Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/080c7add-272b-3dbb-b616-858c6e61e546.roa
File:                     080c7add-272b-3dbb-b616-858c6e61e546.roa (raw, json)
Hash identifier:          B1fkiyergEfwAEBsUX5mnvAhHNuIQI1NJwY/z1OvnlA=
Subject key identifier:   04:72:EB:85:E5:61:5F:74:42:A6:A6:D6:A6:26:2E:31:F4:7F:87:3E
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858459D2DFBA471891943AAD98680
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/080c7add-272b-3dbb-b616-858c6e61e546.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        72.20.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:fb:a4:71:89:19:43:aa:d9:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=59c46662-c445-491d-a8e3-7bb97aefb0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:11:fa:ef:e6:4b:ce:9b:4e:e1:35:97:76:
                    aa:09:b3:28:13:1f:c5:ea:1d:6b:52:60:10:0d:9b:
                    87:75:96:87:bf:3b:20:1c:74:30:5b:6a:bd:94:2c:
                    db:78:9d:c7:ca:74:61:62:4d:6d:12:11:79:f4:27:
                    45:40:6e:65:40:44:e0:bf:92:c0:a2:19:c6:23:23:
                    d2:7b:df:80:b3:dd:55:ee:8d:0f:ea:1a:dd:b4:9c:
                    d6:5c:c0:0c:1a:57:33:7c:7f:ac:33:d0:54:5b:1b:
                    2c:1a:fb:1b:bc:9b:9d:8a:60:8a:70:60:1d:c4:80:
                    38:1e:83:32:e2:86:9b:f2:fe:f5:02:b9:86:b2:64:
                    67:58:6b:44:e1:6b:68:ad:6e:89:94:8b:a0:c2:ec:
                    67:d3:49:6a:7a:06:b6:93:02:c7:96:72:b4:68:0e:
                    98:e9:a0:83:fa:17:f5:ba:ac:04:1b:82:1a:84:39:
                    79:76:92:55:89:c6:f0:35:53:18:53:4f:2e:4a:65:
                    19:6a:a3:fd:a0:5e:cc:6b:dd:90:1b:a6:28:08:35:
                    1c:3b:b4:05:06:19:98:ac:f1:9a:5d:45:6c:1c:0b:
                    77:71:a9:e0:3b:96:1f:60:88:06:1d:85:58:67:e1:
                    de:27:12:4d:3d:1b:31:c6:9c:f0:9c:4e:9d:af:a8:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:EB:85:E5:61:5F:74:42:A6:A6:D6:A6:26:2E:31:F4:7F:87:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/080c7add-272b-3dbb-b616-858c6e61e546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:86:6f:9a:d7:b0:ee:17:3d:8f:a1:eb:31:52:9d:25:61:b9:
         a7:63:ca:8d:b0:ce:4b:71:e0:0d:3f:b1:87:86:1c:46:43:18:
         d4:6b:33:41:86:b0:00:99:52:19:e9:e9:cd:4b:ac:92:e8:08:
         4c:38:b5:23:d5:69:26:74:cc:b3:2e:03:85:66:0d:f7:bb:da:
         79:70:a5:d8:11:1d:c8:03:bb:b9:d2:85:5c:5c:73:fc:43:bf:
         c7:14:90:dc:da:21:71:3a:24:e6:d4:33:03:5e:ea:2b:b7:b2:
         69:ef:36:ed:cb:53:3f:bf:53:32:e6:49:6e:88:ad:77:cc:dd:
         86:7f:42:04:ae:41:80:c2:6d:d2:24:fc:70:7c:bd:a9:a5:ad:
         be:01:c5:bd:66:58:b2:30:56:ce:89:3b:4a:b7:e1:e4:63:b0:
         98:58:5e:a6:72:07:03:cb:3a:3b:a0:ec:18:96:11:b0:bb:bb:
         6c:c7:99:67:74:b4:b0:29:b5:47:fa:4b:37:6e:d1:f1:ad:61:
         cb:f2:3e:39:dd:81:20:88:ed:4b:19:f4:01:59:54:f0:d9:36:
         0b:41:bd:c2:e1:1a:84:3f:f5:eb:9b:88:9f:84:40:d5:90:e4:
         9d:1e:46:d0:e9:ac:45:96:ce:00:21:73:73:79:5c:82:2c:fd:
         61:be:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:38:54 2024 by rpki-client on console-fra.rpki-client.org