Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3ec8cd34-c7e1-3d3e-b8e0-68879bd67551.roa
File:                     3ec8cd34-c7e1-3d3e-b8e0-68879bd67551.roa (raw, json)
Hash identifier:          dsuW5CrS+4IMvwqJN5OSAwF4lpsNdEkGbMMDkI8NU4o=
Subject key identifier:   01:CA:70:BD:4B:8F:CD:B7:37:9F:95:36:45:5F:DB:56:D4:92:12:EB
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285845105028ADA3784FBE09AAB700
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3ec8cd34-c7e1-3d3e-b8e0-68879bd67551.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     7018
IP address blocks:        208.52.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:28:ad:a3:78:4f:be:09:aa:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=7a653bbd-78aa-4fd6-ae0b-bb5409956112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:4e:03:49:52:99:98:7e:87:f2:2b:b0:5c:
                    78:fc:33:08:2b:86:b3:7a:28:bf:02:0d:9e:a0:d2:
                    62:df:fa:3c:79:b0:15:58:db:31:99:96:fb:30:26:
                    b0:91:61:13:66:87:6d:be:81:84:06:cf:4b:5b:e8:
                    48:78:2d:33:a8:b8:7b:3b:c9:41:e0:2e:33:15:5e:
                    b1:81:69:12:20:cb:81:4a:8f:96:28:a0:5f:fa:15:
                    e4:5d:c2:9f:82:96:b9:62:ad:b8:c8:ba:09:97:3c:
                    88:a5:4f:57:e2:1d:54:6e:48:d4:95:07:ea:b8:bc:
                    f5:be:d4:34:38:29:8e:de:fa:08:46:85:58:8b:14:
                    bb:cc:d5:c0:e1:35:67:09:11:f6:d7:f9:a3:43:32:
                    8d:b0:62:b7:f7:5c:80:75:d2:fa:e6:f7:8c:bd:3f:
                    3b:7b:d7:80:b1:ed:67:3e:ca:43:cf:c5:72:31:2b:
                    13:59:e5:1e:52:db:da:5b:f4:38:dd:e3:28:03:3c:
                    b8:6b:13:4e:9a:3d:f2:71:f0:a4:6b:1c:2a:81:10:
                    7e:dd:37:1f:7f:ab:5d:73:cd:e6:87:31:cb:98:ac:
                    ba:2d:34:dd:87:4f:14:46:fb:4d:a8:9c:50:7f:e2:
                    7e:cd:3e:e1:0d:ad:2c:0c:d3:d1:f6:db:76:14:7e:
                    7a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CA:70:BD:4B:8F:CD:B7:37:9F:95:36:45:5F:DB:56:D4:92:12:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3ec8cd34-c7e1-3d3e-b8e0-68879bd67551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:da:19:26:5b:d2:a4:74:02:72:90:f8:c2:97:41:7a:6f:26:
         d6:aa:dd:af:ef:4f:54:68:31:b7:04:78:ac:e8:ce:b7:6f:ac:
         af:80:68:21:39:1c:5b:a3:27:85:8a:61:a9:29:b8:8d:c9:f5:
         70:22:0a:70:48:71:f3:1d:3c:77:5b:5e:44:4f:45:b4:cd:4a:
         7d:2b:70:ca:37:6e:38:eb:53:61:8c:f6:f4:d1:97:c9:b7:9c:
         e7:98:1c:7a:ab:d2:bb:ce:d1:68:3f:da:37:f7:5c:aa:ca:4e:
         f3:f4:1f:c8:f1:52:58:5a:1f:13:80:71:08:e9:b5:f6:db:1b:
         87:55:28:38:df:b1:82:8d:b0:34:3c:79:b3:a8:cf:1a:14:da:
         d3:e0:6e:12:bc:38:e7:14:e8:c6:b1:48:e3:88:49:b4:1e:74:
         f6:90:85:33:53:20:00:33:54:29:0f:a5:62:84:6e:83:b8:04:
         da:2e:d3:9d:8e:5e:e8:94:a2:2b:bd:0f:ce:0d:c3:0b:c0:27:
         30:88:1f:72:e0:53:80:b2:a5:70:53:1a:05:45:35:84:76:a0:
         f6:3b:b1:61:10:9d:c5:3c:f7:ec:7f:bd:65:b9:22:2a:cf:8d:
         5a:c7:4f:47:80:b9:3c:42:ac:b1:7c:f7:bd:29:9e:26:f4:7d:
         39:74:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:04:07 2024 by rpki-client on console-ams.rpki-client.org