Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
File:                     e667c5dd-d722-3d40-ba59-95b2adb19266.roa (raw, json)
Hash identifier:          gOf/7Uu+FXyXhlhRzpZbo+Vg4fAXztmLxmsldP2Bzwc=
Subject key identifier:   8B:5B:2D:1E:6F:B2:6B:A2:77:49:C5:24:F7:BF:7C:3B:E9:0C:14:87
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858475A763E46BBE2DF6A3728CC00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     22765
IP address blocks:        72.20.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3e:46:bb:e2:df:6a:37:28:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=ac9ec5b6-fe06-468e-b467-a53985f66cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:97:a7:37:e0:73:cb:2e:9a:f8:87:cd:c7:
                    49:cf:ee:a1:a0:e5:0e:8a:27:ba:21:cc:c8:a5:89:
                    46:ee:61:89:ae:8a:61:6d:1f:05:39:13:8f:a4:23:
                    1b:65:2c:31:cc:e0:5d:48:58:79:c0:fb:44:32:50:
                    c9:a7:19:e5:86:7f:24:44:b5:9c:94:cb:ec:a9:43:
                    3d:a3:af:25:10:94:19:d3:63:80:33:4e:52:3e:97:
                    f1:a3:13:bc:c1:4b:e5:bc:1c:8b:9d:d4:c1:3b:46:
                    7e:c7:f1:eb:9f:6e:fe:29:16:2a:34:2c:2f:a6:0a:
                    ef:c8:96:7a:60:de:f3:c0:82:c6:7b:72:d1:f2:8f:
                    a3:3c:99:7c:76:0c:53:be:4f:37:5a:38:4b:32:17:
                    a0:c9:0b:f3:04:94:1d:28:01:d9:b8:eb:9e:70:a5:
                    7d:bb:96:73:18:2f:67:17:59:cf:68:3a:5f:b7:d5:
                    8f:6e:87:af:e5:db:8f:04:d2:5a:0a:b5:d4:ec:08:
                    3c:6e:fc:a7:d5:0e:65:b3:6f:d0:3f:a3:6f:be:91:
                    44:81:1b:f3:02:9e:73:45:a6:c7:ed:6f:c5:09:e8:
                    26:bd:a3:d6:33:a4:5c:33:0d:0d:e7:ee:e4:1f:ca:
                    97:86:95:e5:28:26:cc:85:fa:e3:70:b6:e2:a5:9a:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5B:2D:1E:6F:B2:6B:A2:77:49:C5:24:F7:BF:7C:3B:E9:0C:14:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:13:fc:39:e6:35:a7:22:de:a4:7f:fd:06:55:91:72:9f:3b:
         cf:79:a5:51:e1:18:d8:08:92:01:0e:90:10:6e:d7:c9:bc:99:
         c6:3a:d7:0d:57:40:4f:83:5f:21:40:01:98:00:c6:30:d7:87:
         3a:c7:27:44:d2:09:63:70:18:d6:e2:2e:bb:85:0b:bf:fa:22:
         d8:85:cf:f5:e5:73:36:28:e6:c2:78:13:96:8f:3b:43:ac:e2:
         ec:86:ea:0b:92:3d:bc:b1:9a:38:72:bc:1e:a9:5a:67:b2:f4:
         c9:43:34:b2:c0:c3:02:34:72:6c:63:3f:19:8b:df:fa:51:c5:
         70:12:28:c4:90:4c:33:29:1c:82:8d:ef:b8:4d:5f:94:5a:1a:
         2d:30:14:e1:33:66:33:ef:a1:39:46:d6:75:29:75:91:b4:78:
         01:fc:5c:46:be:f3:e1:2e:2d:20:22:55:8f:54:ec:91:81:d9:
         db:1a:18:8f:90:5c:96:6a:47:9c:be:07:d7:8b:6d:47:80:33:
         71:97:82:f2:89:87:d1:89:85:a4:62:89:80:32:f7:4c:62:75:
         d6:9f:82:f0:38:c9:da:32:9b:26:5c:f9:a6:69:b3:f7:38:f7:
         c7:12:56:03:e8:5d:cb:b8:c2:8d:fa:0d:14:d8:0c:63:85:bf:
         0e:ed:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org