Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/3f92065a-b3a0-372f-8c62-07e06fdd990e.roa
File:                     3f92065a-b3a0-372f-8c62-07e06fdd990e.roa (raw, json)
Hash identifier:          8pMJXB4w9QcdJv12ey/kOLNyhmwdegeq6ctwy2vsW4c=
Subject key identifier:   FB:8C:0F:CF:40:16:EB:D2:3A:D1:4F:EB:82:CC:63:FB:1F:3E:3D:AB
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F43285844C2250EAADB8FEDE965D1ED00
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/3f92065a-b3a0-372f-8c62-07e06fdd990e.roa
Signing time:             Fri 02 Feb 2024 14:00:31 +0000
ROA not before:           Fri 02 Feb 2024 14:00:31 +0000
ROA not after:            Thu 02 May 2024 13:00:31 +0000
asID:                     398712
IP address blocks:        52.128.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c2:25:0e:aa:db:8f:ed:e9:65:d1:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Feb  2 14:00:31 2024 GMT
            Not After : May  2 13:00:31 2024 GMT
        Subject: CN=02a06f5f-db88-4a9b-9d26-3419c7ca817a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:af:4c:66:47:89:39:22:1c:76:c6:ed:76:
                    c1:9c:19:2d:83:1e:93:28:34:4d:00:9f:56:d2:43:
                    bb:2a:13:58:28:7d:c2:cd:ee:04:c5:9d:c4:22:81:
                    9e:6b:58:b9:69:58:51:b6:94:3f:d2:a9:59:03:b5:
                    bf:6e:3b:d3:73:37:9e:ec:80:7f:70:f6:ed:88:61:
                    de:c5:87:cb:8c:5c:8a:b1:10:d5:2d:db:9d:33:b5:
                    e9:dd:7f:cc:4a:1b:fa:a1:c9:23:c5:a5:76:8a:61:
                    a8:47:f0:0c:6c:8c:bf:85:d4:aa:54:c1:55:50:85:
                    37:98:cc:f1:d4:7c:af:a8:b3:b1:19:a6:59:57:d2:
                    b2:f7:ca:8f:43:74:23:5e:18:b3:12:45:12:1c:e1:
                    f7:a7:74:43:c1:9e:92:4c:e0:a0:ee:ee:eb:01:77:
                    b2:dc:ed:6f:e9:65:86:05:f0:a1:d2:b6:4b:fe:ce:
                    c1:83:f6:6b:ff:03:2f:33:cc:cf:7f:88:5a:c3:b6:
                    0e:70:25:a0:6a:5a:ad:f8:07:5e:f1:2f:4d:31:07:
                    6e:57:91:a8:db:ca:93:24:bc:10:c1:99:02:b6:97:
                    6e:48:ab:0e:d1:59:e5:01:0c:df:c4:4d:90:d1:89:
                    5a:86:d9:07:40:ea:b4:7a:ad:49:c1:0c:84:1e:a6:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8C:0F:CF:40:16:EB:D2:3A:D1:4F:EB:82:CC:63:FB:1F:3E:3D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/3f92065a-b3a0-372f-8c62-07e06fdd990e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:9e:0c:52:5c:e6:ce:64:63:5d:d6:80:f0:51:af:c2:07:
         d2:c4:f8:bb:f3:95:67:af:2f:43:ce:ef:ec:dd:9a:46:c3:31:
         68:62:51:b6:a4:50:3f:c4:74:e8:98:bf:7b:a6:f7:d4:83:4e:
         e6:60:dc:45:bb:59:ca:a3:c0:67:96:9f:9a:d8:30:dd:07:e9:
         30:1b:ec:67:0c:4e:6e:76:b7:5b:94:a2:64:ef:55:5a:c0:15:
         7b:e7:98:c4:88:1c:1c:d9:cd:8a:69:d5:b4:0c:44:55:47:59:
         f7:70:83:95:ac:4b:71:44:5a:4a:2c:ce:6f:65:da:c7:05:95:
         67:50:13:34:81:f6:58:88:21:ed:ab:c4:10:ba:11:0d:ae:b0:
         93:e9:21:c5:d2:b6:26:70:ad:c9:a8:67:d9:3a:9a:c5:53:e2:
         0d:5f:c3:63:62:09:84:8a:23:7f:69:ac:46:e9:2d:e5:df:12:
         3c:11:ba:e1:41:74:1b:48:dd:1a:70:fc:47:46:e3:b4:0c:ab:
         b9:c1:aa:87:95:ac:5c:ce:db:85:f6:52:16:4b:bb:00:88:7e:
         22:e1:56:39:6b:33:1f:15:83:ae:60:f4:ca:0d:30:01:34:d3:
         3e:32:43:64:6a:5f:2b:4d:56:ea:76:b7:1c:da:68:56:97:cd:
         82:d2:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:19:49 2024 by rpki-client on console-ams.rpki-client.org