Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b53668e8-f9e9-3ee1-9ead-00464a05a8a1.roa
File:                     b53668e8-f9e9-3ee1-9ead-00464a05a8a1.roa (raw, json)
Hash identifier:          AvU02yxoFOquxh/3PHPLl9GW7/kT2CmPKiZwYARogbA=
Subject key identifier:   4A:62:F3:29:FD:9F:9A:E7:DF:F0:B2:21:0D:54:61:32:89:27:AB:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584921841DF15F27265FEC1880E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b53668e8-f9e9-3ee1-9ead-00464a05a8a1.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        184.29.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:1d:f1:5f:27:26:5f:ec:18:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=1a6b9ddf-4f23-4aaf-a1bc-f2e39bef2560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:db:8a:8e:1c:b5:c6:b1:cd:90:5f:3b:7a:
                    d9:6b:da:87:3a:5a:90:ee:89:5e:38:ad:f5:e7:7a:
                    cf:72:55:ee:cb:9b:eb:fb:5a:67:22:99:6e:f0:7c:
                    d4:e5:39:e2:07:49:05:e7:dd:65:7e:96:71:3b:e0:
                    ff:30:d0:27:e4:b6:03:05:58:65:c8:5c:92:c6:6c:
                    be:42:a6:25:12:0b:f3:bf:0c:30:ee:9d:00:aa:cb:
                    d0:eb:19:65:6b:99:cb:18:5d:51:a1:7c:1d:f5:67:
                    6e:ac:f9:75:44:03:6b:81:84:06:df:22:a9:79:4a:
                    65:22:80:39:ab:1e:6a:e2:81:5a:3f:5b:af:b1:fa:
                    1e:7f:8c:d1:cd:74:92:41:65:44:f9:cd:e6:f6:bf:
                    85:4a:3b:bc:7a:c1:d0:c5:61:fe:69:1f:6b:e7:ad:
                    86:d0:cb:49:e3:ed:1f:88:f4:4e:b0:d0:a3:3c:3d:
                    f8:58:4b:28:9c:0c:4f:1e:54:c6:2b:c0:c1:35:63:
                    f7:e9:4e:9d:75:f1:ad:09:dd:6f:c4:eb:fe:73:18:
                    95:c8:11:8d:c2:f0:cf:f8:1b:14:57:28:59:68:b0:
                    9c:b2:1b:45:49:aa:78:be:36:7e:9a:19:5e:5d:88:
                    2d:0a:3e:5b:b6:a3:f4:43:2e:41:d4:0d:64:90:93:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:62:F3:29:FD:9F:9A:E7:DF:F0:B2:21:0D:54:61:32:89:27:AB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b53668e8-f9e9-3ee1-9ead-00464a05a8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:42:91:9d:26:7c:39:e2:f3:0e:47:25:b7:c9:71:a9:27:ab:
         74:39:10:de:5a:07:bf:81:eb:c6:41:73:5e:d5:9d:5f:48:9c:
         c3:6e:da:0d:91:13:f6:f6:de:89:b3:64:4d:4d:de:5b:57:b1:
         0a:0f:1b:3d:2d:b1:77:7e:2b:7e:37:08:f6:fc:cc:fe:6b:05:
         70:ae:c9:26:65:c9:f2:1e:57:b8:89:13:0a:1d:53:ce:8f:a0:
         ad:f1:f9:cb:f1:53:4c:a2:99:0b:db:5d:24:f9:71:b2:16:08:
         ae:2a:95:3b:07:69:80:6b:0d:43:d3:ab:ba:b6:09:66:a5:95:
         ac:07:dd:42:db:da:15:58:3b:48:1f:c5:41:da:12:62:6c:c0:
         2a:04:d9:0a:bf:c1:09:07:39:fc:65:9f:fa:c1:67:07:5d:d0:
         f6:db:6d:48:0f:69:18:71:d0:d6:b9:e2:1f:b1:2f:84:09:5d:
         d3:66:1f:25:4d:83:f0:ce:01:a3:c2:71:f9:b1:72:8e:6e:03:
         47:c7:c6:a8:c7:93:b1:10:ae:8a:38:8e:b3:0b:6e:bb:4b:79:
         36:97:dd:59:d0:20:3c:be:5c:a3:d6:09:48:73:63:89:e1:92:
         58:62:61:5e:f8:f3:39:fd:43:cf:44:74:2b:61:46:2e:33:c6:
         54:e1:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:02 2025 by rpki-client