Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa
File:                     d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa (raw, json)
Hash identifier:          uD6ji4HLghI0A8Es0eExBOShsLqnJqAIEy7j2JBK0xg=
Subject key identifier:   3A:B5:EB:BB:E6:36:EA:52:46:5E:97:5E:75:1C:A7:1B:B6:63:B3:DC
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285845C8ACE1A2453F5EA378BDE000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa
Signing time:             Mon 06 May 2024 14:56:05 +0000
ROA not before:           Mon 06 May 2024 14:56:05 +0000
ROA not after:            Sun 04 Aug 2024 14:56:05 +0000
asID:                     8069
IP address blocks:        52.122.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:ac:e1:a2:45:3f:5e:a3:78:bd:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  6 14:56:05 2024 GMT
            Not After : Aug  4 14:56:05 2024 GMT
        Subject: CN=b6c8af33-f047-469d-92a4-5708533115c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:09:96:6e:36:f5:d5:07:12:ee:23:34:9c:
                    f8:85:cb:04:58:0d:7f:2d:1f:37:ba:a8:fa:c8:4e:
                    ad:f2:bc:a7:7a:65:f0:cb:85:fa:23:6a:28:b9:4a:
                    98:b8:db:ff:60:70:20:cf:21:43:bf:fa:47:fc:fb:
                    2d:2a:51:c1:03:a5:63:05:28:2e:ce:27:62:0b:b8:
                    67:dd:ca:fc:c2:13:a0:94:af:ca:13:55:4b:21:d8:
                    fa:08:60:c7:c8:d9:23:17:cd:d1:3b:91:e1:5c:0f:
                    22:d2:8a:39:a0:5b:d2:05:f4:fb:f5:eb:12:bc:26:
                    2c:0f:86:ea:dd:04:44:4d:98:7d:af:a5:c6:bc:6b:
                    51:59:d9:80:e3:da:d8:e7:e1:ec:fe:ab:21:08:e6:
                    45:48:bd:e3:be:dd:8a:fe:92:56:c0:61:5f:02:2f:
                    3e:d1:0d:a9:5a:79:a9:ab:3b:53:ff:09:ed:03:23:
                    c6:5a:1f:ff:69:ec:d0:22:7f:5c:42:7a:a5:15:0c:
                    f2:9c:a1:99:75:c2:f9:d4:e8:7f:36:e7:d2:a3:29:
                    65:c7:2c:7d:0b:52:3e:f4:77:a0:67:f7:3b:d7:22:
                    04:50:4e:ec:4d:90:aa:4b:4c:f1:76:ad:e9:61:54:
                    12:ea:70:ec:fe:8d:cc:03:55:7f:ec:04:55:74:63:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B5:EB:BB:E6:36:EA:52:46:5E:97:5E:75:1C:A7:1B:B6:63:B3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8f:30:da:e9:f6:cf:8c:95:cb:72:ed:66:ab:26:e1:35:89:
         19:fb:e3:3a:72:d2:0b:87:40:2a:6e:ec:d6:8e:6d:cf:a1:db:
         46:4a:13:11:47:4f:3b:91:5a:af:f3:45:48:d9:33:32:e5:99:
         3e:08:10:43:dc:c2:67:3e:06:2a:bc:55:c0:f6:6c:3f:54:c7:
         0d:24:fc:52:62:a1:84:88:a3:73:a6:70:c1:11:73:ea:77:c3:
         84:93:37:4b:33:d6:8c:2c:ca:32:29:3b:57:4d:77:d1:1a:8f:
         2c:33:42:a4:89:12:d0:ed:b0:c7:9b:2f:88:51:79:5e:78:45:
         c8:e7:e5:9a:f0:7c:4c:ba:c9:fa:2b:8c:f8:9b:57:2c:8e:ee:
         b6:e8:47:78:63:61:16:cd:6d:99:f7:50:48:9f:a9:38:9e:6d:
         a4:2a:e1:ff:14:04:96:de:47:29:96:68:57:51:3e:9c:b7:d5:
         77:b1:8c:b2:34:f6:53:12:fb:48:30:1d:9f:9e:3c:e3:41:39:
         97:9b:23:ee:3f:9d:65:d2:f0:5a:be:65:48:3b:5d:a1:30:29:
         9b:74:1a:80:e2:82:e1:95:d1:49:9f:7f:1d:48:78:df:4f:2a:
         58:06:eb:dc:08:5b:14:77:18:60:c9:60:d2:e1:bf:2c:ea:a5:
         12:df:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:11 2024 by rpki-client on console-ams.rpki-client.org