Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa
File:                     fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa (raw, json)
Hash identifier:          lXd48mce7ZgNnc86CthfBSONDKocyCvllkQerCNyjAE=
Subject key identifier:   55:B0:CF:38:F5:4C:73:0F:F4:48:36:51:36:7F:81:60:CA:86:19:3C
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285845777DDC0F60CC9A657BE8B110
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        52.129.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:dc:0f:60:cc:9a:65:7b:e8:b1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=62f4d398-fd68-4cab-b62e-66cb2caa5101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:05:68:73:36:1b:2d:64:bf:93:a1:e3:7b:
                    b5:68:d3:da:1a:9d:de:05:e8:ff:e5:63:29:51:6d:
                    c3:05:75:1d:23:fa:44:8f:ce:63:fd:b3:61:f7:bf:
                    9e:de:35:83:78:b7:e3:25:51:ea:a7:b7:20:48:cb:
                    23:70:2d:25:04:db:61:00:cc:18:22:a9:ac:45:da:
                    8a:04:90:c2:af:27:c7:63:75:e7:5d:6e:56:47:e9:
                    12:26:12:be:bd:c4:fa:fd:9f:38:89:d2:88:ce:0d:
                    24:75:ae:d3:eb:08:b0:d8:c1:45:40:46:66:b4:0d:
                    43:ff:06:f4:94:dc:e6:24:5c:3d:64:6a:2f:f4:84:
                    5f:ff:06:6c:f5:d9:fa:4a:d1:0b:db:59:df:00:e3:
                    76:27:6a:2c:86:8d:b2:6f:88:ce:ad:22:75:f9:07:
                    b4:92:d0:22:ba:79:38:b4:79:07:c1:51:8a:51:82:
                    ec:48:ee:b0:18:ea:dd:e6:ec:67:f5:71:53:8a:4c:
                    fa:05:0f:0e:f4:a5:a4:90:97:e2:de:1d:08:a9:ce:
                    fb:96:90:e0:22:18:9e:d0:50:f7:8f:8e:30:8e:50:
                    78:10:70:26:6e:f3:3c:9f:98:c4:5c:c4:bd:1e:14:
                    8c:10:35:91:fc:80:84:f0:6c:c7:5a:76:29:8a:06:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B0:CF:38:F5:4C:73:0F:F4:48:36:51:36:7F:81:60:CA:86:19:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e9:73:99:b3:91:9e:c3:2d:2a:cd:90:2d:da:48:05:2a:ae:
         f2:e1:62:f0:50:d7:02:cf:27:a9:2d:50:a2:64:06:cd:69:ca:
         39:49:11:51:00:49:b4:c1:68:f3:88:8c:cb:cb:3b:01:b4:21:
         4a:7c:70:94:13:01:7b:f4:32:ef:dd:d3:f1:c5:3c:1f:8f:b3:
         dd:ef:ca:e5:ea:7b:48:52:66:6f:e7:fd:c9:ab:af:88:d1:4a:
         45:6c:54:23:46:5f:92:d4:81:2a:8f:8a:8d:e7:b8:a0:4f:fd:
         a5:ae:83:66:79:01:21:fc:b7:1c:da:60:d6:bb:81:16:17:2c:
         8f:d1:16:c9:08:02:c6:25:b0:d0:18:10:3b:e7:63:5f:66:6b:
         ce:a7:ca:6f:1e:3b:c9:df:2e:ba:2d:df:b9:e4:79:3b:27:2d:
         54:30:3b:bc:46:f5:a7:63:0b:93:bc:68:bf:d1:7e:88:67:8d:
         a3:62:f1:9a:39:7e:84:a1:aa:36:e9:2a:df:02:ce:a7:e1:23:
         90:7c:fb:b4:4e:90:fa:a3:81:a7:a5:6a:c1:3e:fe:29:e7:03:
         1d:8f:b8:b2:24:94:a0:a0:12:7a:97:a3:5e:45:1a:a7:36:58:
         c5:ff:0e:65:b8:85:cf:2e:cd:14:30:36:9e:92:fd:02:81:59:
         5a:15:eb:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fdwPYMyaZXvosRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
NjJmNGQzOTgtZmQ2OC00Y2FiLWI2MmUtNjZjYjJjYWE1MTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVIFaHM2Gy1kv5Oh43u1aNPaGp3eBej/5WMp
UW3DBXUdI/pEj85j/bNh97+e3jWDeLfjJVHqp7cgSMsjcC0lBNthAMwYIqmsRdqK
BJDCryfHY3XnXW5WR+kSJhK+vcT6/Z84idKIzg0kda7T6wiw2MFFQEZmtA1D/wb0
lNzmJFw9ZGov9IRf/wZs9dn6StEL21nfAON2J2osho2yb4jOrSJ1+Qe0ktAiunk4
tHkHwVGKUYLsSO6wGOrd5uxn9XFTikz6BQ8O9KWkkJfi3h0Iqc77lpDgIhie0FD3
j44wjlB4EHAmbvM8n5jEXMS9HhSMEDWR/ICE8GzHWnYpigb+xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWwzzj1THMP9Eg2UTZ/gWDKhhk8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvZmQ4ZmRmMmQtYTdiYS0z
MmNjLWE5MWMtZDliNzlhYzgxY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7pc5mzkZ7DLSrNkC3aSAUqrvLhYvBQ1wLPJ6ktUKJkBs1pyjlJEVEA
SbTBaPOIjMvLOwG0IUp8cJQTAXv0Mu/d0/HFPB+Ps93vyuXqe0hSZm/n/cmrr4jR
SkVsVCNGX5LUgSqPio3nuKBP/aWug2Z5ASH8txzaYNa7gRYXLI/RFskIAsYlsNAY
EDvnY19ma86nym8eO8nfLrot37nkeTsnLVQwO7xG9adjC5O8aL/RfohnjaNi8Zo5
foShqjbpKt8CzqfhI5B8+7ROkPqjgaelasE+/innAx2PuLIklKCgEnqXo15FGqc2
WMX/DmW4hc8uzRQwNp6S/QKBWVoV67k=
-----END CERTIFICATE-----
Generated at Wed May 1 23:04:55 2024 by rpki-client on console-ams.rpki-client.org