Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
File:                     dfc21920-33d3-36af-9d3d-f32de48afd1f.roa (raw, json)
Hash identifier:          UqsKSUh+/66j3THi0CAYd2BIGPakWpMXMLmNVFl3cO8=
Subject key identifier:   E5:45:3B:05:44:53:1C:E1:6A:F3:7F:D1:29:B8:AD:1A:8E:8B:D6:F0
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F43285845E45E7E73CD3A927651B1A660
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     138997
IP address blocks:        65.75.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:7e:73:cd:3a:92:76:51:b1:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=5af17bc2-e2c9-43e8-b905-0327100f64ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:df:23:1b:dd:ba:ca:45:6e:c6:89:47:88:
                    10:e4:f9:cc:1f:33:2c:f4:f6:d0:ab:19:f6:7e:18:
                    d2:f4:d1:a8:87:5c:04:4a:62:4d:15:02:d4:75:b5:
                    00:e4:01:d9:a7:22:bf:ac:25:f0:8a:e4:17:23:9d:
                    c2:64:e8:8a:18:48:4b:e8:e7:03:d5:fa:38:52:bb:
                    3b:f6:a3:2e:5e:7e:0b:cd:10:f0:a5:e5:59:82:cb:
                    c6:c4:46:0b:40:67:ca:4c:4a:e1:16:b7:40:ba:a2:
                    b9:08:2f:7a:21:f4:9f:88:77:23:13:ea:19:bc:21:
                    c1:0d:07:81:62:ae:8c:b5:05:59:de:50:fa:4b:8c:
                    bd:de:4d:30:65:6a:0e:24:2a:cf:30:24:00:0b:76:
                    24:b6:84:b4:8d:32:6c:39:f5:dd:5f:6d:8f:be:90:
                    27:af:f5:2a:43:b4:58:87:7f:73:3e:8e:bd:0d:7e:
                    3d:62:27:0b:3c:c4:6f:f3:6b:05:a6:4a:94:f4:63:
                    45:38:e9:53:af:f6:eb:40:e1:7c:38:a7:8d:f6:cc:
                    27:da:73:38:cb:bf:b2:46:f4:a3:84:b4:75:de:c3:
                    81:39:8b:1c:76:db:49:99:62:cd:e1:55:6d:02:42:
                    68:02:03:aa:3d:c5:fe:86:85:67:cd:9a:b7:4a:66:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:3B:05:44:53:1C:E1:6A:F3:7F:D1:29:B8:AD:1A:8E:8B:D6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:01:dc:9c:39:f1:26:0e:7a:bb:d6:c4:7c:20:02:09:52:
         e2:d1:5c:8b:cc:5b:7b:b8:2a:32:2d:89:f9:43:bc:4b:ff:ad:
         02:8f:6c:bf:94:a8:b3:6d:77:47:3c:2d:7e:4c:87:58:8f:4a:
         1b:ce:02:bf:3e:e2:e8:b9:82:42:ff:b1:83:75:5f:e3:43:3c:
         42:ce:63:ec:92:c2:d2:73:2f:9f:51:b6:4c:24:5c:a9:73:ed:
         2f:c7:0d:a3:42:c2:f2:d3:a0:db:f6:ab:1d:0a:6c:9e:78:d4:
         ed:b4:bf:bb:52:9c:85:d8:5a:f9:05:68:9b:18:f6:23:7b:dd:
         9f:f7:2f:24:be:6c:b2:9d:65:aa:cf:4b:83:34:a4:88:67:71:
         d8:5f:ad:7c:01:79:10:11:0d:69:ae:63:39:7d:03:00:88:75:
         c2:e8:02:33:a8:cd:33:90:84:f0:d7:99:d9:79:4e:59:f6:b0:
         bc:63:70:f1:1a:c4:37:34:3d:dc:c2:de:0f:a3:27:a1:71:e0:
         26:53:89:2a:10:0e:14:a2:cd:4e:f1:ba:1f:45:38:c2:3a:d1:
         d1:b8:e3:5a:84:64:0a:72:3d:d1:20:92:62:bd:04:34:dd:dd:
         1e:7a:b4:4f:77:78:23:64:6e:3b:b4:5c:f4:8b:07:a6:83:0b:
         3b:ad:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:35 2024 by rpki-client on console-ams.rpki-client.org