Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa
File:                     59c0257e-698d-3c0f-975d-93c1e910c93c.roa (raw, json)
Hash identifier:          pedrHfYaOZEYZwmuQSsXFf9fLdqOGZbXy734zTRlS7k=
Subject key identifier:   C8:1B:EF:B6:62:A7:33:C9:14:92:7D:77:B3:3C:C9:AA:4F:2C:A5:CC
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F432858472405C7DFD7738DF0253FC000
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        52.128.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c7:df:d7:73:8d:f0:25:3f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=d05e7f15-367f-4c03-af48-16376e025eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:f0:9d:42:27:5f:bf:8b:9b:3c:8c:fb:3e:
                    04:2a:ee:c2:a9:44:12:5d:76:40:52:9e:78:99:33:
                    43:d8:b7:d4:0b:4e:8b:05:a9:44:f1:6f:60:c7:73:
                    07:85:22:8b:9b:9c:04:67:8b:1e:99:06:e6:12:55:
                    ee:57:d1:5e:a9:e1:43:3c:5c:fe:7e:e8:db:07:1a:
                    bd:fe:bc:9c:53:30:9d:af:0f:2c:15:b0:84:33:b2:
                    5c:bc:e9:c0:95:25:a7:33:b9:d3:28:e4:03:29:0c:
                    7e:a0:da:ff:5c:3e:78:34:d9:a3:5a:eb:69:d9:f8:
                    1d:8f:0a:f5:1b:73:55:cf:bd:73:13:25:d1:bd:c2:
                    e0:97:8b:1e:fb:1e:bf:d3:93:03:30:93:ba:34:0a:
                    f9:e6:c7:ba:50:bf:d4:1a:af:67:c1:22:da:75:68:
                    0e:c8:fb:92:69:1a:32:8b:98:4d:f5:cb:00:4d:43:
                    66:74:c1:f8:a2:ad:15:c8:a6:3f:bb:bb:20:51:cd:
                    84:2c:48:0a:3c:db:d1:c0:af:ab:19:ea:c4:cc:07:
                    51:f4:19:35:35:5a:8e:6e:ea:e1:17:48:af:27:a6:
                    2b:9a:c4:5e:e5:09:87:52:19:d2:de:ed:0b:07:d8:
                    7d:5a:89:4d:d8:5a:93:1f:4f:ed:dc:e8:d5:9e:ae:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1B:EF:B6:62:A7:33:C9:14:92:7D:77:B3:3C:C9:AA:4F:2C:A5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:9e:ba:92:1f:39:57:01:e0:43:c6:9a:64:d6:bc:a4:2e:
         e5:1b:82:95:60:dc:bd:1f:00:88:38:77:15:c9:12:3b:1c:17:
         f8:3c:88:60:4c:99:11:ee:b4:4c:62:d6:36:b4:9d:f9:44:29:
         a5:a1:c3:59:3d:23:55:1a:92:e3:fc:5f:fa:ba:3a:18:10:71:
         c7:2a:00:a0:23:18:d2:13:37:2e:20:d0:05:99:62:37:1b:65:
         34:90:1c:e7:2a:76:93:12:9c:3d:3e:0a:cb:09:91:fb:c8:f8:
         7c:23:24:b8:c5:05:a2:e5:a9:6e:aa:66:95:d9:f7:2d:ab:62:
         0a:73:17:4d:e6:d8:02:bb:f7:05:a5:5f:d7:5a:52:79:76:c0:
         95:ad:07:e9:f6:ae:26:1d:34:c5:b0:2c:1c:46:e8:f2:c6:72:
         db:95:11:e4:98:4b:40:04:90:ce:a1:c5:ab:dd:30:7d:4e:94:
         d5:37:9e:19:56:de:ae:38:fa:b5:88:7d:85:5e:bb:a3:23:71:
         ad:04:ae:9b:03:31:f5:50:69:25:34:b6:02:f1:17:20:2e:d3:
         40:bd:32:9f:0a:6b:43:6c:77:b1:b2:eb:14:ea:2d:6e:1f:94:
         87:46:9a:35:48:0d:90:e1:38:43:1b:79:a5:89:5b:f3:6b:cc:
         4a:fe:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:45 2024 by rpki-client on console-ams.rpki-client.org