Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa
File:                     52b1de85-0442-360b-b96d-bfcab54c4eac.roa (raw, json)
Hash identifier:          6+aApi5GQ+6ZyPT7hHGQsHT49CRRgMSFTfEGanb3Be0=
Subject key identifier:   5A:08:05:5D:BC:96:95:AB:D9:F7:1E:83:48:98:33:AB:E3:28:1B:A7
Certificate issuer:       /CN=2b52814e-343c-46a0-bf89-2e9064856503
Certificate serial:       010D0C9F4328584663647555F3ED89C5C53B5500
Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa
Signing time:             Mon 01 Jul 2024 01:00:25 +0000
ROA not before:           Mon 01 Jul 2024 01:00:25 +0000
ROA not after:            Sun 29 Sep 2024 01:00:25 +0000
asID:                     393410
IP address blocks:        192.30.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jul 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:63:64:75:55:f3:ed:89:c5:c5:3b:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503
        Validity
            Not Before: Jul  1 01:00:25 2024 GMT
            Not After : Sep 29 01:00:25 2024 GMT
        Subject: CN=2e45b1f5-d6e6-42e6-a4f1-f3a22508575a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:e3:d8:af:c2:5e:f6:9a:26:d5:3c:d6:64:
                    02:fe:8f:90:9a:b9:b6:6f:78:74:9c:e3:46:d0:dd:
                    1d:a7:b7:04:0d:cc:73:04:8e:5a:d1:bd:e5:d7:34:
                    18:50:3f:4b:ca:a4:73:5e:88:ee:d6:cb:15:ef:3a:
                    26:d6:bd:00:76:6f:41:d0:e7:de:62:2a:78:9b:a9:
                    21:81:88:4f:f3:46:1d:61:16:90:c2:3a:76:7b:52:
                    c7:c5:c0:7a:37:93:14:7c:7c:d5:47:0a:ac:e7:6c:
                    6a:8d:0e:fd:ec:a9:0f:0f:fc:d9:10:9e:8e:ae:8b:
                    a3:d0:d5:4f:44:38:a4:33:21:df:77:56:0b:38:7b:
                    52:76:60:d7:6b:eb:a7:3a:f0:02:ee:d9:f4:f2:fb:
                    58:37:a6:e4:b7:39:09:75:77:f9:74:04:f6:33:49:
                    9a:89:12:1f:af:3c:90:97:52:a4:85:2e:9b:fc:0b:
                    94:19:b2:aa:fc:67:1f:60:67:c5:71:e3:73:ae:31:
                    ea:82:20:da:ac:c9:af:d9:97:0e:da:f0:42:da:65:
                    fa:8d:1b:77:c9:cd:2c:bf:77:00:fe:fb:68:52:4f:
                    e6:ad:b3:bb:44:ba:71:ec:5c:fe:85:83:e7:c1:01:
                    26:53:2f:30:ac:24:1a:92:5a:83:bb:62:62:e9:b0:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:05:5D:BC:96:95:AB:D9:F7:1E:83:48:98:33:AB:E3:28:1B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl

            X509v3 Authority Key Identifier:
                keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:fa:4a:02:32:93:57:5e:3b:2d:8c:4a:f4:26:13:7f:e2:
         17:f8:03:51:b9:db:7f:74:04:9d:89:68:9e:22:ca:7b:a5:77:
         76:2e:91:4f:45:6f:39:34:27:06:24:ec:c3:5d:77:4c:fa:52:
         fc:62:e0:cf:0f:c2:59:f0:23:94:64:42:74:7c:8f:e4:5a:98:
         2a:b9:15:e2:d8:1c:d1:76:4a:96:7a:95:e5:89:71:fd:95:0d:
         ff:ac:60:a7:79:3d:53:0a:91:e3:a7:6b:eb:04:e2:a2:f7:70:
         93:9f:b5:aa:4e:78:e0:18:a0:22:ff:c2:c6:97:e6:b2:d7:91:
         83:24:4a:ce:52:3f:44:31:5d:76:d6:ed:2f:c8:d2:a9:58:1a:
         f1:e2:8a:a9:d2:ca:01:70:2b:05:47:3a:2e:de:a0:60:d2:05:
         4f:20:e6:77:5f:47:77:d8:b7:85:f0:30:01:53:30:34:08:5d:
         84:c0:37:00:2a:a0:62:0d:f2:7a:6b:de:55:7c:c1:b2:93:06:
         c7:38:b1:91:29:74:0d:82:ac:0f:3d:a6:b8:2f:f8:51:69:4b:
         3a:19:5f:0d:ca:5c:3f:83:08:0c:e0:ee:da:9f:fd:b8:82:e7:
         f2:08:6f:9c:cb:b6:71:df:d1:e5:3f:e8:01:6c:36:bf:0a:02:
         3e:6d:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:22:56 2024 by rpki-client on console-fra.rpki-client.org