Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa
File:                     03311caa-eedc-35f5-b4a3-a502fc212a0b.roa (raw, json)
Hash identifier:          xCra4FyIUVDnHNkewB9odwc7MZn2LRX/NkWlFMuCp4M=
Subject key identifier:   EF:75:69:E6:58:F9:02:42:85:67:1E:6E:86:0C:62:5F:47:2B:F4:BC
Certificate issuer:       /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d
Certificate serial:       010D0C9F43285847ED24C821306497BEEAB9C000
Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     8075
IP address blocks:        156.20.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c8:21:30:64:97:be:ea:b9:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=d00803fe-ff13-465a-9f96-ac2a6b72b6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:13:d6:f5:e1:29:ad:f9:18:7c:31:d3:58:
                    1c:4a:77:17:e0:77:6a:92:2c:a1:17:bc:ac:65:13:
                    a8:7a:20:d1:b3:10:38:b9:cf:38:75:f0:61:7a:5c:
                    94:a7:ba:18:10:fb:68:ab:a0:11:ee:43:e1:44:82:
                    d1:f6:03:24:3d:78:29:fe:ed:9e:4e:b1:26:10:cb:
                    40:9d:70:76:ab:77:e1:50:8e:87:ca:c9:18:1d:6c:
                    7a:c8:7f:ba:55:99:ee:fb:f9:ef:af:83:3a:61:fa:
                    ef:42:11:d3:68:52:9b:ee:92:49:10:d1:91:48:41:
                    22:3b:60:1d:1b:ad:52:b0:aa:4d:f6:d8:f7:31:d4:
                    f1:3c:c7:b8:8b:01:58:e5:b0:fe:98:c2:be:f6:aa:
                    ae:5e:82:a8:4a:9f:01:fd:16:93:54:3e:26:98:c9:
                    ff:a0:14:21:f3:80:15:e4:23:9f:7d:0b:52:b5:4d:
                    d7:a2:44:01:a4:79:9d:ba:30:07:2e:12:32:20:f9:
                    26:3c:51:1d:31:42:92:bd:e2:b9:89:74:1f:9f:3d:
                    54:15:3d:29:59:30:f3:b8:e3:80:3f:97:16:10:67:
                    47:dd:49:42:eb:48:74:ba:e1:c7:a8:13:9e:41:51:
                    7b:db:a7:8c:ff:c3:4c:d9:bd:3b:93:39:f6:d3:eb:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:75:69:E6:58:F9:02:42:85:67:1E:6E:86:0C:62:5F:47:2B:F4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl

            X509v3 Authority Key Identifier:
                keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.20.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:88:7a:b3:ff:e9:46:6c:18:fc:be:3d:46:34:7a:de:f5:
         39:12:4b:d6:7f:01:ce:ee:5b:ef:56:a6:3b:99:64:53:39:da:
         4c:a3:74:6b:fb:d3:ab:d4:55:fa:86:b4:2b:41:32:0a:62:97:
         18:da:4b:a2:6f:76:5b:2c:36:38:8f:50:db:56:0b:6d:2f:91:
         b6:e9:39:fd:67:72:47:52:00:32:71:f2:07:e4:79:de:ba:06:
         94:6e:25:0b:44:1a:c2:5d:09:2f:9e:2d:d2:f1:ac:6b:03:31:
         c6:de:af:a3:40:d0:f9:11:0d:c4:92:7a:06:bf:d2:db:1a:cd:
         83:31:8a:9c:e8:d6:e4:47:ca:26:65:e7:68:ba:ab:e8:82:83:
         74:96:d4:eb:03:79:e7:0e:ff:73:a3:56:51:6a:af:8b:ba:5c:
         33:97:0a:4f:c3:e6:1a:0d:b0:7e:13:96:37:28:e2:16:14:c3:
         2a:e3:89:8a:42:5c:34:d0:25:af:f6:2c:8a:5a:28:65:80:f6:
         12:27:27:a9:a8:01:98:78:7c:50:b5:de:4f:97:e6:43:a9:f6:
         83:a7:c7:7b:b3:9b:c1:19:a1:f9:df:b6:a3:d8:38:dc:29:6b:
         44:f8:88:d4:74:b6:15:3d:d6:0e:f8:b3:69:35:ee:e6:7f:2b:
         c2:5a:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:54 2024 by rpki-client on console-ams.rpki-client.org