Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa
File:                     91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa (raw, json)
Hash identifier:          7YIwYUeGUgElSRkxQkgG2N8BhqiUknfA+G5UumrtNF8=
Subject key identifier:   2B:3C:A1:BF:32:EC:12:45:BE:48:30:E5:02:4C:25:49:03:FF:7F:E8
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285849D594D5EDCBE2C376D67F6000
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        52.129.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d5:ed:cb:e2:c3:76:d6:7f:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=5079b75f-c3cf-496d-8c90-b6f0dccea2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:be:20:ea:69:66:ab:5e:1c:da:fb:fc:aa:
                    36:aa:9a:ca:59:a9:bd:86:79:9e:79:f5:0c:4d:44:
                    d7:92:02:99:07:ff:ef:91:6b:33:fa:16:f4:df:b7:
                    91:05:16:82:d2:78:07:66:6e:3a:29:ac:ae:e7:ae:
                    f7:fd:d1:e6:48:42:c7:48:fe:d1:28:0b:6e:0c:8d:
                    12:05:09:e2:68:26:e3:c8:cc:b4:e8:0c:70:13:ce:
                    d5:52:8f:69:a1:fc:81:58:c0:cc:2c:22:41:a7:bc:
                    1b:34:81:b9:2b:34:7d:f9:a5:1b:ea:3c:dc:b3:e1:
                    ce:de:da:7e:97:de:43:88:62:42:14:83:4e:a1:74:
                    77:c4:91:f0:4c:fb:55:78:95:09:b4:ba:54:21:05:
                    75:85:1c:3e:28:61:42:ec:b7:57:13:be:fc:69:42:
                    8b:ac:0c:28:c3:13:01:3b:f4:6d:91:52:dd:11:8a:
                    5d:2d:e3:18:f5:bf:75:bd:35:e6:4f:08:92:3d:58:
                    dd:d5:a4:92:82:b1:7e:c6:c7:d2:c5:38:a4:cd:ef:
                    53:80:d8:e8:c7:d7:7b:d7:7f:41:ba:c4:d4:3b:a9:
                    0b:26:fe:1f:af:4b:e4:29:94:81:c5:d5:2c:70:8d:
                    af:51:3f:8f:c3:94:d0:04:f8:10:23:e5:f2:cc:73:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3C:A1:BF:32:EC:12:45:BE:48:30:E5:02:4C:25:49:03:FF:7F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:79:6c:7e:dc:3a:6e:f8:4e:d9:30:b9:9f:4e:79:8e:33:
         2e:99:24:d8:8f:09:c7:8e:1e:1e:cb:99:66:f9:10:1d:2e:df:
         76:69:39:dd:ad:12:66:8c:9d:de:90:cf:eb:87:fa:9a:ef:f7:
         a8:fc:2e:73:7f:e0:23:ae:5c:5f:05:b7:a1:fd:52:2b:13:8f:
         21:21:8c:c2:eb:69:1e:78:d4:65:64:ab:34:e4:b0:ad:d5:67:
         d8:76:e9:f7:2d:62:1d:27:b1:03:f8:bc:a9:0c:76:ee:b4:64:
         fd:29:3d:ee:4e:b1:51:95:ca:ef:1e:13:51:69:64:59:97:a0:
         fb:5a:5d:89:c5:1b:c3:b0:f1:da:fe:fb:80:3d:ae:23:f9:ea:
         fa:e8:08:c3:1e:af:66:88:75:e3:f8:b1:74:b2:d6:d8:5a:41:
         28:dc:e9:89:83:47:19:4f:9b:79:44:c0:8b:77:03:82:14:32:
         e0:53:c4:b8:cb:19:5c:c7:ce:e8:d1:83:89:f5:98:92:94:a9:
         3a:34:81:d3:3a:a9:ef:b7:c2:6e:17:e2:cc:a9:d4:f2:ae:5b:
         83:b2:5f:fb:4e:62:65:fe:27:0f:e9:89:5b:6a:a2:1b:6c:3c:
         e3:f5:b4:97:fa:53:78:58:ab:de:cf:3e:db:fa:a4:ee:36:71:
         4b:1f:a2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:34:19 2025 by rpki-client