Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa
File:                     094143c8-ff7f-3f51-8461-0fce2db8fe81.roa (raw, json)
Hash identifier:          6OY4X5iBwbmvgHrJiVZl73EUjozKwQI8JMAXbdhRrmU=
Subject key identifier:   2F:5B:5E:2E:C2:A3:25:33:57:28:4D:F0:9E:EA:3A:D8:32:B1:90:F8
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F43285845A15E1496742703D0DDCF1500
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     399150
IP address blocks:        52.128.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:14:96:74:27:03:d0:dd:cf:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=be5fe748-bcf1-4a03-aa52-a2204c425925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:88:e1:57:b4:52:bd:db:0c:d5:17:26:5b:
                    a1:b6:73:f9:66:b4:51:2e:a7:c3:8d:1b:24:b6:e0:
                    cd:57:d0:4f:ab:2f:66:95:1c:d3:d8:35:a9:4d:40:
                    9f:75:31:04:7d:b5:98:45:00:3b:c3:6e:a6:e7:1d:
                    3d:16:b6:e5:d3:f3:77:51:7f:9a:90:fa:0d:7b:3d:
                    96:a0:cc:0c:b4:21:87:50:b5:7a:74:67:cb:57:c5:
                    54:f6:47:c7:5e:53:97:f4:0c:57:6b:0d:70:10:c5:
                    cb:bc:7d:95:88:12:d1:d9:be:ca:f1:9b:2a:32:90:
                    2a:fe:26:80:ca:05:62:7c:86:2f:2f:e5:7c:a0:14:
                    5f:f5:8b:e2:bc:7c:b2:ac:2c:f7:af:c3:0a:64:2a:
                    ab:68:a3:65:86:c4:1e:10:2f:ea:55:ce:6d:55:40:
                    82:90:af:e0:df:34:50:96:95:81:75:1c:c0:dd:ef:
                    d0:1f:5b:7b:f3:45:a4:aa:b9:ee:5c:60:30:cd:2f:
                    0a:df:24:de:6b:66:fc:dc:36:2f:0f:e7:00:0b:66:
                    63:9f:c6:e4:5e:09:81:67:0f:dd:61:7c:87:95:0a:
                    ef:bd:b6:8f:90:f2:01:0f:c3:88:77:95:08:d8:b3:
                    0a:8c:01:2a:bf:d8:8f:8d:48:cb:cb:4e:bb:e4:40:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5B:5E:2E:C2:A3:25:33:57:28:4D:F0:9E:EA:3A:D8:32:B1:90:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:41:77:fb:54:73:ae:a3:c8:2e:01:2f:34:e0:77:08:17:f0:
         c5:82:ba:ab:14:64:b1:cf:ce:91:6d:40:4b:44:a9:d3:70:4b:
         0e:4f:3d:d9:59:98:5a:c2:41:b5:80:e7:35:78:b2:10:d9:a6:
         cd:8e:aa:a2:23:62:0d:de:3c:2a:71:73:79:41:38:c9:a5:a1:
         83:b5:9d:54:a6:d4:7b:9a:80:b6:85:88:a6:70:60:7f:e0:fd:
         ac:e3:dc:45:41:4b:8c:57:29:a4:26:bd:f1:fc:3d:17:2a:14:
         25:e1:8c:cb:3b:e7:52:d5:26:d9:21:00:aa:cd:df:13:c6:78:
         b2:3a:02:6d:c9:7e:68:ce:c1:94:d7:b9:a8:d1:96:6f:31:d2:
         8c:b8:b4:18:5d:ac:04:ab:94:63:26:d9:90:c5:c3:e7:8b:ef:
         b4:24:0f:26:63:b0:63:c9:82:83:83:40:ff:a6:78:37:0a:12:
         fa:ad:00:24:70:82:69:85:1d:e5:db:3e:1f:25:b7:57:3c:72:
         b1:b9:ae:3b:fb:d9:de:36:63:77:0a:98:9b:22:73:b5:8e:d5:
         28:e8:c9:ae:14:e0:99:46:02:d8:ac:3a:95:ee:41:c9:f4:08:
         2d:c2:6f:09:1a:53:2f:a4:29:1f:06:80:d7:a7:df:a6:83:d7:
         b0:62:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:14:00 2024 by rpki-client on console-ams.rpki-client.org