Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a32496ae-3602-3cc1-962e-2b19bdf53a72.roa
File:                     a32496ae-3602-3cc1-962e-2b19bdf53a72.roa (raw, json)
Hash identifier:          eTUmA/x3KFuKJ8e4PYt95c+Hta8ilqjLoif/Hv9Mmbo=
Subject key identifier:   C3:59:3C:3D:4A:CA:A2:9A:40:8F:C7:C7:BD:91:30:DD:1E:13:27:9D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583F9717D497AADF4ED1686366C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a32496ae-3602-3cc1-962e-2b19bdf53a72.roa
Signing time:             Sat 15 Oct 2022 12:00:00 +0000
ROA not before:           Sat 15 Oct 2022 12:00:00 +0000
ROA not after:            Wed 10 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        52.122.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:97:17:d4:97:aa:df:4e:d1:68:63:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Oct 15 12:00:00 2022 GMT
            Not After : Apr 10 04:00:00 2030 GMT
        Subject: CN=fcc4b5ab-9eee-4e4e-8751-24d3e0f52817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:3a:73:6c:c4:61:63:c6:dc:ed:8f:98:27:
                    72:ba:f8:b0:70:13:d9:9a:98:cb:8b:88:0e:f8:2d:
                    bd:5d:bd:f9:45:b0:e2:c5:3b:56:98:04:e4:c4:e0:
                    3f:c7:73:52:f3:73:b4:da:1f:fd:4e:7e:e5:da:cb:
                    94:ca:dd:3c:e2:4a:4b:3f:00:39:14:67:90:5b:a8:
                    0e:b5:db:0a:53:dc:81:ad:2c:35:b1:a3:7b:a7:53:
                    31:78:fc:98:77:75:c4:fb:62:38:37:02:d6:03:82:
                    e1:9a:ae:d2:60:56:64:d6:bb:8b:39:9b:db:c3:b2:
                    b9:22:d1:ee:39:f9:52:73:86:1b:50:6a:67:fd:81:
                    d5:e8:82:b8:72:8a:a5:3a:38:cb:2a:de:8b:25:7d:
                    1b:03:28:1d:c7:fb:3a:a8:07:9f:df:47:9b:11:91:
                    92:39:21:4f:0c:4e:a4:e1:bb:84:a9:df:47:24:20:
                    31:03:9f:47:2e:a1:25:40:fc:dd:53:4d:54:76:63:
                    fc:d5:dc:b3:f9:63:36:aa:34:a8:de:02:8f:5b:35:
                    bc:3d:d2:7e:c2:a0:c7:03:55:6b:f5:4c:59:c7:9c:
                    93:61:b5:d7:27:e3:cd:7d:d2:61:89:f3:75:44:bd:
                    cf:f7:a8:0e:b9:e7:b8:23:46:5c:9a:cc:fb:66:cf:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:59:3C:3D:4A:CA:A2:9A:40:8F:C7:C7:BD:91:30:DD:1E:13:27:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a32496ae-3602-3cc1-962e-2b19bdf53a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6a:ed:08:f5:2a:28:06:f1:53:90:c3:29:2f:d5:2c:80:6d:
         34:25:74:d5:e9:8b:46:b1:ae:6e:e2:2e:28:56:d0:02:5b:bf:
         bc:84:f7:7e:22:73:08:3e:e1:d2:fd:ea:51:25:0a:1b:e0:3c:
         fe:62:62:57:82:96:b7:58:21:f2:f1:2e:22:27:e2:67:aa:9a:
         34:42:16:7a:34:1e:68:5a:fc:e0:87:29:f0:27:cb:51:19:05:
         db:58:0e:8e:c7:2b:e7:72:2f:78:43:72:78:21:31:73:29:b3:
         fc:4b:61:44:b4:12:ac:e6:e3:40:c1:78:6b:9c:2d:c7:c5:31:
         e1:e0:35:a7:66:06:56:eb:ce:a0:95:ed:52:4d:18:80:99:fc:
         d7:08:2b:39:7e:08:3e:5e:d6:30:5c:51:7c:a1:ec:43:b8:05:
         f0:ee:e1:10:ec:58:da:6c:1e:13:a2:85:3b:36:31:80:71:01:
         2c:f0:e7:de:95:63:8a:a6:94:79:80:85:86:20:45:a6:bc:2b:
         06:73:7b:9d:34:8a:eb:f5:73:34:83:b0:f1:db:16:4d:7a:cc:
         42:d2:ed:2a:e0:65:a0:ce:a7:af:ce:4f:86:24:58:c4:2f:0a:
         ae:4c:58:3c:2f:18:42:ab:bd:c9:90:12:cf:82:d1:be:02:7d:
         03:a8:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:10 2024 by rpki-client on console-ams.rpki-client.org