Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa
File:                     f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa (raw, json)
Hash identifier:          1AMkwL4ZT5hIAHWUI8gOk3Tj9VeH5L6Y2cphAStv8ls=
Subject key identifier:   D9:A2:AF:2D:0A:61:1B:FC:8B:3D:F0:2D:B6:DA:E8:CA:81:EE:EC:56
Certificate issuer:       /CN=95cc1176-f33c-4294-a79a-4ace8f16f714
Certificate serial:       010D0C9F4328584571E8636DD9C95C5D8D3B6900
Authority key identifier: 5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        52.119.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:63:6d:d9:c9:5c:5d:8d:3b:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cc1176-f33c-4294-a79a-4ace8f16f714
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=fbbbfa1a-c47d-4e12-8fdb-938cb5411569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:f1:0e:66:e9:5a:8d:cc:39:89:b8:15:58:
                    9c:a5:ac:04:78:7b:52:9a:99:15:9d:52:02:99:2a:
                    8b:3c:b5:85:a4:32:52:1b:0e:3f:22:20:b2:30:b9:
                    11:bb:42:af:f7:8c:36:02:e9:0b:59:d3:e5:d5:d3:
                    18:28:75:4d:ad:57:c3:7a:45:3f:6f:50:fb:a5:46:
                    89:6c:30:36:5c:aa:f2:02:97:35:cf:6e:35:45:7f:
                    42:ad:fe:27:a7:c5:32:f7:92:03:fe:6e:5c:ff:fc:
                    49:96:63:2d:88:d6:f2:fa:96:4e:f4:83:c8:a3:6a:
                    04:9a:cf:ec:aa:9c:7d:86:2a:2b:e8:65:9c:7d:ce:
                    fe:96:6a:87:18:8b:24:5c:4a:66:e5:7d:05:03:8c:
                    1e:50:83:64:9c:26:85:ad:15:32:c9:e9:0a:fd:87:
                    f8:2b:fb:ea:cc:98:1c:ed:40:a1:c5:94:2f:12:9f:
                    fc:42:9c:80:4c:a0:87:23:de:9b:ee:ae:0a:1f:e1:
                    aa:f0:58:14:0e:7f:c9:71:40:3c:7c:94:de:5d:86:
                    24:b8:08:68:67:97:66:04:04:e2:85:1f:89:f4:e5:
                    29:89:c4:fc:d4:34:6c:57:d3:22:1c:c7:34:60:62:
                    a4:9f:15:cb:5e:d6:b7:7d:13:96:69:1b:ae:a9:63:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A2:AF:2D:0A:61:1B:FC:8B:3D:F0:2D:B6:DA:E8:CA:81:EE:EC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl

            X509v3 Authority Key Identifier:
                keyid:5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:84:b2:68:ee:19:b8:be:81:5e:f3:16:4a:44:d4:ec:55:
         e9:04:10:54:2d:8a:37:53:22:cc:8c:e9:f7:ae:10:19:76:4f:
         18:98:76:9e:f1:ea:49:c4:47:af:94:fa:f0:a9:7a:22:b5:2f:
         eb:76:71:99:ea:16:31:f4:d3:a5:fb:99:43:3e:b1:3c:5e:06:
         6a:93:e7:af:37:6a:1b:73:44:19:60:e2:80:dd:6f:f1:ee:9e:
         24:ab:20:07:d1:ac:1e:82:9f:f2:e2:4b:e7:bc:f9:c9:f0:43:
         f8:98:fe:34:92:c1:07:25:bc:d6:cc:03:56:6d:c4:c3:12:29:
         49:29:3f:40:ff:5a:99:fe:d6:85:9d:36:15:e2:05:d7:da:b3:
         dd:7f:e6:51:e4:58:f7:34:f0:78:ce:b6:b0:d9:e1:01:df:69:
         76:a2:b6:34:70:bb:9e:73:c9:77:36:d0:1e:02:03:e0:00:75:
         a1:c6:d8:a7:91:ea:35:89:88:49:44:f0:50:39:dd:0a:19:cf:
         72:6e:91:07:62:53:80:95:b4:b9:92:91:08:7d:74:5d:8f:9f:
         3f:66:a5:57:4b:ea:e3:f2:dc:1a:66:d0:85:26:12:27:6c:07:
         41:be:90:cb:4e:73:20:7f:27:7e:a8:43:64:42:1c:06:c5:0d:
         19:2a:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:21:52 2024 by rpki-client on console-ams.rpki-client.org