Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa
File:                     57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa (raw, json)
Hash identifier:          7S3BJIyATtA8YYDzZJ4RLor8qi24INtUJpFB/cQAg4M=
Subject key identifier:   BF:A7:F1:8C:54:25:33:C8:CE:46:90:1A:0C:3D:09:1A:75:14:4A:97
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F43285849D1650DBDDB7C7738DB1A86E0
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        52.129.152.0/21 maxlen: 24
                          52.129.160.0/19 maxlen: 24
                          52.129.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0d:bd:db:7c:77:38:db:1a:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=5690caca-81c9-40b8-b3bd-4cdd84668565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:72:f7:6f:af:22:e5:b5:a5:49:fd:11:35:
                    b3:1d:6d:b5:4a:49:a6:21:58:b0:23:02:95:e6:58:
                    37:1b:5c:09:a5:c3:60:fb:72:bb:f9:74:03:ae:52:
                    89:14:d0:8f:55:9b:02:ac:75:af:84:4e:c8:ae:25:
                    2d:33:5f:72:2c:3b:07:c3:d1:a4:90:ac:b3:87:5e:
                    b5:b3:7c:21:35:e3:19:21:66:71:44:bc:53:3a:d2:
                    22:d6:7d:1b:cc:6c:bd:e0:41:46:c2:98:38:62:0c:
                    15:b5:9c:b0:66:ce:60:7a:2c:cc:c8:4d:bc:cc:78:
                    e9:04:02:0e:a3:c7:a3:bc:2a:d0:2d:78:98:23:fc:
                    f6:2c:a0:46:13:70:9c:f2:e2:8e:23:99:79:b7:11:
                    fb:1a:e0:b4:0c:11:63:04:ad:ea:55:a4:49:a5:c1:
                    3c:41:37:5e:9e:a6:88:dd:26:a4:34:03:01:c8:f4:
                    fa:22:05:fa:c2:af:c9:43:4f:bd:f7:87:80:e6:d8:
                    9c:df:27:b4:4a:b0:74:5a:19:f7:f1:f6:0c:e8:ef:
                    6b:e3:ec:76:59:48:31:25:55:a6:0a:ec:91:23:aa:
                    cd:a8:79:41:fb:f1:dc:d4:2b:c7:82:ef:ff:36:24:
                    04:b2:13:66:ca:63:fa:86:6c:54:12:6c:d4:ab:b6:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A7:F1:8C:54:25:33:C8:CE:46:90:1A:0C:3D:09:1A:75:14:4A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.152.0-52.129.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:7b:50:b6:19:6b:b5:d4:74:8c:c6:57:8f:8a:85:b3:e9:
         81:a5:1f:2e:eb:91:62:d5:39:0e:5d:b5:7f:06:94:08:04:c4:
         0f:5d:a4:f4:f8:82:c9:ea:c8:67:f1:47:7c:de:da:91:58:1d:
         ad:92:14:d0:4c:43:ac:46:24:5d:45:5a:be:b1:9d:1b:d6:3a:
         7e:5e:3d:f4:e6:65:64:0a:17:58:1c:56:02:8a:12:58:f9:2a:
         3b:15:1d:4e:98:13:7f:12:7a:fc:ed:eb:67:f8:18:b7:d6:02:
         f6:4f:2d:c0:c7:de:9a:30:c6:cd:ab:a1:e5:f3:8b:74:c7:3b:
         7f:ac:0b:4c:43:69:51:8f:af:94:0d:81:8f:e7:f8:d6:87:3e:
         a4:7d:01:bd:42:2c:73:f8:15:8c:73:23:18:3c:50:a2:d1:f4:
         26:e2:9f:aa:da:c1:e3:ca:5e:04:f1:fd:b3:a0:a2:6d:da:7f:
         5f:e9:6d:8a:99:0f:78:53:d8:2a:5f:87:0c:d4:ae:0d:e6:a8:
         99:a8:4b:b5:dc:d3:f5:12:c3:fe:83:e8:8d:65:5c:47:f1:91:
         b2:02:86:bd:52:cb:15:65:4d:84:a5:22:2b:82:98:31:6d:cc:
         be:75:50:ee:ce:38:01:ef:3a:b6:a2:5a:d5:bf:20:49:2b:2c:
         b4:dd:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:17 2025 by rpki-client