Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa
File:                     949b9c71-af76-3dca-bf92-77173f62a9a6.roa (raw, json)
Hash identifier:          rKv8cK1v6rdd/rzavTqQJKAsTPv66XEPnVATfSRRLFU=
Subject key identifier:   F3:C0:52:71:36:0B:2E:AE:E3:E6:80:69:94:0A:C0:27:2F:96:7A:8E
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F43285845BD48DAFAF5A8E2A92A5930C0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     26967
IP address blocks:        52.144.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:da:fa:f5:a8:e2:a9:2a:59:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=633613be-124c-4ffd-9b56-a69f71f77218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:8d:a4:72:62:4b:7b:bf:9a:47:65:1c:d0:
                    39:a0:c9:f8:9b:b3:e0:ea:e4:a5:9c:c9:8d:d3:13:
                    24:25:82:31:81:3c:c5:32:08:68:54:bc:9e:c1:46:
                    26:47:4a:bb:32:4f:25:7d:0b:88:d9:68:f4:33:b2:
                    f6:da:83:4f:16:26:2c:3c:42:6a:11:ee:6b:e0:f8:
                    27:cc:4e:3e:4c:33:38:85:51:fd:3d:5b:69:87:c2:
                    f0:17:0f:a2:6a:08:1c:5f:f0:3b:5e:42:32:5b:bc:
                    fa:ff:12:ef:08:ce:48:08:38:16:d5:3d:64:0c:0a:
                    a5:75:17:80:96:91:ea:e7:2f:fa:e2:83:d1:15:61:
                    b4:dd:32:79:b2:05:1c:d3:09:f2:70:53:50:48:11:
                    c3:4a:51:63:03:d9:39:92:58:df:b0:ab:5d:28:65:
                    06:89:28:de:4b:1a:56:c6:61:92:4d:5c:4f:18:6b:
                    86:50:72:36:b5:ed:ad:79:20:27:c7:5b:b6:43:a5:
                    b4:0e:4d:8b:a3:a9:be:08:30:f2:6e:ec:91:ad:55:
                    42:60:2d:b5:6f:05:4a:62:80:87:0c:df:f1:e5:88:
                    93:08:d7:36:18:0e:62:3b:da:fd:27:e0:60:5f:95:
                    20:fd:0d:68:e8:38:76:aa:83:10:f6:6e:13:9b:cc:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:52:71:36:0B:2E:AE:E3:E6:80:69:94:0A:C0:27:2F:96:7A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:4e:5a:a3:68:6d:e7:97:d9:c2:3e:b9:30:8e:9c:0d:a3:
         f2:0c:2d:5a:03:fb:75:36:2c:76:f8:2d:63:6b:78:53:0b:14:
         84:40:12:1a:fb:8b:77:18:06:6b:5f:0a:1c:08:77:49:ed:64:
         26:2a:9e:07:98:70:50:89:0b:81:7e:ad:72:52:26:97:21:cb:
         c1:bc:af:0e:10:b0:8e:dc:cb:2f:d1:9a:d3:49:d2:53:0d:e7:
         3c:e8:53:b9:ff:a8:11:42:7c:68:f8:e8:5e:c8:1f:44:5f:a6:
         89:ae:a4:3c:cd:f5:6a:74:95:df:00:de:ab:bb:07:f8:f8:ed:
         3e:79:35:71:80:19:38:75:50:33:6c:4b:95:27:a8:c4:c1:3a:
         e5:22:47:f7:70:fd:db:e8:d0:b6:c8:98:86:d4:3e:af:65:54:
         17:5f:8a:dc:76:78:5a:95:6c:8c:c6:0b:e0:86:75:a0:e8:92:
         95:a1:be:73:72:c3:b1:a3:8b:7f:5b:de:cb:1e:2f:f4:98:8b:
         fd:52:73:ea:dc:b0:94:a0:15:a8:df:ef:de:70:67:a6:fc:d4:
         ac:f1:9c:79:89:80:bc:a0:c7:47:3e:20:19:a2:fe:ea:e5:ec:
         b9:9e:5e:5a:07:b8:5d:a0:75:1d:de:69:58:a9:7b:2c:6d:c3:
         03:b9:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:30:57 2024 by rpki-client on console-fra.rpki-client.org