Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/6ed838b4-59bb-311b-8581-8bc75e2463c2.roa
File:                     6ed838b4-59bb-311b-8581-8bc75e2463c2.roa (raw, json)
Hash identifier:          SqFdPZxoTOOnOclSvh3+IA7IJbSMZ5KHvH6EUBoO864=
Subject key identifier:   A7:09:20:86:A0:E7:0D:E8:30:F3:AA:C3:60:FC:27:F7:3E:9B:37:96
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F432858454272C1FDD6E08EC4DFF3CE00
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/6ed838b4-59bb-311b-8581-8bc75e2463c2.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     11272
IP address blocks:        67.20.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c1:fd:d6:e0:8e:c4:df:f3:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=295795d1-1972-4d14-94bd-ac7b7d51476b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:fc:00:ff:9d:5e:55:a2:f8:60:0e:4a:ed:
                    eb:d0:3b:76:d7:8f:6e:d2:84:ed:78:f7:37:d8:48:
                    10:13:75:13:2d:75:b3:6c:69:08:90:e6:5d:89:17:
                    e5:88:90:e8:42:ce:5f:95:cf:8a:5e:1f:52:8d:64:
                    07:db:06:18:98:4c:74:1f:58:9d:89:4b:8c:00:3e:
                    3e:44:df:0a:3a:60:93:6f:08:f8:0b:7b:41:aa:d1:
                    34:16:87:e8:5f:67:dc:58:c1:2c:f4:63:7f:b5:a1:
                    f0:da:c0:d0:a8:c5:14:52:63:35:e7:06:fe:c4:e5:
                    34:2f:e7:a3:86:17:81:42:ba:80:b6:b1:4e:14:fa:
                    12:7a:de:f5:c0:ca:4c:a6:82:1c:cb:e6:71:92:c4:
                    b4:14:c7:de:6b:ed:c2:fd:8f:6e:9a:79:36:2b:c6:
                    7f:31:5e:ff:0f:b6:2a:c7:d4:65:78:5f:06:bd:c4:
                    32:69:0d:6d:f9:93:80:4d:a7:99:4a:ae:fb:64:a8:
                    4e:1d:ae:57:98:3b:e4:11:a5:9e:9d:72:97:9a:be:
                    e3:da:c9:1f:5e:90:61:2a:f3:47:49:95:e7:40:ae:
                    0a:69:00:94:eb:1e:61:f9:82:5c:25:ac:7a:b8:04:
                    9a:b2:5f:8b:72:53:e5:b7:ba:e0:72:cf:51:38:05:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:09:20:86:A0:E7:0D:E8:30:F3:AA:C3:60:FC:27:F7:3E:9B:37:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/6ed838b4-59bb-311b-8581-8bc75e2463c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.20.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:54:06:22:a1:2f:97:bd:31:b2:48:d1:db:77:2d:e7:52:eb:
         dc:0b:60:7a:45:95:45:a7:a7:ac:6d:f4:3c:11:ba:4a:f4:9d:
         59:05:ee:26:3a:53:f9:47:18:69:73:09:b1:64:b7:c8:76:85:
         bd:f6:63:63:27:d5:1a:81:f2:a5:3d:de:5c:42:17:78:96:52:
         d0:90:b7:b3:dd:99:f4:7a:af:2b:b2:6e:5a:84:f8:86:c7:f3:
         a0:ca:02:8f:85:1b:58:42:4e:1a:2f:5f:3e:0c:9f:d7:d7:3b:
         29:9b:d5:a3:84:9f:cd:c2:b0:4c:59:53:c6:b6:11:53:6c:80:
         98:62:58:36:56:82:7d:ba:ad:a0:fa:7f:49:25:90:30:34:61:
         58:ae:16:ad:46:06:09:83:3e:10:52:aa:e4:d7:aa:46:23:e7:
         78:27:e2:dd:01:90:ae:47:20:2d:a8:43:22:6e:0f:8a:66:be:
         7d:a8:b8:3f:db:e7:bb:43:c9:fe:52:8f:a0:34:c9:b9:32:95:
         c3:92:1f:54:9b:cb:85:a4:77:3f:c9:f8:26:73:0c:e0:cf:40:
         61:4f:e7:1c:a4:0f:a9:c0:3d:c4:4e:d8:c7:a8:14:15:d6:cd:
         29:44:3e:11:bd:17:20:62:ef:a1:c9:29:a3:ad:6a:b6:6c:f8:
         e2:01:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:30 2024 by rpki-client on console-ams.rpki-client.org