Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa
File:                     5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa (raw, json)
Hash identifier:          kgmHFNkCU+QzPMPIoiyN/JoSDf3HZP8pv3Ge6ZKZzho=
Subject key identifier:   7D:88:1D:24:37:FF:EA:FF:89:20:A9:3F:DA:A9:68:15:F5:B9:8F:FA
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285841D629E94B2AE176F4C5985C80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa
Signing time:             Tue 09 May 2023 12:42:12 +0000
ROA not before:           Tue 09 May 2023 12:42:12 +0000
ROA not after:            Mon 08 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        52.122.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d6:29:e9:4b:2a:e1:76:f4:c5:98:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  9 12:42:12 2023 GMT
            Not After : Apr  8 04:00:00 2030 GMT
        Subject: CN=8c6b1d3f-9323-42d6-8ad7-889c81c488ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:60:b3:82:52:c3:d0:fe:66:67:e4:41:4c:9d:
                    74:60:34:51:c9:1f:ef:04:0c:10:43:86:d8:0f:62:
                    86:33:62:73:c3:fe:86:d8:26:f0:0d:68:f6:aa:eb:
                    e0:f4:a0:a4:a7:0d:27:47:28:e2:d1:88:40:bf:35:
                    93:7b:d2:18:be:f8:f9:9b:7d:eb:ea:9a:7f:95:04:
                    76:29:c0:e3:73:33:02:12:eb:d8:78:6a:ad:d8:bb:
                    ea:38:c9:d4:de:6e:80:42:50:6d:d0:a2:dc:c0:37:
                    0b:d1:f7:8f:8b:54:c6:79:46:8c:3c:a2:49:13:15:
                    b0:70:c6:72:bf:ad:f8:56:4e:fd:f4:d6:ce:9b:9e:
                    4b:d0:03:64:0d:a9:bf:87:e9:d5:28:12:d0:e4:05:
                    6d:6b:30:ac:e0:38:56:f9:e1:20:02:e8:8e:1c:8a:
                    26:b6:bd:5b:bd:06:d3:a4:8e:74:7c:ac:d3:82:69:
                    58:9d:80:a9:09:d1:35:d6:a3:f4:48:75:47:52:61:
                    53:54:14:a9:be:0b:43:f9:f6:76:57:d6:b3:66:ea:
                    30:cc:18:57:4c:06:56:ea:a1:a7:08:9d:94:0f:22:
                    ec:cf:c7:5b:db:7b:62:28:0c:59:ef:a1:d5:08:a1:
                    be:83:2f:5a:20:4b:33:b8:ed:90:41:09:a2:77:40:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:1D:24:37:FF:EA:FF:89:20:A9:3F:DA:A9:68:15:F5:B9:8F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:32:76:65:58:c1:59:37:75:1e:1b:96:2a:a7:ce:c4:f0:c0:
         49:c4:b1:c2:79:13:4e:7c:f3:85:19:35:64:03:68:55:a5:84:
         84:7a:85:7e:25:b7:91:7c:32:3a:37:2e:1d:9c:59:fc:25:98:
         8e:e4:dc:45:1d:50:4d:ed:b1:b0:c0:df:35:ca:52:d3:a5:7d:
         c2:b7:b7:5c:40:3d:19:a2:20:35:b3:10:bc:c7:a5:cf:eb:e9:
         1d:b5:35:d2:03:30:f0:61:6f:9e:7e:f6:36:6d:29:28:14:ab:
         b5:a9:83:08:51:30:2e:97:fd:c3:11:69:a8:9c:7d:28:59:48:
         75:b5:16:cf:c4:f8:11:c2:6a:e4:ea:08:b5:cb:73:5e:90:1c:
         1b:eb:47:fb:ec:e5:51:5a:50:cb:05:95:ba:de:38:27:e0:06:
         3f:26:67:45:ee:51:08:ff:30:aa:5d:57:43:29:e1:b0:40:70:
         80:20:39:a5:11:e7:5b:1a:dd:3a:47:e4:bc:47:8b:d9:a6:e6:
         fd:98:8b:e9:fb:e9:00:91:d5:47:d3:03:4a:8e:aa:c6:8e:81:
         0b:08:4a:c5:1f:2e:c2:1e:71:35:d7:db:ed:41:62:26:cb:de:
         06:87:1d:73:61:97:b7:db:5f:3d:56:c2:49:0d:26:cb:47:f9:
         5d:e1:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:45:32 2024 by rpki-client on console-fra.rpki-client.org