Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
File:                     6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json)
Hash identifier:          1cLouCkf3IyKBJeMfnlrwK348thwITwxV6VoldfP7FI=
Subject key identifier:   2B:0C:A5:8C:D8:03:25:1C:96:98:F3:4F:9D:61:D9:E9:F6:88:0C:70
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858475A763E56754ED8F0D68F88C0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     22765
IP address blocks:        72.20.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3e:56:75:4e:d8:f0:d6:8f:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=b757c408-1f41-4c73-9f28-1da383afca6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f7:2d:f3:30:08:83:61:b9:17:b7:b7:e7:6d:
                    97:09:7b:20:37:2b:59:df:c8:37:9f:37:6e:11:69:
                    62:c0:bf:eb:f8:a1:4d:a8:76:82:33:f5:07:a7:f1:
                    9d:0d:95:0f:57:97:96:47:ab:ea:6f:33:f7:04:cf:
                    f1:10:b2:0c:53:fb:71:77:3f:b9:e5:96:5b:9e:b1:
                    bb:eb:38:5c:30:19:89:05:a4:21:b9:b3:61:1c:20:
                    2f:27:a6:50:55:82:be:c0:20:e4:4f:df:6c:10:e2:
                    85:43:48:ed:07:09:66:5c:5a:3c:57:bf:b9:0f:f1:
                    bd:06:e7:c1:0e:59:76:fb:c8:8d:92:94:d2:81:d2:
                    ba:fb:3e:1e:c5:fd:3e:74:bb:44:61:1a:38:78:d9:
                    a9:7d:06:68:2d:16:34:c5:3d:c0:cb:05:db:5e:24:
                    aa:da:45:18:b7:3d:61:72:da:02:cc:16:24:89:9d:
                    d2:fc:0d:a1:8b:5c:05:40:2e:bf:50:a0:fa:d6:87:
                    6c:c9:dc:c0:7f:2c:69:83:b5:74:62:28:50:be:d8:
                    1a:2a:d2:76:e7:d4:21:fc:33:a2:7d:49:a2:a6:49:
                    c3:eb:7b:b8:6f:83:11:37:e3:3b:a4:96:c6:97:c1:
                    a3:d0:8a:c9:6d:85:d6:35:e8:7f:9a:af:a6:f0:11:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0C:A5:8C:D8:03:25:1C:96:98:F3:4F:9D:61:D9:E9:F6:88:0C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:26:52:ee:66:4f:ec:d7:be:38:82:50:d8:c2:bd:e7:11:
         7e:7b:37:65:72:0c:d2:d4:44:ab:b1:71:d5:49:80:af:2a:80:
         6d:e6:6d:2e:0c:74:fe:d5:0f:34:33:00:19:a2:7f:3a:e8:fa:
         79:23:9b:38:41:eb:7f:aa:92:6c:3e:13:a2:fd:ad:1d:11:9c:
         91:be:df:38:c3:f5:2d:78:ee:e7:82:db:70:37:ad:b5:94:ae:
         a5:1c:56:5c:2e:f8:de:b6:fb:bd:41:44:ae:06:00:56:d1:86:
         76:50:1f:49:b5:12:50:b3:32:70:e0:02:2c:02:1f:0d:44:4a:
         a3:6b:8a:14:b3:9d:fd:a8:e8:68:35:ce:a3:43:60:37:22:e5:
         42:06:f7:80:79:6d:7f:9c:fa:e6:7b:c7:4e:c4:95:a6:41:19:
         f9:3d:f7:c1:bc:41:99:da:90:72:31:0c:b7:79:2e:9b:32:01:
         45:87:51:fb:f1:a4:fd:f9:0e:1e:42:50:01:ff:0d:b8:83:31:
         29:67:54:1b:cc:06:6a:66:fe:02:9c:43:4f:db:cb:ae:66:a7:
         9a:3c:c0:b1:4d:fc:4e:65:64:43:1e:29:8d:88:b7:2c:ab:73:
         11:8b:8e:35:72:cb:54:b4:ec:4f:a0:ca:02:95:b2:ec:05:c2:
         05:a8:18:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdadj5WdU7Y8NaPiMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj
ZmEzMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
Yjc1N2M0MDgtMWY0MS00YzczLTlmMjgtMWRhMzgzYWZjYTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvct8zAIg2G5F7e3522XCXsgNytZ38g3nzdu
EWliwL/r+KFNqHaCM/UHp/GdDZUPV5eWR6vqbzP3BM/xELIMU/txdz+55ZZbnrG7
6zhcMBmJBaQhubNhHCAvJ6ZQVYK+wCDkT99sEOKFQ0jtBwlmXFo8V7+5D/G9BufB
Dll2+8iNkpTSgdK6+z4exf0+dLtEYRo4eNmpfQZoLRY0xT3AywXbXiSq2kUYtz1h
ctoCzBYkiZ3S/A2hi1wFQC6/UKD61odsydzAfyxpg7V0YihQvtgaKtJ259Qh/DOi
fUmipknD63u4b4MRN+M7pJbGl8Gj0IrJbYXWNeh/mq+m8BFpRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsMpYzYAyUclpjzT51h2en2iAxwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy
MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNmMzNzJlOTMtYzY3Yi0z
ZTFlLWE2ZjUtYTY4NTA0YzRmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli
MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw
Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk
MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3yJlLuZk/s1744glDYwr3nEX57N2VyDNLURKuxcdVJgK8qgG3mbS4M
dP7VDzQzABmifzro+nkjmzhB63+qkmw+E6L9rR0RnJG+3zjD9S147ueC23A3rbWU
rqUcVlwu+N62+71BRK4GAFbRhnZQH0m1ElCzMnDgAiwCHw1ESqNrihSznf2o6Gg1
zqNDYDci5UIG94B5bX+c+uZ7x07ElaZBGfk998G8QZnakHIxDLd5LpsyAUWHUfvx
pP35Dh5CUAH/DbiDMSlnVBvMBmpm/gKcQ0/by65mp5o8wLFN/E5lZEMeKY2Ityyr
cxGLjjVyy1S07E+gygKVsuwFwgWoGEE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org