Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa
File:                     cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa (raw, json)
Hash identifier:          g3jccz+JRa6NFfQrMgzVIMhFn2GZXsqmjjNFWhhboCo=
Subject key identifier:   18:67:72:0A:4B:32:70:85:40:FE:28:44:45:91:11:AE:2A:9E:74:1E
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F43285844C2250EF1DEA8171E87900F00
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa
Signing time:             Fri 02 Feb 2024 14:00:31 +0000
ROA not before:           Fri 02 Feb 2024 14:00:31 +0000
ROA not after:            Thu 02 May 2024 13:00:31 +0000
asID:                     399150
IP address blocks:        52.128.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c2:25:0e:f1:de:a8:17:1e:87:90:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Feb  2 14:00:31 2024 GMT
            Not After : May  2 13:00:31 2024 GMT
        Subject: CN=0503d671-2483-4e3a-a950-b4923d0bc3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:15:26:60:0a:47:d1:56:4d:9c:2b:b6:e0:
                    91:51:bf:7b:6d:b7:31:34:75:47:28:e8:cf:ec:70:
                    06:38:44:d2:9b:4d:59:c9:a4:b4:1a:36:3f:bf:2c:
                    f3:aa:61:56:e5:1c:7e:23:ba:20:31:f4:fe:eb:19:
                    85:02:3e:aa:47:ec:ce:f3:f0:eb:32:09:97:22:04:
                    65:ed:0c:c4:ea:a5:b9:67:7a:87:b7:8b:c4:b5:14:
                    c3:90:52:ac:90:c8:2a:62:9b:00:34:c1:4d:2a:f6:
                    6d:0e:95:ae:5b:15:1b:1a:4a:4f:fc:74:24:74:a1:
                    b4:ff:3e:83:76:ea:0e:68:65:94:95:3a:87:e3:25:
                    3b:37:34:87:84:19:42:4e:59:cf:df:36:68:fd:54:
                    1e:ed:e5:37:3e:eb:8d:42:f4:98:ab:ad:b5:07:01:
                    a7:4e:3b:5f:3b:01:19:cf:9c:e9:aa:0b:b5:dc:2d:
                    d0:37:31:b9:6b:ac:ae:83:8b:85:4b:ac:b7:82:22:
                    50:84:35:ec:7c:d3:1f:76:00:df:f7:75:ef:2f:76:
                    7b:83:b4:5e:19:2d:50:05:1a:69:1b:3f:42:df:56:
                    87:d7:e2:c0:6b:ff:ef:1f:c8:35:93:45:5b:c4:65:
                    aa:1b:0d:ee:c3:78:74:ac:bb:86:9e:b6:a7:a2:51:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:72:0A:4B:32:70:85:40:FE:28:44:45:91:11:AE:2A:9E:74:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:b0:b8:db:79:2f:92:3e:a5:8c:ed:b6:76:9b:6a:e0:f5:36:
         35:df:21:9e:67:71:e3:87:1f:9a:12:54:6a:7f:f2:be:37:e8:
         4a:de:45:1e:14:95:76:bd:78:f9:6a:b2:29:70:ed:ce:b1:4d:
         45:4e:d1:cf:62:48:be:b7:9b:60:86:fe:6c:db:04:9c:2a:8b:
         c2:4d:35:6b:92:c4:51:2a:2c:8d:95:d8:1b:37:54:a7:e5:b7:
         15:0c:ef:c4:97:f9:23:95:b1:d0:29:65:ce:73:23:b1:43:6f:
         cb:cf:73:61:27:63:61:7a:4a:fa:05:37:32:09:ec:f2:f4:57:
         a9:4c:f5:58:bd:11:84:37:62:3e:61:fc:ee:13:19:28:27:ba:
         b1:b5:0c:8c:d6:e2:a7:48:de:b4:fb:c0:a0:71:d7:df:25:72:
         83:f8:d3:69:38:9b:20:31:d1:32:48:b6:57:3b:6e:5a:af:07:
         6f:78:ef:26:9a:1d:28:39:79:9d:12:1a:03:cc:c6:b9:83:90:
         89:58:51:bf:dd:7c:8b:76:18:95:15:81:19:33:a7:7c:1c:a8:
         20:e1:15:8d:39:7a:11:87:69:98:03:8d:8f:ad:37:fb:45:a0:
         49:dc:e0:70:23:43:37:04:ab:3c:9f:ae:91:30:8c:15:3e:29:
         66:ca:fd:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETCJQ7x3qgXHoeQDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm
MDk0MB4XDTI0MDIwMjE0MDAzMVoXDTI0MDUwMjEzMDAzMVowLzEtMCsGA1UEAxMk
MDUwM2Q2NzEtMjQ4My00ZTNhLWE5NTAtYjQ5MjNkMGJjM2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvAVJmAKR9FWTZwrtuCRUb97bbcxNHVHKOjP
7HAGOETSm01ZyaS0GjY/vyzzqmFW5Rx+I7ogMfT+6xmFAj6qR+zO8/DrMgmXIgRl
7QzE6qW5Z3qHt4vEtRTDkFKskMgqYpsANMFNKvZtDpWuWxUbGkpP/HQkdKG0/z6D
duoOaGWUlTqH4yU7NzSHhBlCTlnP3zZo/VQe7eU3PuuNQvSYq621BwGnTjtfOwEZ
z5zpqgu13C3QNzG5a6yug4uFS6y3giJQhDXsfNMfdgDf93XvL3Z7g7ReGS1QBRpp
Gz9C31aH1+LAa//vH8g1k0VbxGWqGw3uw3h0rLuGnranolFezQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhncgpLMnCFQP4oREWREa4qnnQeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi
NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvY2Q4YmQwYWUtZTUxZi0z
MDhkLTllZjktY2I5M2FlODcyYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy
MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk
ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1
NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+wuNt5L5I+pYzttnabauD1NjXfIZ5nceOHH5oSVGp/8r436EreRR4U
lXa9ePlqsilw7c6xTUVO0c9iSL63m2CG/mzbBJwqi8JNNWuSxFEqLI2V2Bs3VKfl
txUM78SX+SOVsdApZc5zI7FDb8vPc2EnY2F6SvoFNzIJ7PL0V6lM9Vi9EYQ3Yj5h
/O4TGSgnurG1DIzW4qdI3rT7wKBx198lcoP402k4myAx0TJItlc7blqvB2947yaa
HSg5eZ0SGgPMxrmDkIlYUb/dfIt2GJUVgRkzp3wcqCDhFY05ehGHaZgDjY+tN/tF
oEnc4HAjQzcEqzyfrpEwjBU+KWbK/T4=
-----END CERTIFICATE-----
Generated at Fri Apr 19 15:18:36 2024 by rpki-client on console-fra.rpki-client.org