Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53bf7cfe-db0c-33f9-a914-e82c99896783.roa
File:                     53bf7cfe-db0c-33f9-a914-e82c99896783.roa (raw, json)
Hash identifier:          /yyK4PKDjCbpJXlDnd1O+LWEnROlnH8Jb4r1GtVRjHI=
Subject key identifier:   29:D2:43:5C:AB:38:31:9E:56:8B:4F:EB:97:48:7E:D3:2F:CF:2F:F3
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584AB650D50D1F040EDA436B7A00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53bf7cfe-db0c-33f9-a914-e82c99896783.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        52.129.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d5:0d:1f:04:0e:da:43:6b:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=54550129-ac32-4b9b-8a56-206e0a2ee92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:f2:4b:c8:c1:af:a5:49:d0:45:eb:27:18:
                    28:e2:52:a4:e4:1c:23:bc:f7:41:8c:b8:25:1f:74:
                    b6:14:41:bf:e8:ec:af:11:e6:53:e0:e1:bb:d0:a1:
                    97:05:02:cf:ab:78:f8:6b:97:c9:31:f1:2a:0c:0f:
                    75:4d:02:1a:99:7d:23:5c:d8:3e:f6:bb:49:ee:f0:
                    fb:03:b1:af:ed:2e:73:33:c0:ed:bc:f9:d7:dc:c7:
                    d3:0e:8d:2b:b3:24:81:a0:61:ef:c1:c2:25:63:21:
                    6a:b6:ff:5f:a7:27:27:c0:da:ae:51:9e:0a:b5:3b:
                    ff:2d:98:23:64:ff:85:67:30:97:0a:d2:45:98:83:
                    c0:70:7d:90:e0:13:a8:3c:52:2a:23:e3:24:ae:e5:
                    05:f6:71:3e:a6:49:90:77:3c:c9:19:fa:d3:2c:7f:
                    f3:90:7d:3e:09:94:c6:4b:3b:f5:c1:2c:11:23:d3:
                    6b:a4:69:08:54:27:56:92:1b:83:bd:f7:a6:50:27:
                    79:a4:d6:17:33:c0:96:b4:24:09:fb:c2:32:04:0d:
                    1a:6e:0c:a1:9e:01:fd:67:a2:db:72:45:85:94:4d:
                    3a:53:43:0b:19:e1:be:c5:80:58:ce:d8:7a:c2:4b:
                    95:6f:ef:d7:d0:a8:b8:ff:2d:9b:63:89:18:83:f7:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D2:43:5C:AB:38:31:9E:56:8B:4F:EB:97:48:7E:D3:2F:CF:2F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53bf7cfe-db0c-33f9-a914-e82c99896783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:72:c3:af:8c:05:73:e4:1a:69:ba:1e:a3:fc:94:f9:e4:
         f3:43:19:12:f4:a0:1f:a9:0a:ae:b6:14:10:37:84:6d:59:21:
         29:8a:1a:2a:31:78:92:a6:9d:4b:16:c6:1c:9e:12:31:c2:04:
         66:73:07:53:fb:03:6f:a9:14:00:3a:18:88:86:cd:71:37:0f:
         38:24:82:7a:72:dc:10:c5:c6:bf:ad:48:13:d5:81:da:f6:b6:
         dd:a8:2b:c3:ad:23:ad:1b:3f:8c:4e:51:3d:ec:a8:f6:41:c3:
         4c:e9:49:84:34:34:3a:c0:b5:3a:2b:5b:e8:64:27:35:a8:52:
         12:4d:38:17:2b:1b:38:08:06:9f:b3:d1:1f:2a:ac:1b:86:10:
         8d:d0:51:8d:a6:42:75:ee:f1:50:a0:e0:71:56:39:23:a6:c8:
         c1:78:eb:27:5b:c4:87:17:2b:50:d3:b5:60:e5:ab:4a:ca:58:
         60:6d:c9:5e:b0:2a:02:f8:db:a7:46:c5:32:cb:99:96:a6:61:
         b6:ad:49:7c:32:48:1c:7b:5b:69:21:0a:3d:1b:91:7e:78:8f:
         5b:74:c7:c3:2e:7a:a3:26:fb:d0:3f:2f:8d:55:28:c1:84:54:
         20:b3:38:aa:a3:58:f3:4e:34:18:19:4e:52:67:77:f5:0f:ee:
         72:fb:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:34 2025 by rpki-client