Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa
File:                     132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa (raw, json)
Hash identifier:          D1feJz4I7kr/dfxUXhFC6l1gUisaELdIs/bJrwFD0cA=
Subject key identifier:   02:CB:37:65:89:20:19:FD:17:F1:67:DC:F9:E1:C6:D7:8A:EE:0F:7A
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F4328584563F300A8DB55CFEC4D8BBB80
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        52.128.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:00:a8:db:55:cf:ec:4d:8b:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=1ca0cecc-598d-42f3-b000-4975935fdb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:06:ed:2d:aa:69:37:6a:7b:8d:3d:6c:b7:be:
                    0c:bd:cf:a1:4b:6f:7b:24:00:73:10:27:3e:ce:a2:
                    91:32:cb:e8:86:ca:ef:05:c1:2d:b5:d4:f1:ca:02:
                    91:f4:0b:79:d2:b6:3a:be:b2:93:52:db:d7:fa:e8:
                    93:b7:a9:dc:24:f3:bf:2e:77:04:12:80:74:8a:6c:
                    b5:ec:06:1c:f6:29:a8:98:c3:78:4c:ab:10:00:ad:
                    17:1f:0c:0f:fa:51:3b:9c:8f:a3:b7:a0:f6:cf:59:
                    3f:7b:fd:c8:e9:9b:a9:61:ca:7f:35:24:9f:e2:fd:
                    1f:0d:3c:8b:bc:f5:29:20:bc:6b:0d:d9:11:c3:c7:
                    3a:7b:8d:fd:2b:b7:07:54:bc:8d:45:1d:51:3c:5b:
                    8d:51:b9:dc:7b:17:67:55:38:ac:62:1a:73:8b:4d:
                    ef:cf:dc:79:32:f2:f4:a9:ae:69:2b:d3:f3:bc:a1:
                    3b:5e:2f:0c:dd:f1:4f:a6:6e:84:2f:bd:d0:30:b7:
                    df:12:51:94:c4:ea:5d:f3:29:2a:30:c3:91:bd:cd:
                    bb:b8:49:ea:94:ff:cf:2b:8f:e7:84:aa:95:59:ae:
                    09:96:9a:a3:23:95:f6:f0:d3:de:8a:34:39:cf:a9:
                    3e:77:d6:bd:ca:c7:ba:27:71:a4:74:8f:75:e6:64:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:37:65:89:20:19:FD:17:F1:67:DC:F9:E1:C6:D7:8A:EE:0F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:eb:e5:44:c9:d3:53:00:ff:0c:51:35:c5:de:41:3d:e8:
         03:c7:f2:e7:d1:53:f2:80:78:be:d8:11:23:b0:9b:60:81:41:
         88:a3:f4:93:ce:56:b3:8e:0c:36:5e:53:bc:d1:0d:5e:72:1c:
         cc:b5:a6:4d:f7:03:82:a4:2d:cf:b3:9b:2b:57:6c:27:4d:69:
         c8:64:39:9d:f8:9e:b1:04:b8:4d:e2:0d:25:db:f6:64:ee:09:
         e4:db:2e:31:c2:cb:d4:52:09:bc:8c:d5:c9:3c:ec:c6:3a:33:
         59:e3:30:c4:6f:07:40:ad:f5:f2:cc:0d:86:9c:41:58:ee:49:
         df:39:da:ca:9d:74:1e:f2:fa:cd:7b:77:e9:66:8d:ae:89:17:
         88:e6:69:1b:ba:f3:4a:44:86:b0:d6:d2:ff:48:5a:80:84:4a:
         60:1f:df:3a:00:28:b0:a6:45:5a:e1:4d:51:e3:39:15:b3:8d:
         2c:cb:a0:03:37:9e:f8:00:a6:88:ad:6d:5e:58:cf:9c:0a:bb:
         0f:57:64:d5:df:4b:d7:79:01:88:3e:2c:d9:29:2b:3e:17:8b:
         6b:86:9f:97:ef:bb:78:87:4c:00:cc:d3:a0:66:83:b9:c8:d1:
         96:a8:72:42:9d:6d:dd:15:c7:76:72:ef:c9:ef:78:96:0a:e7:
         84:c4:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:26:14 2024 by rpki-client on console-fra.rpki-client.org