Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/5b108945-54d4-35d4-9bf1-52584b828763.roa
File:                     5b108945-54d4-35d4-9bf1-52584b828763.roa (raw, json)
Hash identifier:          9i56GUX4A3pSfjKDERmH85BVj6+GFSFA4ipuQez5CMk=
Subject key identifier:   9B:6C:8C:89:46:F4:B8:B9:CB:BB:D5:C2:FF:66:30:CA:54:CA:CA:FE
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F4328584503C01D1A55FF400C98D90E80
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/5b108945-54d4-35d4-9bf1-52584b828763.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     3257
IP address blocks:        52.128.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:1d:1a:55:ff:40:0c:98:d9:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=b586c829-d067-4212-ac83-dbb7dfa2ee0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9f:94:fc:f9:75:c2:09:e7:46:d2:e7:78:9f:
                    e8:79:b0:27:d1:e3:bd:c8:91:25:47:4f:09:8d:c6:
                    69:15:54:e1:c4:a8:16:48:08:b6:06:6c:aa:92:46:
                    7e:38:e3:e7:68:3f:09:f9:5f:cd:ef:4c:58:2a:2f:
                    76:94:d0:f9:22:f7:12:7c:ae:64:eb:01:0a:67:bb:
                    ca:85:38:4f:de:75:f6:b1:e3:3f:28:8c:8e:1d:bf:
                    fa:d4:1e:86:ec:6c:71:21:6d:f8:12:fb:0b:f0:77:
                    86:3f:2f:9f:23:34:02:ed:08:a3:26:a7:d3:6a:f9:
                    56:cd:ab:e3:b3:84:bf:53:22:c6:4e:b3:93:6b:c2:
                    f3:04:76:4c:35:9a:33:f2:4a:23:35:51:83:94:83:
                    09:45:d7:8a:99:ee:7f:4d:64:16:3d:c3:31:78:64:
                    b3:15:6b:63:0c:9d:92:8e:93:52:45:d2:0d:0a:cb:
                    ef:57:98:5a:1e:5f:76:b9:7f:14:f3:c3:cf:6d:4e:
                    c3:99:d3:b0:80:30:82:96:3e:b2:ad:49:7e:30:a6:
                    bf:a7:71:bd:ea:60:1e:69:2d:4d:76:e9:5a:46:df:
                    0b:1c:de:48:ef:38:52:5b:35:5e:ac:36:18:c2:6f:
                    d1:7d:d5:41:e8:b1:c8:19:cc:97:ba:71:d2:e4:2e:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:8C:89:46:F4:B8:B9:CB:BB:D5:C2:FF:66:30:CA:54:CA:CA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/5b108945-54d4-35d4-9bf1-52584b828763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:41:23:c5:92:e5:b7:48:8c:5e:9d:90:ae:71:f7:d5:6b:17:
         06:11:67:62:b7:9c:b3:58:c6:29:97:ea:b6:6a:e3:04:af:0b:
         1b:d3:5d:0a:8a:81:73:62:ec:ec:95:76:31:54:de:f4:c7:1f:
         3e:15:ab:4c:3b:eb:3d:eb:72:5f:58:df:fc:fd:13:8c:f1:e4:
         52:49:1d:9f:0d:38:e4:16:e2:5b:b4:bf:47:ba:eb:1c:21:a4:
         82:60:08:31:d7:96:03:80:6e:ed:f5:ca:e5:5c:c9:06:fc:07:
         5e:98:77:7c:77:d8:91:82:8b:91:a2:c0:08:08:94:bf:87:02:
         5f:8e:3e:b5:c1:a1:f5:40:93:e5:73:90:49:17:f0:93:7c:82:
         26:88:63:1d:3a:bf:b3:c7:4c:9b:7b:f8:4a:82:7a:3f:f8:20:
         b3:e7:26:e7:b1:8f:22:c3:aa:53:e3:5b:f8:84:1d:9d:fe:22:
         66:18:0c:42:75:f2:2a:9f:cb:d9:56:2d:4b:29:8f:b9:de:55:
         04:7c:65:48:c5:87:73:a6:89:c8:75:cc:7b:5d:a9:2b:ab:fa:
         56:ff:4e:35:2c:f5:bb:b8:49:0b:d4:ef:58:12:ff:fa:a0:e3:
         40:7b:5e:2a:6f:3c:04:b5:d5:7e:11:32:7b:6d:59:51:9c:ec:
         64:33:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:04:46 2024 by rpki-client on console-ams.rpki-client.org