Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1c050b2b-e13a-313b-b0b8-5013e1546a52.roa
File:                     1c050b2b-e13a-313b-b0b8-5013e1546a52.roa (raw, json)
Hash identifier:          x1y79+8L8K5tvo3YgjLU1rbqkDpA1pyKYnrvCVMMQfA=
Subject key identifier:   10:5F:41:E9:4C:C3:DC:F2:AF:3A:50:5F:8C:95:FC:BF:A5:28:62:A1
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46CADC9265B1DCD3887E9C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1c050b2b-e13a-313b-b0b8-5013e1546a52.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 15 Jul 2023 12:24:54 +0000
asID:                     7018
IP address blocks:        208.66.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:ad:c9:26:5b:1d:cd:38:87:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 15 12:24:54 2023 GMT
        Subject: CN=3ea0a4fd-95d1-4017-bf07-c7109d3404f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:08:9b:ea:e5:6c:3a:02:14:7e:c3:2a:69:
                    f7:2b:97:cf:82:2a:6b:d4:03:8f:50:df:fd:a6:a6:
                    ac:ac:1b:11:f9:c7:4a:cf:4f:b6:fb:49:e4:65:49:
                    6a:60:f2:db:b7:45:93:0e:09:0a:3b:83:21:a2:2d:
                    20:11:8d:8e:e2:3a:cc:1c:37:2d:11:30:f4:1a:24:
                    8c:9d:d6:08:e4:dc:54:68:94:00:42:69:f2:d1:98:
                    3a:26:17:d9:0e:f1:8b:50:2d:bf:49:7c:6a:8b:0b:
                    aa:37:83:0d:48:74:89:13:43:c2:9e:fb:51:32:8b:
                    c8:c8:3c:69:0a:b8:38:1a:9a:6d:3c:df:f3:28:78:
                    7a:24:c8:bd:61:54:b1:e3:7e:ed:f9:73:c6:b1:3a:
                    16:eb:65:f2:03:8f:60:68:3c:8d:c9:6a:69:e9:fb:
                    2d:4f:64:b0:5f:86:a4:63:2d:55:0f:73:3b:69:90:
                    0c:13:2c:5f:eb:78:8b:6d:38:05:b0:5f:11:6b:5b:
                    f9:0d:15:3c:df:73:e6:f9:ad:b4:69:a7:00:a8:2a:
                    ca:9a:b8:56:b3:08:2d:bd:06:c1:63:a9:42:7e:0c:
                    ea:60:52:2b:98:3f:ea:9e:41:1d:ed:b5:e3:10:cc:
                    e3:25:42:e6:eb:34:fb:09:27:a1:91:f4:bd:30:34:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                10:5F:41:E9:4C:C3:DC:F2:AF:3A:50:5F:8C:95:FC:BF:A5:28:62:A1
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1c050b2b-e13a-313b-b0b8-5013e1546a52.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier: 
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:39:35:8e:7a:9d:fc:08:3e:10:50:e9:b7:f7:76:e6:2d:8e:
         fc:af:8e:f7:c9:d4:02:9d:a4:bd:e9:fb:5e:8e:15:7f:a5:6f:
         c0:e0:f1:a1:35:86:0e:46:12:91:05:3b:f9:56:5e:8e:a9:b6:
         3a:c9:67:54:62:50:b2:c5:52:a2:bf:03:0e:c6:d7:42:95:f6:
         48:56:30:e0:c2:e5:52:77:93:09:fd:31:61:85:12:93:df:49:
         32:1c:6e:c4:bf:22:05:3e:b4:42:9e:34:8b:95:d7:aa:96:f4:
         d9:73:c1:51:b0:0b:32:fc:8c:71:15:0d:ae:c5:de:8b:91:c3:
         01:a4:50:e2:cd:c4:f0:4e:37:e2:9f:41:77:66:89:3a:e8:bd:
         bd:9b:7e:3b:8b:62:35:27:53:94:66:d1:f7:5c:fd:87:58:dd:
         3f:8c:7e:a0:69:fc:83:1f:1b:cc:ba:28:5f:38:af:3c:94:94:
         80:4b:2c:ae:35:70:7e:19:9c:91:57:d5:a4:99:a4:53:93:1d:
         37:4d:6b:0b:bc:b0:a8:5a:dd:c2:3d:68:9b:1f:7e:c0:cc:3b:
         1d:87:cb:68:5a:fa:69:2c:1a:78:bb:eb:61:e4:23:94:d7:9e:
         59:0f:2c:23:5d:ce:6d:f2:24:22:6a:2e:59:df:1d:d8:d1:0f:
         a3:00:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:57:13 2023 by rpki-client on console-ams.rpki-client.org