Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53bf7cfe-db0c-33f9-a914-e82c99896783.roa
File:                     53bf7cfe-db0c-33f9-a914-e82c99896783.roa (raw, json)
Hash identifier:          1f4rCcXPf7O+VDUZ+1nKsHGrBGboqLFA9EsB99JD6ag=
Subject key identifier:   F2:69:BE:2D:62:1A:C0:65:C3:CD:6A:37:FA:EC:87:40:D4:3C:90:37
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285845777DDBD08A5FED2F1A2A8400
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53bf7cfe-db0c-33f9-a914-e82c99896783.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        52.129.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:db:d0:8a:5f:ed:2f:1a:2a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=837aab0f-ecf4-424d-ac78-673577b7cf1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:30:1c:5d:72:67:cb:0c:e8:0a:f1:75:8f:63:
                    8b:02:b7:9b:ce:11:42:27:ff:79:ee:81:43:74:b7:
                    1c:54:59:c8:5c:c7:f8:9b:d8:93:d4:ea:44:bf:ed:
                    4f:a5:a1:7a:d2:c1:29:9d:8d:24:ee:f7:cf:2f:df:
                    8d:d8:d6:ec:30:ad:5e:04:08:88:25:79:c1:f6:8c:
                    87:49:ba:bf:a6:47:70:6d:7a:38:55:24:3b:82:c0:
                    2b:86:0d:e8:5f:f7:df:07:82:e9:4e:0e:01:c3:8b:
                    ee:08:e4:8d:28:2e:f5:0b:62:68:b6:8f:5d:ea:fb:
                    11:42:a2:fe:99:8d:61:ad:9b:6b:1f:66:1e:ec:50:
                    70:6d:16:f4:51:2f:86:c9:64:54:6b:52:be:c2:30:
                    f0:a1:b1:35:85:8f:ad:17:59:8c:ca:3b:86:37:4c:
                    e7:97:40:53:e0:99:e1:02:c7:b7:07:5b:58:a6:02:
                    0c:da:2f:c0:c6:5d:64:cf:57:40:74:df:10:5a:aa:
                    75:be:e4:cf:bf:ff:0f:80:4d:30:f6:c4:01:fb:2a:
                    05:fa:b8:ac:bb:eb:ac:15:a0:10:aa:44:e6:ad:7c:
                    a8:4d:53:28:dc:45:a3:f5:ea:c3:92:62:3b:35:24:
                    c6:d5:e0:70:7a:a5:fe:53:aa:71:ad:8d:6e:7b:57:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:69:BE:2D:62:1A:C0:65:C3:CD:6A:37:FA:EC:87:40:D4:3C:90:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53bf7cfe-db0c-33f9-a914-e82c99896783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:09:2f:f7:6e:e9:e1:06:71:3c:34:3a:a1:49:07:06:f2:
         46:a2:6b:85:d8:fd:44:8c:73:f1:9e:2b:65:d4:d5:8e:3b:d0:
         7a:43:1f:62:66:53:94:98:3b:7b:94:33:a5:d5:1c:f3:85:ce:
         97:6f:53:5c:d7:8a:ed:87:d6:08:95:74:b5:c4:a2:5f:6b:35:
         41:b8:75:8b:5b:56:43:c1:d2:fd:26:a6:88:f8:f9:26:c7:a8:
         5c:97:3d:d2:1f:4d:f5:f6:9a:b4:c8:c6:b2:3b:43:20:df:ed:
         9b:58:4b:cf:18:e5:84:ac:cb:17:aa:06:05:b5:c9:cf:f9:0f:
         07:81:7d:06:ff:5a:2a:a6:5d:92:90:e0:84:a8:be:5f:76:80:
         60:c4:70:7d:4f:f4:04:95:cc:a4:f3:7f:4a:24:cd:03:38:30:
         06:81:16:0d:db:f0:2c:cb:ec:6c:f1:81:6b:04:5b:6e:5c:24:
         3f:36:00:dd:f3:02:ba:dd:0d:1f:c2:bd:1c:be:75:5d:ca:f0:
         d1:5a:fa:a6:aa:8e:4e:06:cd:c9:33:b8:d1:4d:85:ad:09:a8:
         4f:f6:b7:0a:66:34:3d:53:24:4c:13:aa:01:85:9a:33:d0:d5:
         e2:84:de:0d:a0:77:1e:b0:96:b7:aa:e8:83:03:40:18:db:c1:
         2c:09:61:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:05 2024 by rpki-client on console-fra.rpki-client.org