Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa
File:                     2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa (raw, json)
Hash identifier:          b2FYuxc8FvsxaCd6SzwlQkdQDqvQLYyz8adIGT9R84U=
Subject key identifier:   90:DF:F4:4F:3F:EF:48:68:6B:EF:45:6D:3C:A3:C7:E2:EC:EF:3B:2D
Certificate issuer:       /CN=95cc1176-f33c-4294-a79a-4ace8f16f714
Certificate serial:       010D0C9F4328584571E86382FC0BF7F9F6F82740
Authority key identifier: 5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        52.119.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:63:82:fc:0b:f7:f9:f6:f8:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cc1176-f33c-4294-a79a-4ace8f16f714
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=8e2781de-3b0f-431d-9a52-0b351a50711c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:2b:07:c1:c8:5e:56:65:59:6b:dc:59:79:
                    45:01:d1:a7:4a:6f:e9:6b:16:ab:3c:0d:55:9e:ed:
                    44:15:f0:9e:fd:b4:c5:80:ef:54:64:87:a6:5a:30:
                    a9:17:75:b8:82:2a:17:47:9b:e8:f3:0f:ea:bc:6c:
                    dd:e3:49:a1:36:2b:6f:fe:cd:93:6d:ea:27:d4:49:
                    ac:7b:88:fb:15:4f:be:f7:d2:53:e1:a3:6c:d4:cd:
                    2b:29:15:32:39:9f:ea:a8:da:19:3a:8c:60:96:28:
                    28:a9:4a:19:77:95:6d:e8:2b:1d:8b:58:e2:ec:d9:
                    8e:6e:66:63:10:65:93:b9:54:cc:32:88:ad:c6:53:
                    2d:31:89:29:c7:83:38:29:ae:2e:b9:e5:12:64:3e:
                    35:e4:ee:ea:32:3a:57:80:ff:8f:74:5c:26:ad:ec:
                    8c:43:04:7e:d5:a3:ce:9b:ba:6d:3e:97:bb:d0:fb:
                    70:4f:4e:b6:67:d5:f9:02:41:09:4e:08:f6:88:0a:
                    0c:6c:d6:ab:e2:7e:78:40:8b:2c:0d:71:29:19:0d:
                    49:c6:be:7b:ce:37:36:ef:d3:9a:f2:62:87:b9:51:
                    2f:de:81:4f:54:03:dc:03:cc:90:43:a4:f5:30:b2:
                    fd:60:a4:8b:c6:f7:0e:0a:84:dc:b5:37:19:51:7a:
                    1e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DF:F4:4F:3F:EF:48:68:6B:EF:45:6D:3C:A3:C7:E2:EC:EF:3B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl

            X509v3 Authority Key Identifier:
                keyid:5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:47:3b:f4:bc:77:3b:cc:c1:e6:50:0c:ef:53:0c:54:ed:
         96:34:6e:30:2b:64:60:3b:89:73:f4:15:7d:f3:70:52:1d:98:
         a3:10:c8:e0:28:d5:95:8c:a2:82:34:50:bc:5c:31:18:82:87:
         a1:fd:b4:74:53:cc:d0:48:25:25:0d:fd:58:47:5d:38:31:66:
         cc:72:01:e2:a2:4c:7e:92:39:55:aa:68:90:f5:0a:0c:c2:0a:
         92:5d:1a:1a:a0:b3:27:16:87:ba:be:5a:24:6c:c9:0e:d1:ac:
         ee:66:bd:66:0c:a8:2f:53:31:37:05:a7:98:6b:61:1b:bf:59:
         9b:0f:03:c5:e5:12:cf:9a:b6:12:14:b4:e8:24:5b:52:05:fc:
         bd:37:52:6d:09:41:64:95:5d:57:80:2c:b5:b5:ee:ce:b4:36:
         ce:e5:81:77:80:70:32:c2:e3:1c:e7:24:a0:94:c7:7d:42:ef:
         6f:67:27:80:23:11:8f:5a:d5:db:d6:c9:22:f0:f1:c6:a1:ec:
         6d:dc:1a:cd:47:1e:92:8a:ce:8c:06:77:f5:1b:bd:9f:6e:8e:
         c8:0c:ac:5f:ac:cd:ed:34:8c:19:82:dc:5f:d9:53:ed:e1:72:
         51:2c:47:a5:88:e2:cd:62:ad:5f:d0:7d:4f:6c:3a:51:2c:60:
         cf:4b:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 21:51:44 2024 by rpki-client on console-ams.rpki-client.org