Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa
File:                     f00f68e4-f811-3826-9ffc-52fd451fbc76.roa (raw, json)
Hash identifier:          sjuy8lzVkvdltzMN5s2rszmqhMps3W6W4s8lQqv55Mg=
Subject key identifier:   CC:3C:70:17:07:9F:FD:B0:90:59:B3:91:75:E0:E1:AB:BC:0E:BD:D0
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285845777DDFB340A057C2308944A0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        52.129.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:df:b3:40:a0:57:c2:30:89:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=8048c1b3-d84c-42c6-b17f-42524ecaa28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:57:fd:53:64:1c:5d:27:77:e3:96:0c:14:bc:
                    92:45:dd:bb:05:ba:02:33:8e:b8:9b:ac:c1:6b:44:
                    06:8a:d1:05:57:ff:8d:31:d9:f2:12:00:68:8e:e5:
                    c0:5f:ec:fe:a5:3a:ad:5b:79:70:e4:18:b8:8a:55:
                    79:55:ff:38:86:e5:43:87:15:62:36:f2:81:f3:a9:
                    e2:dc:b9:81:42:40:e5:97:d3:3c:7c:f3:43:84:f7:
                    db:1d:b0:8f:84:0c:3f:e8:d1:ca:f2:1d:4c:d4:9b:
                    3d:d7:d9:ce:2f:18:e2:0b:ac:16:f0:6d:44:c6:b4:
                    22:db:35:68:46:95:bc:62:69:ba:bc:ac:f6:25:59:
                    92:16:d2:6c:7a:68:88:40:0f:6a:f8:8c:fe:33:a0:
                    64:55:b4:d1:1d:e6:f8:35:3e:0d:7f:9d:6d:7d:ca:
                    ce:1f:05:97:af:3e:80:17:3a:14:0e:c4:01:53:b7:
                    1a:d1:1a:6c:58:31:b5:ea:3c:ab:0e:ce:64:52:69:
                    cb:8b:24:87:f9:b0:9f:32:54:0a:00:1f:8d:da:ef:
                    0a:56:3b:44:f9:f9:85:40:ae:8d:80:17:7e:1a:dc:
                    5e:82:55:c9:1e:6f:b2:69:cd:70:69:31:45:e6:25:
                    56:94:78:bc:23:49:6d:a3:cb:59:be:fd:30:99:6f:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3C:70:17:07:9F:FD:B0:90:59:B3:91:75:E0:E1:AB:BC:0E:BD:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:c0:0c:b4:2b:9c:67:c7:01:59:27:a0:00:2f:22:04:17:
         d9:16:c1:1f:c1:34:2e:56:55:a6:17:b4:77:54:7c:73:6c:32:
         1c:e2:db:f2:2c:f0:41:de:54:af:bf:4e:6a:d5:20:f2:8a:9c:
         c3:13:09:5f:8c:e3:9a:38:7b:57:47:0e:61:dc:5d:3c:92:2c:
         05:45:b1:05:49:ea:ff:6c:64:a7:0f:da:3b:41:90:c5:26:06:
         16:99:df:a3:0f:89:55:74:15:fb:50:d0:33:55:37:b8:7d:80:
         9c:5a:be:ab:22:12:5a:03:36:ef:47:91:82:8e:c9:18:6f:dd:
         55:16:c8:b9:cd:39:1b:05:43:13:8d:38:7d:95:c5:9c:cc:ce:
         bc:2f:62:54:1b:7f:62:7b:91:3d:73:57:53:d0:72:ea:d3:9f:
         55:f8:1f:b9:9e:0a:70:7c:e1:15:2e:6a:27:6e:25:e6:00:70:
         a9:87:9e:de:fa:f3:30:b1:49:d2:1f:85:de:2b:1e:75:00:07:
         49:a3:04:1e:b4:81:39:cd:92:71:1f:02:33:e3:67:a5:31:cc:
         43:d2:85:c4:ff:38:d5:27:33:af:c7:8f:0c:0f:06:5b:22:e8:
         9a:1d:ad:36:36:dd:ca:47:9f:14:e2:1b:81:69:dd:65:14:7a:
         cb:26:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:23:36 2024 by rpki-client on console-ams.rpki-client.org