Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa
File:                     f00f68e4-f811-3826-9ffc-52fd451fbc76.roa (raw, json)
Hash identifier:          NL/qHv5vjSuTlwJQBDeLz0b+I8umuwVaffJxnCcuCQw=
Subject key identifier:   2E:A5:8D:AF:CB:FF:DF:01:C2:56:0D:D1:6D:96:9D:80:DD:4E:50:C8
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848F65BD6F6F5EBB1555C1487D0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        52.129.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d6:f6:f5:eb:b1:55:5c:14:87:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=55ccbd1a-1077-4934-b97d-fe1959fc764e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:87:bd:73:c5:53:e4:6c:51:e7:8a:65:9e:
                    e3:ff:87:82:ce:f3:8c:13:85:16:b4:f9:c2:5e:fc:
                    e4:31:aa:1e:da:9f:e5:32:9a:da:c9:f4:b0:75:2f:
                    e7:cf:9a:d2:df:a8:a0:f5:80:f1:76:ac:a1:e7:48:
                    9d:a6:59:77:d5:a7:d9:cb:f1:81:43:89:7b:00:24:
                    59:32:04:87:1a:5e:67:c8:15:e5:62:a3:8b:b9:b3:
                    27:9c:c4:d3:9b:3c:6d:15:11:4e:56:2e:5b:ca:ca:
                    d1:7d:6f:89:5c:34:d3:44:05:a8:99:72:71:d4:1e:
                    ba:d2:50:9c:5e:dd:71:b5:47:c0:b7:ea:51:cb:23:
                    50:44:fc:b4:b2:e4:f3:d5:c8:9a:3c:6f:f9:99:a6:
                    dd:a5:f5:24:0a:50:ed:a3:c0:5e:0a:55:9e:23:39:
                    b8:ea:1f:0f:55:ab:d5:b3:7f:6a:3c:5a:76:f6:48:
                    b7:78:4a:bf:3d:6b:f8:db:e3:2b:89:fb:61:9e:a9:
                    25:47:19:08:ac:e7:58:72:8f:5e:90:70:4f:d7:29:
                    a2:e8:a2:b2:16:0a:53:de:b4:76:35:50:bf:b1:92:
                    3f:ab:7a:f5:b7:0f:67:fa:11:28:5f:3f:3a:83:50:
                    68:3b:59:3d:59:8c:22:31:95:f8:af:8d:b3:ec:40:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:8D:AF:CB:FF:DF:01:C2:56:0D:D1:6D:96:9D:80:DD:4E:50:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:9e:ef:2d:03:69:71:51:f8:05:46:2f:fb:67:49:66:ef:
         94:25:8d:f8:07:21:e8:b3:89:24:53:62:b8:c6:ab:79:b9:03:
         1b:74:e1:d3:cf:8f:54:46:aa:2a:f2:fa:49:ff:2c:e2:82:13:
         26:c0:95:68:95:07:74:e6:3d:0f:3e:bf:4c:1c:26:38:9d:ce:
         7e:5d:5d:fc:bc:d4:50:0c:97:2f:a9:05:9a:96:60:41:3b:60:
         cc:cb:36:69:dd:c7:f0:50:bc:c9:8f:48:3f:ce:82:3e:41:6a:
         b9:c0:8f:4b:ab:5a:2d:f0:07:43:d9:fe:cc:64:3a:39:e9:32:
         92:06:1e:99:4b:53:8e:f9:27:c7:9e:7a:d9:5d:d0:a8:13:8e:
         e9:b0:0c:56:9c:c0:84:d2:2a:e3:7e:d2:91:ce:e9:16:14:38:
         6b:0d:77:a6:29:6c:ff:70:b1:6a:01:a8:49:37:05:c4:c1:98:
         cc:92:f7:37:92:96:ea:5f:77:45:0e:b0:5d:2d:09:36:3d:97:
         9f:b3:42:de:cf:66:89:99:0d:e0:c1:12:00:3b:df:30:20:ca:
         8a:aa:ca:e8:39:98:1b:cd:52:4d:2b:8a:4b:6d:35:7d:c0:da:
         43:57:c2:f1:a7:e5:e9:a9:71:cb:19:04:e5:e6:37:5d:67:fc:
         11:c4:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:22:22 2025 by rpki-client