Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa
File:                     70f0d2e5-f571-34d1-a278-88605dcf02db.roa (raw, json)
Hash identifier:          g455+sCizQ7hA01euJDzxY11smB9XvK4UdIi5HrBJSY=
Subject key identifier:   E2:B8:E1:B0:2D:1C:BB:4E:E1:7C:69:E2:B1:4B:9F:42:C7:D8:03:7F
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285849D594D60C2A076B35E2816900
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        52.129.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d6:0c:2a:07:6b:35:e2:81:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=bb4bcce7-a62c-4708-be8f-fb8b70696e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:c9:b8:e0:73:1c:31:31:a0:f3:1d:1e:dc:
                    e0:07:89:18:de:c1:d2:55:c0:2d:00:2d:5d:b6:f6:
                    a0:fb:7d:c4:88:a0:ac:2e:90:3c:9b:52:43:02:2c:
                    3e:b0:5a:ff:78:a6:f7:eb:5f:5d:9c:40:c7:61:0d:
                    e1:ed:a5:d6:dd:0a:20:b3:1b:07:90:b7:a2:16:18:
                    9d:3f:fc:93:e6:c2:36:30:d1:f6:79:8a:3c:89:00:
                    8d:b6:47:3e:b8:bc:1c:31:53:2f:9b:d9:e1:2b:d0:
                    45:a4:34:83:16:26:d0:e9:1e:06:09:f6:78:52:55:
                    4d:fc:ef:ca:99:f8:7d:22:d3:c1:3d:97:ab:ea:94:
                    ff:56:8d:56:73:d9:d4:1c:08:ef:59:fe:75:f9:2e:
                    53:3f:24:c2:6b:91:56:90:40:f2:75:4d:e2:59:5a:
                    23:e1:4f:b1:73:80:20:99:96:b0:d4:53:ba:32:1c:
                    99:e1:89:4b:3b:c1:45:3b:b9:59:f0:2f:b2:4f:21:
                    86:1a:17:56:56:59:da:04:af:f6:ab:7b:5d:a8:05:
                    8a:50:d0:e6:59:66:ca:ab:9f:c8:5b:cc:21:98:e2:
                    e0:03:de:4e:3e:3c:3c:96:05:4c:95:2d:b2:9d:48:
                    3d:f3:eb:b1:27:df:de:b2:24:21:01:70:5c:84:11:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B8:E1:B0:2D:1C:BB:4E:E1:7C:69:E2:B1:4B:9F:42:C7:D8:03:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:37:2a:48:8e:19:4e:c7:33:8a:a6:77:c9:f4:eb:c0:bb:e1:
         7a:4b:f6:a6:69:37:84:8e:64:ad:55:0b:99:8d:b4:d6:6f:51:
         9a:71:50:60:96:ff:3f:69:2c:a8:55:75:e4:34:c9:e8:16:13:
         04:5d:84:bb:31:77:0d:6c:55:71:f5:17:5c:28:ed:76:68:ab:
         0d:84:6a:bd:27:64:42:4f:be:5c:ef:e8:56:d4:e8:5d:cd:4a:
         40:33:bc:07:2d:36:82:26:b1:d1:11:d7:33:61:db:9c:be:ec:
         31:00:37:5c:2a:27:04:b3:af:32:d5:4b:72:a6:f8:28:ef:1d:
         57:8c:98:2b:cf:9f:70:06:a4:71:39:20:78:12:4b:f1:22:a2:
         7d:79:4c:ae:e9:c8:c6:28:6d:76:30:72:a3:c6:59:4a:6b:9d:
         a8:6f:53:89:03:10:bc:92:54:e2:07:a1:b1:a5:e8:02:a2:84:
         27:dc:a9:73:20:a4:83:61:3a:f4:9e:b7:31:a6:26:1e:a3:d4:
         53:ee:5e:e7:e5:e9:28:4b:ed:d2:51:4c:76:da:02:10:54:50:
         77:86:68:b3:61:01:f9:23:7b:41:bf:cc:7e:bc:fb:7a:b3:d9:
         08:63:56:08:7b:61:0d:3f:48:18:34:c6:61:0b:72:7f:d3:bf:
         ca:3d:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:53:30 2025 by rpki-client