4:cf:1e:2f:29:cf:17:a7:b9:eb:b6:67:ea:
                    c5:fb:d4:02:45:d7:91:f8:58:f8:66:1f:dc:5c:a6:
                    4d:13:7d:63:b3:e7:57:b5:e4:47:49:17:75:53:dd:
                    11:61:83:7c:bd:3c:8d:4c:70:68:56:8a:76:9a:e2:
                    48:eb:8d:fc:7a:1f:4b:5f:d4:72:9a:61:4a:ea:f6:
                    6b:d9:c3:c9:b2:cd:19:25:44:93:04:be:f2:9a:d1:
                    d1:b1:45:e5:29:ee:a5:09:49:50:78:b8:0a:25:92:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:78:FF:6E:5E:9A:19:DE:34:54:BA:0C:51:47:1B:0D:A5:CA:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0dd994a8-d72a-3dcf-91fa-c64edc8e45df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:92:fa:d7:37:9e:aa:dd:58:ae:9d:fd:3c:1c:c5:ab:4f:
         98:d5:42:65:9c:14:56:bc:e6:1b:2d:f4:c3:c7:07:42:71:1d:
         64:d5:d0:d5:e5:11:26:df:79:2b:3c:62:5f:20:68:b0:b5:6c:
         c8:e7:47:58:69:33:e3:21:9d:e5:a7:c4:2f:48:3d:5b:86:0b:
         3e:15:2c:d2:7e:3d:5d:b4:4f:06:83:ba:6f:7b:2b:f0:d5:93:
         4b:c5:a0:29:ea:62:8b:75:b2:f0:74:fa:b8:63:22:83:8d:ed:
         b0:56:d2:18:62:82:19:4f:96:a1:3e:21:e7:a6:71:3b:5d:a0:
         d0:bc:c1:1c:67:ad:b2:93:ad:ec:8e:7c:21:53:3c:cf:79:87:
         bb:4b:09:29:2e:1f:eb:af:5e:13:70:ab:8f:7f:21:66:ce:7a:
         89:b8:62:9d:50:08:e0:95:e9:fc:70:fa:94:79:64:71:24:bf:
         40:4b:89:f4:33:67:ea:62:b9:2d:1b:0f:b1:3a:e0:1e:c8:56:
         23:1d:4c:e3:68:de:9c:bc:63:6d:12:14:57:8f:24:0f:b2:4c:
         c3:3d:64:a4:96:c3:17:46:51:c2:95:70:06:6a:2d:34:68:b6:
         31:b4:9c:d1:ec:a6:15:3d:54:5e:54:77:b1:15:c3:9f:a7:59:
         69:cb:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:38 2024 by rpki-client on console-fra.rpki-client.org