Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa
File:                     0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa (raw, json)
Hash identifier:          XYrl6vonxsvBkvUMC2BEMamQFB//M3zV6K9SuxiB5BQ=
Subject key identifier:   7B:FB:3D:86:54:30:4F:0D:AC:29:5F:AC:6A:79:D4:4A:98:D1:61:44
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848F65BD0278F7D30593B116980
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        52.129.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d0:27:8f:7d:30:59:3b:11:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=49121556-3094-46f3-a2c8-d6a48cc8c5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:25:fa:11:78:34:c9:a1:0d:a4:6d:21:1d:
                    6d:6a:06:bb:22:ff:99:b4:61:9b:ae:2c:a8:10:fb:
                    99:2a:a2:f4:cc:16:53:74:85:1b:c7:9e:a8:a9:f9:
                    a3:f6:2a:d6:4a:64:c6:20:99:c5:8e:f2:f0:cc:13:
                    02:ac:26:32:a7:1e:0b:2f:71:2f:7f:b4:e2:71:2c:
                    a3:d1:65:ab:7d:2c:e5:f6:dc:2a:ed:45:27:63:b0:
                    b1:ff:79:b7:83:5b:80:11:5b:7f:d0:e2:ea:37:82:
                    cd:26:d0:72:6d:f2:e8:9a:4d:e1:d8:f7:35:46:17:
                    53:15:d1:d6:a0:e5:b4:e3:c6:f2:cc:f9:f1:87:78:
                    42:ab:6c:7d:c9:fb:e4:95:f8:4c:79:28:3f:45:9a:
                    1e:c7:98:1a:d4:f1:88:a1:86:9f:51:5b:e7:11:92:
                    2e:fa:d7:32:8d:8e:c6:90:7b:d6:40:24:0d:19:66:
                    06:26:2b:06:ea:2c:22:41:fb:e8:26:cd:46:5c:46:
                    cd:6d:40:9d:38:4f:a4:bc:b0:c4:96:cf:6f:9d:eb:
                    29:b1:0c:1e:9d:76:19:73:ce:4e:90:2c:3d:96:be:
                    31:8a:38:ff:1d:a9:77:99:a3:22:db:79:59:0b:a1:
                    70:6c:e4:28:88:4a:3e:ae:ab:1d:b5:d2:db:3a:24:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FB:3D:86:54:30:4F:0D:AC:29:5F:AC:6A:79:D4:4A:98:D1:61:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:40:ed:24:53:41:60:62:20:70:7d:4b:a3:f2:30:74:d4:e9:
         56:ef:3e:6c:44:ad:b2:ce:5c:70:fe:1b:3a:b7:a7:47:15:d1:
         ef:ec:c9:aa:05:54:85:48:70:ef:3b:c3:f8:10:6f:97:d3:72:
         4a:de:fe:96:99:b9:ad:7c:4a:0c:50:9a:e8:ce:0c:7d:4e:6f:
         20:a0:bd:bf:2c:9e:2f:c4:64:0d:2f:2b:02:08:60:23:56:a8:
         d2:06:99:47:fa:68:b7:f3:0e:f9:7c:dc:d3:87:46:0e:0c:8c:
         06:27:a6:96:0f:83:a9:69:cb:e4:9d:4b:80:82:4b:1d:5f:6d:
         77:fa:c5:6c:a9:f5:71:0a:ef:8d:51:ef:b2:32:a3:10:20:b3:
         1c:a9:7b:0d:cb:1f:18:6c:b0:a5:cb:59:41:16:e4:6a:cc:7a:
         40:f2:83:46:d9:f7:97:7d:50:67:dd:4e:9c:d1:17:50:2a:03:
         6b:a5:c9:ef:ad:18:85:dd:30:ff:1c:a5:b5:4f:07:a3:ad:74:
         21:18:ec:ee:5f:fd:3d:09:c2:6d:5a:f2:01:2f:b1:f3:5c:a7:
         99:8a:0b:3c:2f:cd:62:cc:10:98:e0:0f:3d:a0:d4:8f:3b:4b:
         f9:ec:41:ab:a0:f7:e8:93:84:b8:39:30:87:eb:c5:98:fd:3c:
         d1:4b:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:25 2025 by rpki-client