Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa
File:                     949b9c71-af76-3dca-bf92-77173f62a9a6.roa (raw, json)
Hash identifier:          WalBU5R80nydRfI0SEyRXkvkYC0b4DFbt0Wpk8a2czg=
Subject key identifier:   6F:BD:D2:93:D7:7A:C4:4C:72:39:CF:E1:BF:1F:F7:B4:C4:4A:62:32
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F432858477BF6631B8A6080409CB94D00
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     26967
IP address blocks:        52.144.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:63:1b:8a:60:80:40:9c:b9:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=140e82ab-8b92-42df-b087-3094e3078cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:0f:e9:af:53:c6:6a:53:88:80:e8:e9:86:
                    e3:e3:ff:41:f6:0c:70:4b:15:66:37:f3:af:3d:52:
                    fb:ef:1b:bd:85:c6:bf:d4:ea:af:4c:dc:9f:bb:6f:
                    fe:77:7e:3f:0c:8b:51:cc:85:93:98:39:30:c0:45:
                    0d:92:a0:40:ec:4d:9a:42:bb:f9:88:bb:13:ef:a1:
                    5e:16:e8:f5:f8:cd:21:32:5e:45:ab:b8:34:d8:41:
                    bb:56:58:74:c6:8f:61:c1:e0:65:9e:a2:0d:f2:cc:
                    19:72:50:6e:20:85:c4:09:38:b9:33:3d:c3:78:f6:
                    4b:bb:10:46:f9:ca:6a:73:80:45:35:79:a4:2a:57:
                    69:ce:00:d8:41:20:76:34:3b:fb:1a:2d:ae:c2:25:
                    6c:28:52:86:ea:6c:b2:41:f7:86:ad:88:3d:ef:08:
                    63:05:c3:d3:c9:81:6e:95:c6:13:43:0d:53:f3:7a:
                    9d:19:39:b3:c9:b2:43:3d:88:78:8f:67:60:90:11:
                    0a:39:0a:3e:60:d6:f1:e3:44:5d:02:11:2a:16:fa:
                    ca:96:2f:d4:5f:5f:44:d8:45:7a:cf:fc:64:2d:95:
                    8d:ee:c8:7a:e2:4e:00:4f:25:bf:df:cf:8f:be:fa:
                    47:82:d4:01:b3:0f:c8:77:72:29:bc:ad:7d:d4:22:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:D2:93:D7:7A:C4:4C:72:39:CF:E1:BF:1F:F7:B4:C4:4A:62:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:66:b0:b8:b0:1e:4e:5c:d7:fc:d0:20:f4:35:c7:d4:52:
         e0:a1:2e:dc:da:a9:d9:59:a8:12:be:45:73:c9:5d:6c:fa:7a:
         ef:7c:cd:9d:d8:c6:b5:db:22:71:3d:ca:e5:76:ce:db:66:b3:
         ef:a0:d8:62:1e:23:25:ef:62:ff:a3:50:94:eb:e6:ec:76:20:
         56:b0:b1:7c:8b:09:bc:e3:f3:69:88:96:34:d1:3c:72:dd:61:
         15:43:f2:ae:99:23:55:3f:00:d0:e2:f1:54:92:37:c7:70:c0:
         3d:bb:34:9e:86:2f:22:69:cc:c5:69:bd:e8:6b:9d:7f:8e:80:
         29:f7:e9:8f:40:65:ed:dd:73:f5:b6:e4:b2:4a:3b:89:e4:63:
         47:ef:01:e9:a5:ec:6f:cc:a8:74:1c:d2:db:69:3b:9c:17:9b:
         a5:62:88:6c:65:9a:2c:b0:b5:33:90:60:41:ac:ee:0b:2f:30:
         07:ba:d3:d3:7b:8b:0a:2a:58:41:68:5e:e0:26:ba:41:b3:76:
         7b:d2:ba:d5:93:e6:f0:a4:28:fc:40:12:93:d8:53:5b:6b:fa:
         09:3e:a3:22:cd:68:28:ab:97:64:87:64:3f:6e:5d:a8:18:a2:
         05:95:f8:64:36:7e:82:51:bf:7e:c9:26:46:49:a9:e7:0a:a5:
         6f:81:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:05 2024 by rpki-client on console-ams.rpki-client.org