Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
File:                     b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa (raw, json)
Hash identifier:          8DszclHqZoMjdbzixdBvUu8+uPhb87rjZYoTz11Ytxg=
Subject key identifier:   57:FE:C3:5B:9D:2E:82:A8:5D:87:BC:14:B3:AF:CF:E2:2B:73:5D:BB
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F4328584A29555DEA46C23919771FC94C
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     46489
IP address blocks:        52.129.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5d:ea:46:c2:39:19:77:1f:c9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=906441d6-e46e-4d4b-8364-65b3a09353c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:da:b3:e1:53:c8:3c:02:7b:e2:18:b0:7d:
                    da:34:1e:11:b8:35:39:b8:ba:c8:50:4a:58:51:36:
                    00:8e:7c:08:9a:09:9a:cc:6f:46:fe:a5:98:c8:90:
                    b1:b4:40:45:01:1e:f3:cf:c4:79:e8:54:f0:01:ad:
                    63:37:e6:08:8f:1a:c2:19:e6:a8:ea:6a:e4:a1:a4:
                    ec:bb:f6:6e:38:1f:da:63:f3:86:e6:66:7d:b0:cc:
                    7f:d0:22:65:4d:d5:da:0f:67:f3:58:ce:b7:ee:07:
                    6a:5f:ef:00:c5:05:5b:68:b3:eb:e3:90:23:9b:c4:
                    1a:42:7c:a7:b2:0a:82:6d:c8:1a:87:9c:8d:f7:4d:
                    2a:53:36:c3:78:74:82:23:1a:d3:ef:65:b2:7f:d1:
                    cf:ca:eb:7e:d0:a0:27:c5:f1:13:c8:8d:db:20:fa:
                    b6:ac:6e:bd:f8:5f:64:7e:70:75:b5:a9:f3:df:83:
                    0b:44:a0:e6:58:27:57:53:c2:73:fb:73:a9:62:75:
                    d3:c1:14:76:fb:60:54:d6:84:84:9f:b4:51:9e:0f:
                    5b:41:03:9d:81:94:8a:ed:64:60:43:35:ba:b1:d5:
                    3a:29:9a:a5:f7:e4:62:07:77:f7:95:b5:09:83:e2:
                    8d:ec:17:ea:7e:cf:a8:9c:2b:0f:ed:22:5c:c4:2d:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FE:C3:5B:9D:2E:82:A8:5D:87:BC:14:B3:AF:CF:E2:2B:73:5D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:b9:20:73:74:1d:ac:f5:7f:03:03:6c:2c:df:dc:1f:51:
         13:50:7d:68:f9:1b:b3:fa:c5:3c:43:4f:63:19:1a:25:3d:22:
         fd:15:de:91:bf:2e:8d:fb:c4:a1:5d:a8:85:7a:b7:de:4b:82:
         1b:f7:59:c4:b9:ce:b1:d1:d8:09:2f:f3:32:5a:b5:2d:1c:29:
         4e:af:46:7b:b1:79:21:93:d3:7c:5e:33:01:f4:d1:d5:18:75:
         30:33:1a:fa:6a:92:1f:91:bc:2a:41:58:8c:9a:96:04:4d:42:
         24:51:61:84:27:1b:45:cd:97:07:f8:8e:39:86:20:a1:47:4b:
         69:c1:17:1e:4b:f7:b2:d2:0c:49:dd:bc:e6:bc:7d:d4:64:59:
         98:b9:0b:58:e9:0f:20:0a:84:62:1b:b0:31:9b:06:7d:f0:84:
         86:f8:d4:ca:0c:6e:78:14:5e:cb:30:06:6b:58:f5:2a:9a:0d:
         ee:d5:3a:33:ef:f4:f9:3d:6f:9e:73:de:ba:37:05:83:70:46:
         d7:95:9b:d5:b8:08:13:fe:99:92:f2:e9:35:ee:aa:85:1a:09:
         f5:dd:43:3c:fe:16:2b:1d:fe:fe:a9:51:46:69:6e:d4:4b:74:
         8f:d6:84:3a:3b:61:40:32:66:cb:75:ef:d8:ef:b0:3e:3a:9a:
         59:50:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:54:40 2025 by rpki-client