Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
File:                     9d2235b7-541b-384f-9916-48c6dc43d957.roa (raw, json)
Hash identifier:          2tkbpce2pUE+/Afm8cqyw5vr4xGltoElpAP1p6/Fdlw=
Subject key identifier:   76:62:75:0A:9C:4E:14:4B:71:DF:E5:6C:0A:DF:17:B4:49:B7:47:49
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848F65BD65F2E0E3DBE30749C40
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        52.129.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d6:5f:2e:0e:3d:be:30:74:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=ab38bf2b-ba09-4edd-ad06-1e493e7fb6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:1b:05:a4:ca:d0:11:c0:ec:db:8a:0e:96:
                    6d:18:01:f6:0a:37:1f:ab:85:81:85:5c:32:56:61:
                    e7:60:15:96:09:29:19:10:21:e3:4f:ad:4f:ff:5e:
                    25:53:e2:c7:ae:74:4a:c1:36:ac:e5:a6:f2:fd:26:
                    df:e6:9f:d1:77:c5:5a:e8:75:09:5e:86:e6:3c:9b:
                    11:8b:a2:44:2c:e3:3c:2f:11:57:68:e4:da:f9:0c:
                    95:31:ea:a0:93:58:c4:e4:f9:bb:11:13:71:e0:3b:
                    0e:d8:fc:c2:1a:e7:31:1d:1a:04:b2:c3:d9:86:b7:
                    e8:43:80:f1:bb:24:cd:f1:38:7a:c0:e8:87:60:34:
                    02:a5:ac:74:dc:bf:27:f9:ea:cb:65:9e:03:c7:0d:
                    8e:7d:12:be:b4:d3:34:41:74:0d:9a:99:18:fe:81:
                    2e:f7:77:6f:23:8e:33:8a:f8:8c:53:ea:7b:eb:50:
                    a9:1b:68:e0:06:4d:4f:a1:3e:23:cd:13:f7:69:88:
                    b5:b0:7e:18:7e:06:17:ba:69:ba:59:58:98:e6:3b:
                    91:7a:66:14:09:0a:11:92:8b:65:48:9b:31:4c:ca:
                    78:e9:cb:86:f3:c9:ad:43:e9:85:84:fd:b5:91:34:
                    89:43:37:bf:41:c5:4d:bf:ab:a0:6f:8a:39:40:e4:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:62:75:0A:9C:4E:14:4B:71:DF:E5:6C:0A:DF:17:B4:49:B7:47:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:6b:78:81:e6:3b:f0:86:7f:8c:a6:0c:92:26:ec:2c:e3:
         68:0b:66:d1:4d:36:fb:5b:93:73:91:58:b4:18:b8:54:93:ba:
         c5:0c:f7:9b:ad:d2:fc:5d:3b:97:59:e4:29:89:bd:6d:40:13:
         1e:ba:12:89:15:ca:f7:31:dc:4c:c9:7f:1d:f7:ff:09:b2:a9:
         03:1e:81:b0:68:3b:b7:8c:78:39:bf:c1:4f:9d:fa:e0:98:b0:
         64:84:ba:ff:3d:96:76:37:5e:88:43:fd:1f:7f:27:5a:d2:4b:
         fc:73:ba:01:32:73:7b:e2:33:8c:27:3d:5b:0e:99:c4:a9:c6:
         2c:65:6a:a1:9c:d9:a0:73:47:7d:bc:e8:09:3c:09:10:ab:49:
         27:9a:b4:9e:2a:05:c3:70:ce:df:ff:fe:f0:a4:2c:3b:e2:4d:
         a5:3c:fb:8e:fc:06:94:88:13:eb:f7:ce:55:c9:e7:f9:0c:fb:
         32:3e:e2:1d:9f:68:65:97:3e:d4:c0:b4:34:d6:0a:5a:6c:08:
         4f:3a:33:b7:36:cc:7a:8d:b3:f6:45:8f:3d:e5:f5:90:8e:fd:
         09:ed:0f:c7:a4:97:e1:ab:3c:eb:99:df:6a:50:5f:df:d0:74:
         49:ab:f5:b2:75:69:ba:dc:b7:43:93:d3:2c:c4:33:59:9e:1f:
         3f:7b:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:14 2025 by rpki-client