Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa
File:                     fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa (raw, json)
Hash identifier:          XPWm7RvSeMfmzqb3iWrBmVyfYekilvJk9vZPO+DVK2s=
Subject key identifier:   2B:F0:4F:47:E4:3B:44:75:39:5D:3A:D1:D4:0E:4C:C1:DC:2F:09:32
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584AB650D55EFBEACAC82DE5B900
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        52.129.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d5:5e:fb:ea:ca:c8:2d:e5:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=12e89348-4ad6-425f-b2cc-1db7c4c5b6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f7:61:3f:6a:28:9b:99:ec:c8:c9:21:d1:7c:
                    8b:44:69:83:31:bd:fc:a1:b2:36:84:88:08:ec:61:
                    d1:cb:5a:fe:df:03:f2:db:7c:f8:c1:cc:4a:83:49:
                    8a:25:23:6e:7d:70:23:b8:0f:b8:28:24:3a:c7:82:
                    18:a7:eb:60:3b:0b:c9:44:88:6e:a9:dd:8c:d8:11:
                    30:f2:f5:24:ea:4d:24:91:da:af:aa:0c:25:e5:b7:
                    96:e3:07:8c:46:1a:a3:e3:2a:cf:8e:4d:f7:29:5d:
                    df:f9:8b:90:a1:74:b7:0f:a9:c6:60:be:15:06:89:
                    8e:f7:fa:33:97:4b:9f:19:0b:d4:22:f9:09:b9:99:
                    4d:98:4d:13:c0:1b:b9:51:4a:cf:49:24:df:b1:ab:
                    8a:6a:7a:2a:bd:81:be:dd:15:29:6e:2b:16:bc:cd:
                    16:da:88:46:c1:0a:68:63:d1:e1:80:ed:64:db:2e:
                    cb:5f:95:d5:2b:de:e4:c2:b3:ad:71:fc:2e:5e:88:
                    6d:97:89:1c:a3:0b:df:cd:4b:d7:77:03:c3:e8:aa:
                    c9:5e:b2:03:6b:d3:16:ad:8c:2a:a0:fa:a9:f2:15:
                    7d:92:49:1a:f2:4d:33:a5:c8:b1:d4:da:1d:90:01:
                    0c:9d:16:6c:ec:b8:a0:65:a8:b3:07:f5:36:ff:66:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:4F:47:E4:3B:44:75:39:5D:3A:D1:D4:0E:4C:C1:DC:2F:09:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fd8fdf2d-a7ba-32cc-a91c-d9b79ac81cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:62:d5:79:be:3a:da:cb:28:d8:a4:4c:fb:2d:04:68:57:ab:
         43:0c:cd:4e:9d:b2:20:e6:98:03:5f:0f:ac:0e:02:bd:55:32:
         07:a0:7b:5d:91:a9:9e:fd:f2:4e:1c:7e:e5:8f:cc:88:98:00:
         8a:f3:bf:92:62:92:52:3d:de:31:89:15:ee:5a:0f:68:c9:2e:
         26:fb:84:93:45:cc:17:2a:99:ff:63:53:c0:ac:c4:e7:25:e8:
         f0:58:4e:a9:c4:78:d3:09:39:1b:15:3b:e6:87:71:72:0a:d5:
         0d:40:9a:2a:06:c8:df:ed:c9:c2:f8:a4:df:a9:fe:4a:48:47:
         49:8f:3d:5b:34:4c:88:d2:43:f9:46:92:54:95:f4:f7:1e:6a:
         8c:a4:14:48:91:04:d8:b4:76:8f:36:54:cf:5e:55:9b:ea:a0:
         15:46:6f:96:cf:18:b4:64:5b:27:8d:06:f7:67:b1:96:f7:29:
         69:0a:cc:ea:a9:3a:46:25:e2:04:98:db:f2:5a:7d:d2:90:1b:
         8e:97:f7:da:8a:4a:d7:0a:15:db:1c:b4:78:0a:4a:69:0a:c7:
         ec:8b:72:4a:4f:1f:ef:e2:72:f3:ce:45:c2:a8:3e:b1:c0:79:
         1d:33:6f:eb:26:b2:74:5e:02:07:fb:2c:8d:59:00:bb:c1:c8:
         c7:0f:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:41 2025 by rpki-client