Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa
File:                     c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa (raw, json)
Hash identifier:          Errr9u20VBmLAFq7+QdYIv/cLR1UKefO6NzSMFeX67g=
Subject key identifier:   4B:93:06:6F:25:7D:FD:1F:90:CF:57:C7:EC:93:02:AF:72:CD:AC:16
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285847B961706BAE0231DEEFF94C00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     36007
IP address blocks:        52.144.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:70:6b:ae:02:31:de:ef:f9:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=5cb12c52-7d6d-43a0-80e8-126330536146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:4f:a5:db:51:88:8a:e1:25:50:94:63:17:
                    ef:03:dd:b3:59:5a:0e:b0:72:c9:4a:4c:fc:3e:1a:
                    6d:76:d7:8e:5e:ed:c1:e2:53:1f:d4:d6:81:ab:ca:
                    fe:54:8c:90:b3:df:24:8b:07:e2:9b:28:2d:09:e6:
                    20:c2:4b:a0:09:89:45:25:98:5f:51:2e:c8:2e:87:
                    f7:7a:44:c5:e2:fa:c6:76:ff:1c:d7:54:a3:15:e9:
                    b7:10:90:1e:c5:4a:8b:f0:a6:fe:81:78:66:b7:88:
                    9e:00:27:e9:89:63:32:7f:4d:8b:f5:af:0c:9b:24:
                    c5:9d:42:44:d7:16:70:24:11:fa:d9:88:4c:a6:5f:
                    cf:9f:5c:e8:94:59:e6:6c:9a:24:a7:85:19:6f:1d:
                    b3:88:7e:ca:fc:41:2b:fc:e7:3f:0a:59:d4:bc:f3:
                    74:ca:74:ab:ea:c0:b3:3c:25:8f:a5:a6:d2:a5:42:
                    4f:61:1b:98:5d:94:5b:70:6e:ca:5d:e9:0c:dc:fd:
                    15:93:d0:4e:69:f3:0d:97:42:8f:61:70:db:84:45:
                    e8:12:85:13:e7:3c:18:b5:a7:8d:ec:a4:8e:93:09:
                    23:62:0a:cb:bf:0f:80:d0:42:2b:94:cb:30:84:f9:
                    dd:60:b5:7e:4b:f1:fb:5f:b1:6c:25:30:39:f1:09:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:93:06:6F:25:7D:FD:1F:90:CF:57:C7:EC:93:02:AF:72:CD:AC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c9fad99d-f00e-360b-ba39-e6b37d6aa286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:26:bc:1a:85:fc:7b:25:03:f2:8d:97:5c:38:8c:fc:2f:0c:
         6c:e8:27:25:15:dc:22:2a:25:ac:bb:b4:8d:d7:45:90:fc:a6:
         0c:59:22:d7:f7:71:9f:16:f2:16:a7:32:cb:ec:72:99:2e:c5:
         0f:66:5b:60:6f:25:b9:63:83:90:c2:2f:5f:ab:82:ad:7d:f7:
         23:81:36:17:b2:2f:1e:5d:46:d5:c6:eb:bb:80:ce:ac:00:1e:
         33:df:dc:8e:cb:7b:a9:80:70:f1:f0:67:e0:d3:d8:48:37:d0:
         dd:bf:21:a8:90:7b:a8:6d:8b:41:c9:b5:2d:f2:cf:04:b9:e9:
         81:41:ac:19:85:20:f1:c5:e5:c4:1f:9b:83:84:eb:98:fb:c8:
         13:b7:54:4f:31:99:f9:35:14:3b:b7:7e:86:0a:69:91:99:d0:
         4f:17:b2:08:da:2d:3e:62:1e:ce:00:7c:de:88:47:c3:8a:02:
         ac:90:9b:42:f0:35:91:16:74:7d:45:b8:32:fa:93:8f:21:08:
         94:30:c4:d5:12:fd:b9:2d:aa:21:fb:38:58:3b:1c:ef:03:bd:
         37:9a:e1:cc:16:40:d7:06:8c:cd:ce:fb:b8:a0:4f:83:7f:81:
         9f:36:b8:7e:0d:5f:d7:47:3c:fd:4b:0e:78:ea:1a:b2:6c:d7:
         29:f0:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org