Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa
File:                     0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa (raw, json)
Hash identifier:          sbw5QmPrGCUYG6TTVb4qVs4stwHF5RCX98ScoqXRl3s=
Subject key identifier:   F4:9C:AC:9E:71:D8:9F:1E:7C:46:81:B0:0E:1D:4A:49:53:31:14:C3
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848F65BCFF8723F6C46C8B9BD00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        52.129.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cf:f8:72:3f:6c:46:c8:b9:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=c3e188a8-5b3e-475b-aefd-30018fde8fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:33:4d:e5:d4:f9:28:11:b7:37:c8:46:5b:
                    87:cb:6f:29:82:59:60:ae:6b:38:94:3b:8b:e6:2e:
                    cb:27:28:b5:ae:e4:91:5e:43:9a:c2:31:d6:f9:1a:
                    25:76:11:c1:84:6d:5f:92:53:18:a1:e3:1d:e0:27:
                    b4:af:8b:f4:96:4c:86:fb:cf:f3:a7:a2:8d:49:2c:
                    b6:9a:35:f9:fa:a7:b6:ad:e6:e5:58:02:de:31:4b:
                    a5:b5:1d:95:78:f1:c2:02:22:32:06:19:cb:de:ac:
                    04:47:2d:3e:2c:4e:5e:31:b6:e1:ee:75:1c:c8:48:
                    63:8f:12:50:c4:a1:6d:3a:c8:3d:e0:08:a0:59:d9:
                    76:c1:2f:a7:ae:6d:9a:af:9e:fa:10:4e:56:32:e3:
                    9d:29:f3:1b:94:7f:91:b8:52:32:a8:7b:79:cb:a2:
                    78:25:b9:a5:e0:0b:db:91:e9:c1:8f:2f:67:69:7c:
                    e5:d1:c9:89:37:67:9c:66:4c:31:79:da:d7:db:ad:
                    20:08:12:27:ed:a4:4f:e2:5d:3b:5b:d2:40:d6:a2:
                    f2:c5:38:de:63:30:ab:50:ac:3e:f8:14:8f:3c:3d:
                    9b:81:ff:c2:4b:ff:88:78:93:d5:64:57:d3:bf:0d:
                    3f:58:5a:17:b2:ce:9e:f4:90:bb:88:e5:2d:d5:b5:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:AC:9E:71:D8:9F:1E:7C:46:81:B0:0E:1D:4A:49:53:31:14:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:32:a4:a7:5a:54:43:1e:48:bd:c2:39:f9:34:a2:52:8a:
         85:6f:22:0b:a1:f7:63:6a:c1:4e:d1:95:2a:39:2a:80:09:84:
         05:71:ef:df:c5:47:56:96:87:d1:f4:ad:e3:a2:7e:f9:85:5c:
         5a:ef:4c:b6:87:44:3c:50:2e:2a:15:3d:2a:25:41:18:36:28:
         61:3d:00:0c:05:b7:3d:c5:04:42:4e:04:ab:e2:77:44:ba:4e:
         57:a4:6e:88:0d:b5:ad:43:40:45:17:cd:ac:a4:f3:11:e4:7a:
         50:5b:6d:e8:40:d4:f4:c2:b2:c3:33:a1:21:28:37:3c:9c:76:
         4b:e7:00:10:e8:0c:2a:68:7e:00:05:f8:26:09:51:d5:fd:36:
         3e:3c:b4:37:2b:d1:42:be:88:d6:10:ac:29:41:fe:6e:3e:05:
         70:fb:ba:40:ce:04:75:2d:b3:71:22:8b:80:13:83:6c:83:3e:
         8b:ef:f3:3c:6e:25:e0:d3:b4:89:9c:89:18:2d:31:1a:cf:97:
         73:40:d3:2f:3b:bc:8d:46:2b:0a:67:03:2d:50:02:c7:11:c0:
         d0:32:f6:a0:ad:89:bb:26:cf:d1:63:bf:ef:2d:4b:eb:d9:af:
         fc:19:53:11:b8:2a:1d:39:83:ef:26:3e:34:ab:83:4a:a5:71:
         28:24:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:02:58 2025 by rpki-client