Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa
File:                     af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa (raw, json)
Hash identifier:          F0TbpGPkWntStgz9EavDpuGt/LpQM5lD4Kjz2gPVM4c=
Subject key identifier:   D9:0B:7E:97:D0:96:9F:01:50:5C:8E:77:13:36:C1:52:9C:B5:1A:80
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858496CE44CFE1235C8DC646D8E80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        52.129.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:4c:fe:12:35:c8:dc:64:6d:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=dbed90cd-8377-4c4e-be36-9629683c12c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:75:c5:ac:f7:03:65:10:32:b4:59:0b:b4:
                    84:60:5f:80:f0:75:ed:65:58:81:0e:f9:6f:12:ed:
                    d6:df:51:fd:83:1a:b6:e7:23:18:1f:2a:ae:71:f1:
                    04:27:02:8b:60:55:ad:6f:83:84:96:e4:b0:cc:a2:
                    ab:a8:ee:0e:91:ce:4c:4f:73:9d:4d:76:e6:c6:fd:
                    97:0f:6a:9c:e2:7d:23:da:40:7d:46:35:94:06:e0:
                    60:47:29:89:6a:e5:a7:6a:37:1f:d5:1d:c3:ba:46:
                    c7:57:e2:48:4e:7f:fd:bc:94:33:c6:15:86:a9:07:
                    58:7c:d7:fa:8e:6a:7d:d7:1f:ca:d9:8c:67:1f:57:
                    2e:56:d5:19:ea:67:38:1d:8d:ec:7e:30:c2:c4:a0:
                    06:27:a1:07:d7:b8:20:4b:60:ec:5c:b2:b5:e6:41:
                    23:a8:e8:0b:45:5c:51:2c:e2:cf:66:8c:64:38:93:
                    60:d0:e3:a6:d2:7d:46:ad:2b:fb:e0:95:4f:07:13:
                    d7:bd:c8:f9:7d:03:de:05:86:6f:82:38:f1:76:3c:
                    13:da:63:06:3a:74:71:07:cc:bb:27:3c:93:21:df:
                    9d:6b:35:40:01:c4:48:72:47:fd:1b:24:7a:f9:dc:
                    2f:bd:39:1c:3c:ab:ee:5e:6b:ae:5f:94:65:40:8c:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0B:7E:97:D0:96:9F:01:50:5C:8E:77:13:36:C1:52:9C:B5:1A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:fc:12:a1:a9:71:89:2c:43:f8:62:e3:44:0d:e9:87:78:
         d0:7d:2b:fa:4c:97:e5:21:52:94:7f:65:67:f5:61:43:1e:f6:
         0e:51:df:ba:5e:6e:d5:2d:80:a3:12:f6:18:04:f1:25:eb:45:
         99:15:21:37:8b:73:51:8d:41:f7:d6:e0:12:41:ab:7e:77:c6:
         a9:3e:a1:50:16:78:d9:e1:75:c9:28:31:48:4f:b9:ee:78:7b:
         73:2d:4c:4b:e8:13:b6:bd:fe:ea:4b:b4:e5:63:47:7e:d9:f9:
         a6:bf:65:20:cb:17:b5:c0:93:67:60:da:8a:1b:83:21:66:39:
         87:df:20:9b:7d:c0:9a:1f:0f:5f:44:db:c5:94:52:2a:1c:f4:
         17:b7:49:32:d1:07:6a:b0:0b:25:97:f7:c2:d7:1c:70:61:0a:
         a8:67:76:b3:11:64:f0:69:20:42:19:b7:4e:7b:3d:96:74:36:
         0e:ee:3b:c2:fd:6f:a5:b0:b4:fb:7a:d6:32:54:41:69:4b:ec:
         8d:12:23:93:e0:01:a8:bb:13:97:68:d3:24:4d:58:8a:25:7b:
         f9:15:3b:53:72:e9:2a:4c:75:a9:31:dc:0a:e2:a9:a8:ac:a2:
         3a:d5:27:98:f7:45:63:84:cc:79:74:aa:b9:cb:7c:a3:81:4e:
         96:b6:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:40:07 2025 by rpki-client