Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa
File:                     ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa (raw, json)
Hash identifier:          PBnhukl0vxAwl1o1NSZnrfUwg2d7jMT7qp07bSBqK4A=
Subject key identifier:   CA:04:88:28:54:93:DD:74:5D:29:ED:F3:50:4B:36:01:DB:64:DB:51
Certificate issuer:       /CN=5d7ff891-1048-4688-a1ac-b43aa5b13e9e
Certificate serial:       010D0C9F43285845612861F3BC0DF9C438AF3E00
Authority key identifier: 58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     394669
IP address blocks:        52.124.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:61:f3:bc:0d:f9:c4:38:af:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7ff891-1048-4688-a1ac-b43aa5b13e9e
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=ec736b6a-dd1e-44be-bce4-446dfff9af43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1e:73:ce:2a:59:0e:88:08:32:a6:db:95:72:
                    8a:1d:68:85:af:2e:82:15:73:16:89:d8:69:a2:ac:
                    d6:b3:9a:c9:99:eb:e0:2f:84:6f:c5:74:db:7a:37:
                    7f:ff:8a:a7:4e:55:d7:51:f3:cd:72:9c:cd:02:58:
                    a2:8b:94:7c:0f:b5:7e:21:aa:7c:7a:1b:82:d8:9e:
                    04:cb:ba:13:8f:8e:70:0c:a1:97:26:e9:50:9d:4d:
                    ae:99:7a:8f:13:e8:bd:ff:65:0f:bf:a1:8b:9d:82:
                    97:65:51:fa:18:13:ab:e3:cd:80:12:f6:bb:ab:72:
                    11:ef:15:44:ff:6e:38:73:b2:5a:2a:39:12:ef:50:
                    f2:37:ae:59:fa:7d:48:58:ab:5c:fd:46:42:9b:f8:
                    10:ee:de:a8:4c:ed:6f:52:3a:7c:b4:43:9d:1f:92:
                    1a:eb:e4:f5:ed:83:8e:9f:00:7b:5b:f2:d0:f7:25:
                    e3:cc:99:51:7f:1d:b7:30:f7:05:99:94:42:62:82:
                    6d:78:be:d7:8e:91:fa:93:62:4a:21:71:2b:6c:6f:
                    43:bf:8c:c7:2e:77:3c:df:c4:f6:1e:e8:e0:ca:13:
                    0d:40:db:f6:c8:17:c0:32:f4:37:c6:75:cf:f6:f4:
                    81:09:92:85:c5:fc:ee:49:ff:6b:17:a4:6f:1b:9f:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:04:88:28:54:93:DD:74:5D:29:ED:F3:50:4B:36:01:DB:64:DB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.crl

            X509v3 Authority Key Identifier:
                keyid:58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:ea:6a:50:6d:f6:4a:e7:7e:89:92:bf:2a:62:d0:6b:c4:ab:
         72:b4:86:c1:3b:d5:74:6a:a4:af:62:02:fb:70:92:f2:a4:75:
         d0:aa:b2:a4:f3:fe:26:98:b3:12:45:8f:3b:ce:d6:2a:57:c7:
         ab:71:1b:2b:d3:37:b4:eb:30:0b:c1:0b:1d:1e:22:c1:62:e4:
         0b:bc:41:f4:83:f6:83:02:7c:12:65:5f:d1:95:f0:e0:9c:1a:
         90:99:8a:d1:03:24:76:83:c4:40:61:25:4b:4f:20:f7:f8:ed:
         0a:7b:db:98:8c:7a:c8:a5:67:cf:38:52:b4:ac:a3:35:ae:4e:
         e6:90:2e:6a:c3:d9:e6:c1:b5:39:6f:db:98:a6:8c:a8:07:40:
         d8:cd:8e:87:1b:ca:25:9e:24:ab:45:70:35:89:0b:7d:dd:df:
         47:cd:7b:fd:30:80:f7:94:ff:43:8a:11:3b:39:9e:ce:df:7b:
         d1:20:37:db:2e:a8:94:15:0f:21:c6:66:b5:21:50:04:07:30:
         07:5a:97:ba:4e:83:5e:3a:69:a3:e5:83:80:a2:9b:a4:53:0d:
         48:55:b8:d3:32:35:ef:85:99:59:5f:c8:af:26:c2:3a:84:43:
         fa:93:ac:68:92:c6:69:cd:e5:ad:47:3a:0b:f1:d6:7c:12:aa:
         a6:d3:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:30:53 2024 by rpki-client on console-fra.rpki-client.org