Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
File:                     eae85ad0-1277-36ff-9059-3ed1f569e35e.roa (raw, json)
Hash identifier:          B2sJGE/5hYXiTBI4BW+FyjI2wK/eHl5TuimJfYZKUkk=
Subject key identifier:   C9:AF:6A:83:4B:DC:BB:6C:77:00:50:8A:E9:DC:4B:20:2D:BC:1F:A5
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858459A633690FAAB48ACFAD7BB00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     22765
IP address blocks:        72.20.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:36:90:fa:ab:48:ac:fa:d7:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=9506482f-04e8-4130-9a67-ac969549da71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:71:22:0f:0b:ab:d2:77:ad:c9:3b:d8:d8:c7:
                    f9:e6:b3:50:9e:f6:49:3e:26:01:46:f5:9b:09:f9:
                    45:4e:04:70:24:4f:08:18:6b:82:db:ee:36:a5:bd:
                    c3:90:ae:40:54:18:1d:95:ee:78:fb:3d:47:8a:f3:
                    4b:49:15:b9:81:d8:60:aa:e5:d5:9a:a7:49:26:86:
                    b7:5c:a2:cd:28:4d:a5:96:83:64:20:79:3b:58:a7:
                    d5:d1:d7:cd:5c:65:b2:f0:1b:42:90:94:ec:fa:5b:
                    7b:a1:44:5a:ff:d6:f5:f5:44:93:5e:7b:bc:76:97:
                    ce:17:9f:66:18:8e:9c:5d:d1:ee:d4:b5:75:cc:86:
                    cf:92:3d:99:ce:88:3b:fc:5f:26:1d:39:3f:bd:09:
                    5f:43:45:9d:49:92:ac:4d:75:9d:ef:b3:cf:c7:fd:
                    f3:2c:ee:54:ce:6c:a2:ad:b2:11:62:24:9f:a3:41:
                    c8:3e:8d:82:73:dd:70:8b:11:6a:1d:3d:2d:12:35:
                    63:cb:a9:35:6c:37:1d:5f:d4:a1:c5:67:3c:c4:9c:
                    1e:c5:5c:92:8a:a4:50:86:51:32:5b:80:cd:4a:5b:
                    78:cb:0f:5e:bf:87:81:96:17:09:aa:75:87:07:1d:
                    73:17:fb:68:39:d6:8d:44:4a:1e:a5:aa:d7:25:25:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:6A:83:4B:DC:BB:6C:77:00:50:8A:E9:DC:4B:20:2D:BC:1F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:52:2c:03:85:54:e3:cb:1a:61:7c:53:29:3c:e3:c1:37:8d:
         c5:9e:1e:d5:fb:84:e4:e7:fd:18:20:f9:e3:59:83:09:49:49:
         53:08:65:09:e8:7d:e0:60:99:ce:52:66:94:c5:db:21:36:4f:
         23:1e:09:ae:75:3c:78:77:93:11:a1:de:f9:f5:63:90:3d:39:
         10:2a:b9:d7:02:35:b4:d2:e9:7d:77:48:a7:3a:c9:c6:5d:c9:
         43:3a:cc:f0:ba:c2:17:fa:f5:e3:6d:98:d9:54:c2:c4:ee:7f:
         1c:6a:aa:d7:28:12:ae:5b:c8:39:41:57:c0:6f:09:29:f6:ce:
         c1:cd:ae:17:fb:ad:ee:8b:51:fb:80:14:62:f8:64:0f:0e:f6:
         6c:04:41:d5:d8:42:09:7a:a2:b4:d1:56:e4:87:b0:fc:ab:30:
         f2:98:e8:ea:d5:9e:b0:f9:78:97:c2:e9:b3:40:a1:29:59:53:
         27:92:2d:da:ff:87:7a:d7:45:8f:d1:bc:15:b3:b4:81:ae:a2:
         d8:2e:e1:91:28:b9:4f:59:de:87:97:3f:cb:24:94:bd:b9:e6:
         d2:65:67:e3:e3:c6:73:27:ed:3b:70:33:a9:fe:ba:e0:ad:ee:
         ea:92:0d:91:88:47:b3:a9:ff:90:b6:d7:e6:b5:f9:f9:c8:3b:
         30:15:83:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaYzaQ+qtIrPrXuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj
ZmEzMB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk
OTUwNjQ4MmYtMDRlOC00MTMwLTlhNjctYWM5Njk1NDlkYTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHEiDwur0netyTvY2Mf55rNQnvZJPiYBRvWb
CflFTgRwJE8IGGuC2+42pb3DkK5AVBgdle54+z1HivNLSRW5gdhgquXVmqdJJoa3
XKLNKE2lloNkIHk7WKfV0dfNXGWy8BtCkJTs+lt7oURa/9b19USTXnu8dpfOF59m
GI6cXdHu1LV1zIbPkj2Zzog7/F8mHTk/vQlfQ0WdSZKsTXWd77PPx/3zLO5Uzmyi
rbIRYiSfo0HIPo2Cc91wixFqHT0tEjVjy6k1bDcdX9ShxWc8xJwexVySiqRQhlEy
W4DNSlt4yw9ev4eBlhcJqnWHBx1zF/toOdaNREoeparXJSUEUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmvaoNL3LtsdwBQiuncSyAtvB+lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy
MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvZWFlODVhZDAtMTI3Ny0z
NmZmLTkwNTktM2VkMWY1NjllMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli
MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw
Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk
MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBTIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNSLAOFVOPLGmF8Uyk848E3jcWeHtX7hOTn/Rgg+eNZgwlJSVMIZQno
feBgmc5SZpTF2yE2TyMeCa51PHh3kxGh3vn1Y5A9ORAqudcCNbTS6X13SKc6ycZd
yUM6zPC6whf69eNtmNlUwsTufxxqqtcoEq5byDlBV8BvCSn2zsHNrhf7re6LUfuA
FGL4ZA8O9mwEQdXYQgl6orTRVuSHsPyrMPKY6OrVnrD5eJfC6bNAoSlZUyeSLdr/
h3rXRY/RvBWztIGuotgu4ZEouU9Z3oeXP8sklL255tJlZ+PjxnMn7TtwM6n+uuCt
7uqSDZGIR7Op/5C21+a1+fnIOzAVg2Y=
-----END CERTIFICATE-----
Generated at Sun Jun 2 21:00:17 2024 by rpki-client on console-fra.rpki-client.org