Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
File:                     eae85ad0-1277-36ff-9059-3ed1f569e35e.roa (raw, json)
Hash identifier:          hZuizDCtztniu6FzfeYm8jBZo0N2HFBGYHwaBIsIyV8=
Subject key identifier:   D3:4D:36:7B:2F:3F:F4:A0:74:17:BD:CC:B4:1A:ED:5E:95:6E:97:15
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858475A763E81470D409B2F6899C0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     22765
IP address blocks:        72.20.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3e:81:47:0d:40:9b:2f:68:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=95c0bbbd-715e-4e8e-a733-04cbe448f21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:81:47:b9:fe:16:b8:70:31:b5:71:e7:ae:
                    0a:0f:cc:35:55:08:2e:8d:61:d2:28:49:0b:c4:38:
                    8c:1a:7c:48:6f:34:e5:93:77:a8:38:93:9f:79:05:
                    37:b5:5c:4c:03:b9:c8:e2:2c:38:69:a9:c9:08:19:
                    7d:ed:55:28:d9:4c:23:5c:e0:62:0a:dc:7b:03:fd:
                    35:26:3d:68:ac:0b:21:75:8f:fa:44:8e:0d:f3:45:
                    cb:5f:ac:ac:9d:5d:4d:06:64:62:9d:90:e1:f8:3b:
                    4e:6c:ba:ba:b0:12:91:1a:61:3b:37:45:80:71:ee:
                    17:c6:f1:19:de:b3:2e:27:e5:84:fc:bb:47:08:b1:
                    6e:08:ab:01:ed:ea:44:c6:a4:75:b0:93:52:5d:c2:
                    33:ee:2f:30:aa:3f:10:0f:0b:c7:17:e7:c6:e1:bb:
                    48:74:0f:bc:83:1e:5f:26:27:37:d8:da:71:46:c8:
                    82:af:e5:61:6c:85:55:6f:9f:b5:17:10:72:61:86:
                    88:7b:95:c8:62:db:13:86:68:86:fe:d5:ae:fd:d9:
                    53:03:1f:2a:07:a7:49:23:33:ef:da:dd:f3:30:1e:
                    a7:94:99:e7:50:c2:36:65:f3:19:9e:5d:80:33:71:
                    cd:b3:11:87:36:c1:52:47:10:57:f2:01:49:89:2c:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:36:7B:2F:3F:F4:A0:74:17:BD:CC:B4:1A:ED:5E:95:6E:97:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:59:7c:f7:27:70:59:c8:81:85:f8:bd:2a:75:4a:c3:55:d3:
         1c:55:cd:2d:24:b0:1b:55:e1:06:b2:87:3c:93:0a:fe:c0:0c:
         48:b4:40:30:9b:09:18:7f:25:c1:1e:20:53:2f:3d:60:88:28:
         6a:cd:a4:4e:37:f0:3d:36:af:d6:9a:29:8f:64:7b:7f:fb:6f:
         fc:80:f6:4d:d6:c7:ad:be:f0:ab:31:da:12:b6:c5:cc:b6:0e:
         d1:ec:72:4d:90:d1:e3:31:5e:68:b5:94:fd:6b:74:03:2a:88:
         eb:14:ce:c1:b4:ad:cd:f8:ea:93:6f:8a:5b:29:9b:30:9f:43:
         a8:f4:e8:35:67:3f:21:87:44:40:3a:64:92:41:69:2e:02:3b:
         f9:c4:03:8c:be:2a:d1:84:5d:98:3b:e2:09:2d:75:08:2b:8a:
         20:80:8a:ad:e6:72:2b:a9:3d:08:7c:ab:5b:0a:a1:a1:66:31:
         a6:26:44:84:78:59:ae:5a:89:37:85:9b:62:01:2b:48:58:78:
         94:67:0f:53:39:91:70:c3:41:01:c5:18:64:de:38:38:a0:c8:
         41:08:b6:5f:a7:c5:0b:37:d8:f0:02:24:63:10:2f:6d:df:f7:
         28:71:75:0a:0c:a3:dd:6c:fc:0c:e9:b4:ab:e7:ec:7c:f0:66:
         79:94:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org