Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
File:                     36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa (raw, json)
Hash identifier:          UsdaqHg/EEk2U/bhMRJOST8/vuedRdf9Xr6/p2rhhao=
Subject key identifier:   61:5A:3E:D8:9B:F0:CE:3D:97:DC:11:7C:E4:88:32:86:54:7E:03:CD
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F43285845A15E1429FFFB9D542383685C
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     398712
IP address blocks:        52.128.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:14:29:ff:fb:9d:54:23:83:68:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=76a447cd-3643-45f3-8699-5f431b7b353b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:67:09:9d:9c:7b:38:81:22:2d:52:1b:0a:
                    ff:3a:81:57:1a:f3:9d:4f:eb:ae:e6:ac:b8:19:28:
                    a7:38:2f:67:66:56:16:1a:04:6b:6e:40:4e:4c:25:
                    99:ec:88:a9:fb:d5:77:b2:29:a2:98:95:c3:a0:39:
                    97:c7:b6:86:02:9a:3e:a5:7b:ad:c6:4d:03:85:2f:
                    86:3b:45:f0:9d:b5:fe:2c:86:b1:2a:07:ad:ff:f9:
                    36:cc:37:3a:55:99:10:e9:79:27:ea:11:34:40:1f:
                    0e:f8:7c:10:6e:7a:45:1b:d5:7c:0d:99:cb:c7:50:
                    52:78:1f:48:69:e8:b1:13:6f:7b:d1:34:30:db:ad:
                    22:71:64:ba:19:fc:dd:2d:cc:4b:c5:12:66:3d:bc:
                    fb:a9:23:06:7b:ae:52:d0:84:4f:92:3a:71:9b:64:
                    8e:8f:c0:79:22:fd:cf:6f:e4:2a:99:c4:56:29:fd:
                    f1:c7:0f:7b:81:c6:8c:e1:bf:3e:57:37:36:21:40:
                    fe:79:13:4b:9c:ee:c5:38:6d:43:be:53:7c:fb:5c:
                    eb:a3:18:02:58:d5:a7:01:9a:bb:43:65:06:38:7d:
                    9d:42:c7:e9:e0:d5:23:e6:5b:02:57:15:25:42:f4:
                    9e:28:fc:c1:40:60:88:a9:ed:70:83:30:a4:37:f8:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:3E:D8:9B:F0:CE:3D:97:DC:11:7C:E4:88:32:86:54:7E:03:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fd:0b:2e:ab:30:76:51:ac:15:33:46:07:03:25:9a:0b:78:
         80:4c:92:d2:8e:13:eb:4a:63:4e:b1:e0:25:3a:62:40:0e:cb:
         d7:4d:42:0d:ab:08:a7:3f:4b:09:4c:87:35:ab:b9:84:5b:b0:
         0d:c9:50:6b:d8:e1:2f:fe:3f:38:a1:b5:92:f9:96:5d:2c:c6:
         73:09:39:a5:2b:a0:dc:9e:18:8b:02:31:43:03:c9:37:7f:6e:
         d2:40:b8:3e:63:bf:02:5b:ca:17:fe:86:1a:ab:ea:74:a0:0a:
         6b:df:bc:5f:b3:b3:1e:41:f0:0f:e8:a7:e0:9b:38:85:d2:72:
         5e:d4:ad:5b:2a:24:0a:56:01:ed:5b:2b:ba:e6:01:50:fc:9e:
         99:47:11:c4:a4:82:ff:14:65:bf:17:1f:0e:0f:d0:d8:cf:c9:
         a3:58:5c:00:13:e3:c1:a4:fa:c3:44:8e:c5:f9:77:2b:e8:6b:
         e3:62:db:74:c5:44:05:2f:02:a1:fa:c1:90:29:52:b1:4c:ae:
         bf:08:14:f3:24:c4:1c:ff:69:86:29:3d:be:43:20:b8:0c:ed:
         18:dd:ee:84:29:aa:cf:4b:5e:ca:03:58:05:07:63:ef:d5:4e:
         3d:c1:12:f8:11:8d:59:e1:3f:ba:e5:ad:a6:b4:87:65:ca:05:
         e9:6b:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:39:57 2024 by rpki-client on console-ams.rpki-client.org