Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
File:                     e667c5dd-d722-3d40-ba59-95b2adb19266.roa (raw, json)
Hash identifier:          YliUSBaMetbBuSULzXo20l3d/lTkXFfv5+RNNaq0mvc=
Subject key identifier:   39:CB:19:56:72:9F:2A:08:B0:7E:F3:B7:0C:4B:C2:9B:4B:8E:B1:8B
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858459A63363C704F1DCA21936C80
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     22765
IP address blocks:        72.20.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:36:3c:70:4f:1d:ca:21:93:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=dcc92f54-f26f-4a51-bd7a-bdce1d2f1c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:c7:c4:8a:42:72:7b:c7:0c:42:87:53:83:
                    4a:f0:5d:68:37:d4:09:b9:59:66:f4:33:26:7c:ab:
                    ca:b2:cb:0f:07:bf:89:7d:78:1b:29:06:cf:ea:59:
                    6c:00:ba:da:f4:6d:6a:bb:bb:56:f1:42:cf:83:c8:
                    f5:6f:32:0e:37:98:fa:c9:ec:27:99:47:d7:36:48:
                    51:7a:ea:9b:71:10:6b:5d:59:d3:7f:bb:ef:4e:49:
                    6c:1d:46:71:df:97:48:1f:8b:a9:75:c4:10:e0:54:
                    42:08:39:a5:e6:67:fe:1f:63:e9:ef:51:d3:89:eb:
                    62:92:2e:c5:5c:78:bc:a9:53:ae:17:5f:7f:90:4b:
                    0a:69:c6:a6:75:45:27:17:9b:d6:b0:42:9b:0f:2a:
                    2a:ee:aa:fe:40:a9:35:bc:8c:0d:9a:67:ca:25:4c:
                    fe:3a:3a:81:19:94:c8:7a:20:a5:9d:5f:15:d0:2a:
                    25:cb:42:e3:7d:4e:48:51:8f:b1:1a:32:57:5b:63:
                    b4:cc:a0:2e:f8:94:fa:dc:02:7c:6a:cc:97:2c:a0:
                    28:03:f6:78:2d:f0:e8:ef:f8:9a:b9:24:1c:6f:95:
                    2e:65:db:06:1b:45:7e:ee:9a:92:c7:80:37:0c:f8:
                    0b:fa:7c:85:50:e9:16:76:b8:f2:16:37:ab:e1:57:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CB:19:56:72:9F:2A:08:B0:7E:F3:B7:0C:4B:C2:9B:4B:8E:B1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3e:2c:fc:e1:30:69:c8:1f:7b:dd:42:e4:7f:60:54:0e:0f:
         66:a7:e2:1b:46:6e:c6:bc:66:b0:bd:7d:d5:a0:64:72:b3:05:
         2a:d2:d4:6b:4e:c9:7a:2e:fb:f5:1b:69:f1:3e:e7:45:ba:90:
         ff:3b:27:d4:bb:83:c8:fa:52:c9:d9:86:83:e5:f2:9a:91:f8:
         0f:2d:1e:a0:48:9c:db:e2:c5:36:e1:33:3f:82:8e:28:13:30:
         c9:9c:d0:c2:3e:46:2c:47:dc:49:03:86:52:a5:f7:4e:db:73:
         de:e6:53:e3:b6:80:c9:82:aa:4c:38:dd:fe:e2:26:fe:b2:74:
         5f:63:f9:b9:60:e0:88:a9:a2:c1:d1:23:37:f1:80:d5:fa:7d:
         5b:0f:3a:40:fb:65:27:39:65:ca:02:c7:b6:8c:87:2b:61:4c:
         8d:d5:9a:d2:46:66:3a:e0:da:f0:96:c8:fb:82:3a:a1:94:a1:
         67:c9:9e:f7:9d:4f:e7:79:da:23:8b:96:c9:a4:4c:87:0d:45:
         72:36:e5:24:0a:aa:6b:6b:0a:99:fa:94:ee:37:27:5a:a7:48:
         7b:e6:60:ea:de:9e:0e:9d:83:ab:4e:31:c4:dd:08:6d:1e:7a:
         b1:80:55:9e:96:55:0c:98:fc:c7:57:77:22:2f:e6:5d:27:24:
         23:ba:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:44:39 2024 by rpki-client on console-fra.rpki-client.org