Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa
File:                     38b33f03-0219-3173-a3b9-2bec231ab597.roa (raw, json)
Hash identifier:          CNdExxVj+pjmtfDOz/HXOiGP+J7G4od9sqMJGYU+JOM=
Subject key identifier:   77:27:E4:22:72:CB:7E:13:E9:1F:85:CA:2D:58:49:65:A8:B4:A1:FB
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F432858454BB62F107AD6B8745BB28180
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa
Signing time:             Fri 22 Mar 2024 20:38:47 +0000
ROA not before:           Fri 22 Mar 2024 20:38:47 +0000
ROA not after:            Thu 20 Jun 2024 20:38:47 +0000
asID:                     16509
IP address blocks:        52.128.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4b:b6:2f:10:7a:d6:b8:74:5b:b2:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Mar 22 20:38:47 2024 GMT
            Not After : Jun 20 20:38:47 2024 GMT
        Subject: CN=e3bcd050-7898-4a84-909f-5aedfeb5b427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:85:ee:31:e3:a5:11:72:ff:31:bc:08:07:
                    b5:e9:ed:8b:82:1e:f5:2f:7c:ef:f1:65:fa:09:11:
                    7f:a0:72:c6:5a:12:b9:c9:d0:62:e6:4c:ae:e6:96:
                    f5:d5:b8:59:10:f1:05:e2:d9:7f:84:5c:a8:af:4c:
                    84:9a:6b:a7:b3:01:04:05:17:31:ea:e0:fa:d5:1d:
                    e6:6d:9a:69:76:79:2a:67:98:ed:4c:3f:b1:08:2a:
                    f6:c9:ca:08:39:c9:66:45:f3:9a:21:2d:01:53:46:
                    b2:d8:db:3e:89:8d:e2:58:b7:e7:a6:b2:0c:1e:e7:
                    6b:90:07:5f:0e:cd:bf:6d:a8:0f:c3:5e:08:c0:a6:
                    f7:ae:e2:22:76:9c:5c:13:82:28:c3:00:d2:e2:cd:
                    b3:e5:39:77:11:36:98:2f:8e:6a:2f:8e:66:d6:d5:
                    8d:88:72:28:4e:c8:f0:af:a1:d4:14:54:84:93:80:
                    c8:22:f0:34:61:b9:8c:a8:5f:e2:70:29:98:32:93:
                    16:ac:f0:33:d1:2f:9f:e0:63:7b:c0:ea:7b:39:a2:
                    15:64:31:3b:5f:5f:fd:84:6b:b9:06:85:ab:e9:9f:
                    75:95:59:27:98:79:78:25:43:f6:58:ab:07:56:be:
                    a6:fb:09:da:d2:96:c8:df:24:ca:4f:8c:50:34:29:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:27:E4:22:72:CB:7E:13:E9:1F:85:CA:2D:58:49:65:A8:B4:A1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:ab:66:70:e1:3d:bc:ad:1e:79:ca:34:79:50:4e:20:74:
         57:d5:05:f6:c7:3e:ef:5b:38:04:e0:0e:99:6c:f3:28:75:1e:
         d3:ab:bd:6b:92:ed:1c:1d:80:4e:c7:32:b5:b9:b0:24:59:9a:
         2f:da:41:e3:a3:0b:41:aa:87:5d:e5:57:5b:88:a3:42:d0:63:
         aa:47:56:e1:05:73:d0:5b:7d:18:fb:58:ad:08:09:84:c6:64:
         73:aa:e0:4e:94:3e:20:ad:cf:d8:72:56:45:d8:6d:a2:48:cd:
         24:73:43:f0:1c:ae:b5:2a:99:12:24:52:8b:c9:a2:80:0a:6b:
         5b:e7:e4:56:21:c2:6b:fa:73:f6:b6:ce:e0:ae:65:71:29:6d:
         57:b7:eb:63:04:1d:92:e3:d4:16:ba:b6:a7:ca:a4:61:cd:9f:
         d7:e6:4a:44:06:97:64:b1:79:a7:5a:1b:b1:7c:82:db:d2:35:
         7e:4c:35:0f:3b:c5:ad:7f:98:80:36:2d:e5:85:e3:93:7d:bd:
         3f:fb:d4:c7:8c:8f:69:cc:f3:3c:31:09:a9:25:c9:bd:21:1e:
         bb:f1:22:6a:ee:b4:47:06:56:67:d3:7b:55:15:7a:01:35:13:
         fc:28:42:3b:2e:fa:bb:6b:13:9a:05:9d:b8:21:c1:7b:ef:d1:
         32:74:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:19:38 2024 by rpki-client on console-ams.rpki-client.org