Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/198cc7a9-84af-33b6-aeb6-7a682edd03c7.roa
File:                     198cc7a9-84af-33b6-aeb6-7a682edd03c7.roa (raw, json)
Hash identifier:          MbQsEtuflQFjRoyULhKVZl/KKoxF//jYQ4ZdvFlbipY=
Subject key identifier:   2E:2A:B9:7C:71:E9:07:74:32:D8:DD:56:44:97:48:32:86:ED:2D:D0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285841D629EF4D1B42759AC9F62400
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/198cc7a9-84af-33b6-aeb6-7a682edd03c7.roa
Signing time:             Tue 09 May 2023 12:42:12 +0000
ROA not before:           Tue 09 May 2023 12:42:12 +0000
ROA not after:            Sat 09 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        52.122.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d6:29:ef:4d:1b:42:75:9a:c9:f6:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  9 12:42:12 2023 GMT
            Not After : Mar  9 05:00:00 2030 GMT
        Subject: CN=fecf337d-60a1-48f0-8afc-a2792795dad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:8a:da:cb:41:88:9f:2d:4c:20:b9:a3:20:
                    38:40:d0:71:6c:89:80:71:34:24:5f:5d:8c:a8:cb:
                    f5:ab:9d:37:a5:be:58:66:7b:16:79:96:f8:08:e2:
                    03:e8:f4:f2:a9:10:ba:b9:84:c6:d5:93:8b:9d:ba:
                    67:28:80:af:ce:7c:8b:d9:dd:06:35:7e:d9:d6:c2:
                    aa:c1:d0:c1:f1:14:6e:38:3e:c1:f7:9a:df:4a:23:
                    63:e6:28:29:72:87:14:60:a3:e5:36:61:3b:28:f5:
                    50:89:4e:ff:75:b2:5f:4b:24:18:30:b7:8a:14:ea:
                    d7:fa:86:d4:ed:1a:88:cd:5d:b1:c3:27:10:fd:ea:
                    41:fa:97:34:51:4a:df:23:d9:ad:50:0f:ef:00:d6:
                    7c:ff:51:23:7d:3c:2d:3e:95:ce:23:82:2c:0b:4a:
                    79:d2:92:aa:47:2c:8e:2b:ec:45:1d:96:15:a9:75:
                    67:e4:be:f0:8f:64:35:85:1f:0a:81:45:9e:3e:c2:
                    43:67:c7:9b:4d:dd:b2:35:b4:71:44:b7:52:53:ac:
                    02:52:3c:7e:06:fb:a7:e7:a7:01:68:f5:ce:0e:b7:
                    b3:ab:8e:2e:e3:43:c6:9e:23:07:1d:c8:11:7e:91:
                    ab:98:11:39:ff:42:8a:6a:e4:6d:d1:9c:17:fb:a5:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2A:B9:7C:71:E9:07:74:32:D8:DD:56:44:97:48:32:86:ED:2D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/198cc7a9-84af-33b6-aeb6-7a682edd03c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:d4:71:d8:5f:f4:3f:1e:56:33:cb:87:bf:37:9e:e0:ef:
         e6:8a:9c:a8:fb:f0:18:b6:60:97:63:be:de:e7:5f:18:89:d9:
         81:50:1f:4b:19:94:db:2a:a2:c6:d5:50:11:b2:14:78:2d:55:
         05:21:cf:01:9b:64:35:2d:6c:84:0b:68:75:40:4a:ee:06:02:
         fc:db:5d:c3:6c:25:d2:0f:94:53:2e:18:d1:b7:3c:2b:6c:6f:
         57:37:d3:27:f0:35:cd:69:95:27:ed:f4:75:a8:5a:5c:ba:4c:
         72:6d:b5:04:05:c0:77:ff:93:7e:6b:6b:2b:c4:d3:a7:ec:a6:
         28:b3:d9:50:9b:54:28:56:53:ad:ef:78:a2:b4:56:17:1a:6a:
         85:6c:c5:85:10:bb:44:92:42:21:b4:e4:56:89:ce:a6:82:fd:
         48:03:d5:eb:e4:98:1b:a1:95:7e:f1:7f:f8:c5:b4:8b:a9:27:
         09:2a:3b:b3:8e:89:f3:c1:83:91:27:1e:3d:bc:ac:d4:58:74:
         90:27:66:32:67:89:f9:bc:bd:3a:ed:8b:b7:6d:96:ca:23:2d:
         81:b3:8f:56:6c:bf:81:6a:d3:1a:07:3d:21:d2:3c:f4:18:a3:
         10:32:fe:e4:aa:8c:ad:d4:da:19:ba:93:19:54:8f:63:13:f3:
         4f:48:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:10 2024 by rpki-client on console-fra.rpki-client.org