Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa
File:                     0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa (raw, json)
Hash identifier:          BEyRNHP6o8z9sc585tScPVswfUNHzTlXEZsNvfh6VSE=
Subject key identifier:   76:3E:8C:73:95:1E:DD:67:55:62:F7:91:FC:18:1A:59:C0:C0:61:46
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285849D594D62C291442C5FD3D8580
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        52.129.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d6:2c:29:14:42:c5:fd:3d:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=60a3236a-b1c8-4972-a194-98a7f2d34156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:c7:6d:64:54:4b:b5:84:78:06:fe:8d:d7:
                    35:1b:f9:b3:a3:11:e6:7e:be:b6:75:18:da:b9:fa:
                    fe:e1:17:e3:15:9e:14:1b:ca:41:89:9f:c4:8f:9d:
                    7b:c3:4b:eb:07:5b:0e:42:85:5f:8a:7f:50:ba:ca:
                    a8:36:38:a2:f9:ec:af:24:75:ff:f6:61:66:89:07:
                    66:fd:cc:14:04:02:57:f0:fb:73:47:1f:5f:5b:92:
                    85:c8:27:cd:c4:9c:ea:71:4b:a2:93:b6:db:fc:52:
                    b0:e1:2c:4d:d2:02:32:fa:e2:14:5a:24:48:58:b2:
                    e6:84:ca:02:e4:09:d9:df:7a:d9:a6:90:7d:87:98:
                    ff:01:7e:d7:4b:05:99:73:53:ad:44:9e:df:74:af:
                    93:de:ae:0f:c9:e1:3f:9e:29:d8:8a:82:e0:2e:9b:
                    f3:94:45:f0:88:eb:81:58:25:33:04:c8:7e:61:45:
                    ec:ae:ac:1b:36:69:a1:d7:a5:e7:3c:b9:53:1a:a1:
                    e6:80:1a:f1:bf:3a:35:d1:b3:a9:75:f7:d4:2b:d1:
                    79:86:93:fe:98:6e:d9:5e:18:6a:98:d1:71:9f:60:
                    bc:fa:ef:75:3c:79:27:74:b4:8a:65:c5:50:92:f8:
                    8d:cb:66:ed:8a:a6:27:f3:e8:20:c1:f7:e6:91:74:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:8C:73:95:1E:DD:67:55:62:F7:91:FC:18:1A:59:C0:C0:61:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0ef38b6a-2ae1-3342-bb77-c7bc1bb7d791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7f:42:a9:00:35:65:6a:9a:71:cc:93:16:6f:80:d1:f3:2a:
         6b:a0:bb:d6:70:ea:e1:c2:01:2f:3d:0c:a0:d2:25:8c:e0:b3:
         77:1a:fc:83:08:06:56:56:d3:f1:20:3a:0c:fc:9b:5f:1c:5a:
         9f:40:3a:ea:cd:26:aa:b1:0d:cd:f1:81:3f:9b:af:5c:ae:ed:
         ca:00:b7:92:0b:01:10:27:89:42:fc:46:db:27:f6:d8:d7:bc:
         d8:77:ac:59:81:62:b3:ce:1d:74:a6:38:38:12:af:8b:d7:59:
         27:8d:21:9c:04:85:0f:86:c5:7c:1b:98:33:31:85:54:6a:ef:
         27:a6:57:fe:80:a0:28:30:52:17:fd:60:78:22:b5:41:75:2e:
         88:43:df:c8:36:ba:6c:b1:88:9a:dd:c4:d2:8d:41:9a:5d:23:
         7a:4a:a3:42:ca:99:50:c9:91:ee:52:57:6f:24:53:99:60:6c:
         27:ba:18:0f:3a:86:36:f4:3b:d4:68:ce:77:97:b0:1f:59:b8:
         ea:5d:90:c0:42:4c:40:d8:c8:95:a9:3d:49:89:e9:81:3d:b6:
         d5:87:e6:de:4f:96:cf:f6:be:a3:a9:c0:73:3e:d0:56:3f:ea:
         60:61:3f:20:ae:49:17:c7:bb:4f:2e:4c:da:e8:55:06:3f:88:
         ff:c8:16:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:40:37 2025 by rpki-client