Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa
File:                     2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa (raw, json)
Hash identifier:          c7cYN19reRiDx3g1nUMj9V08+5uc8sPhbHwZSOZHJeY=
Subject key identifier:   D1:C7:5A:F7:08:AA:CC:8B:DA:E4:60:A6:B5:D8:20:C4:CE:D0:85:1C
Certificate issuer:       /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
Certificate serial:       010D0C9F43285848EF6154D575F3C037AC524500
Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     812
IP address blocks:        52.129.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:54:d5:75:f3:c0:37:ac:52:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=69acaca1-928c-44c6-abbf-99e951bb32eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:49:60:61:d1:de:dd:ed:42:47:b1:c7:ea:
                    7a:3d:0b:a7:e8:3e:97:aa:50:09:13:81:1a:54:42:
                    c0:8a:ba:0b:98:e2:4d:be:5d:63:55:24:39:f3:f8:
                    3d:b1:4d:b7:fc:91:e1:43:87:60:2e:f8:bc:bc:1d:
                    8d:84:40:bf:67:76:25:af:9f:ad:6d:a7:ff:a6:a0:
                    cf:10:f5:eb:18:e4:6f:3c:31:6f:d2:99:60:17:cd:
                    6e:d1:ea:bc:a2:80:93:55:aa:05:ef:13:e2:15:b7:
                    26:cb:ce:9d:2b:26:84:be:a6:8e:76:08:5a:0d:75:
                    09:5a:b9:83:ec:d8:1c:85:3a:67:5a:93:96:d3:fa:
                    c5:72:51:f4:c0:5e:dc:a8:a5:41:9e:6d:33:56:4f:
                    d9:63:72:8e:34:c1:ee:01:0f:5b:13:3d:8f:af:c3:
                    d8:07:04:87:4b:52:ae:0d:9b:01:1d:7c:d1:8d:75:
                    4b:f2:c7:7a:57:83:13:9e:92:35:e3:d8:b6:9a:e9:
                    f6:81:81:f8:07:41:d8:76:b7:5e:b8:b0:ea:ff:e7:
                    b6:c8:68:b1:59:5d:e2:5d:3d:c5:6f:38:ef:be:0c:
                    4b:e0:9a:34:3a:75:5b:ad:af:34:96:fe:ff:2f:a0:
                    35:4b:f1:2e:2e:13:06:0c:e1:6c:8d:ca:93:f0:cc:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C7:5A:F7:08:AA:CC:8B:DA:E4:60:A6:B5:D8:20:C4:CE:D0:85:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:3c:e1:77:22:97:d4:59:b9:73:5e:dc:27:b6:91:df:e6:71:
         67:5a:67:d9:a8:76:17:28:20:9e:f1:47:e5:89:e5:51:72:42:
         9a:a3:f5:3b:ba:23:81:f1:ab:6c:0d:c1:4e:53:9e:b7:a1:ae:
         dd:4b:d5:c8:df:e8:59:a7:c0:d6:bc:b6:59:4f:97:ab:76:3b:
         f0:57:6e:ec:2a:8b:30:30:24:b5:bb:4b:33:18:e6:d4:0d:a0:
         89:42:b4:34:30:68:94:32:73:a0:69:4f:01:7e:4f:6a:e8:00:
         8e:75:dd:6d:1a:57:77:2d:ec:9e:ef:ae:ec:d9:e0:26:8e:3f:
         c3:3e:20:2e:8f:93:64:60:44:f0:87:4f:47:0d:05:d0:49:9b:
         d0:4c:05:0d:ef:9d:30:27:84:7c:16:43:89:f2:d7:7b:35:7e:
         be:3e:4b:be:1a:cc:5e:86:12:bd:c7:fd:42:93:26:48:99:ed:
         85:18:2b:63:05:67:65:d2:a4:3d:d1:3e:d9:6d:44:07:a5:65:
         57:42:5e:12:f3:45:43:e4:64:12:5f:33:aa:cc:a6:0c:ba:c8:
         b3:98:27:d4:07:c7:31:59:39:26:96:77:2a:c8:17:ca:ad:39:
         fe:b0:b0:c8:03:9e:56:d2:e8:db:22:32:c1:43:7b:ab:cb:1b:
         5c:1b:b7:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVTVdfPAN6xSRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl
ZDdjMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NjlhY2FjYTEtOTI4Yy00NGM2LWFiYmYtOTllOTUxYmIzMmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1BJYGHR3t3tQkexx+p6PQun6D6XqlAJE4Ea
VELAiroLmOJNvl1jVSQ58/g9sU23/JHhQ4dgLvi8vB2NhEC/Z3Ylr5+tbaf/pqDP
EPXrGORvPDFv0plgF81u0eq8ooCTVaoF7xPiFbcmy86dKyaEvqaOdghaDXUJWrmD
7NgchTpnWpOW0/rFclH0wF7cqKVBnm0zVk/ZY3KONMHuAQ9bEz2Pr8PYBwSHS1Ku
DZsBHXzRjXVL8sd6V4MTnpI149i2mun2gYH4B0HYdrdeuLDq/+e2yGixWV3iXT3F
bzjvvgxL4Jo0OnVbra80lv7/L6A1S/EuLhMGDOFsjcqT8MxZqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHHWvcIqsyL2uRgprXYIMTO0IUcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw
OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvMmJkY2RiZjEtZDc2Ny0z
ZTJhLThjYmEtMzk1ODYyNGQ1NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl
M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw
ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi
N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANY84Xcil9RZuXNe3Ce2kd/mcWdaZ9modhcoIJ7xR+WJ5VFyQpqj9Tu6
I4Hxq2wNwU5Tnrehrt1L1cjf6FmnwNa8tllPl6t2O/BXbuwqizAwJLW7SzMY5tQN
oIlCtDQwaJQyc6BpTwF+T2roAI513W0aV3ct7J7vruzZ4CaOP8M+IC6Pk2RgRPCH
T0cNBdBJm9BMBQ3vnTAnhHwWQ4ny13s1fr4+S74azF6GEr3H/UKTJkiZ7YUYK2MF
Z2XSpD3RPtltRAelZVdCXhLzRUPkZBJfM6rMpgy6yLOYJ9QHxzFZOSaWdyrIF8qt
Of6wsMgDnlbS6NsiMsFDe6vLG1wbtz4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:40 2025 by rpki-client