Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa
File:                     5dda545f-1238-3606-89ac-8ceb51f8226f.roa (raw, json)
Hash identifier:          WyopV2zcLRRcmhJxuKlI4M57HpW+2KFyKOnPvB87NIw=
Subject key identifier:   D8:03:D9:92:09:E0:94:DD:BB:2F:9B:1B:16:E2:20:E2:08:F1:6D:BD
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46CACE942AEF1B6445B6A00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 29 Jun 2023 19:30:30 +0000
asID:                     1239
IP address blocks:        198.145.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:ac:e9:42:ae:f1:b6:44:5b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 29 19:30:30 2023 GMT
        Subject: CN=5c7973a8-8624-4ea7-a8d9-a36643941d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:8b:be:9c:6b:91:d7:5a:bf:95:8c:ab:c6:
                    e4:75:04:2c:50:22:0f:10:81:d5:9c:16:c4:73:9a:
                    fe:7f:2d:8a:97:2e:4a:26:15:e0:2c:09:1c:24:b1:
                    ac:c5:11:5b:d8:93:ce:2f:63:20:e0:52:ab:c3:68:
                    a1:b7:43:17:1f:14:89:c4:ce:5e:33:30:41:02:03:
                    84:35:a6:b1:a0:6b:39:1a:8c:e6:a5:08:18:dd:e6:
                    83:63:45:f1:66:01:68:3c:a1:c7:3c:0d:67:85:f1:
                    83:b5:2d:c0:2a:ce:d5:36:c6:c9:5a:1f:03:1b:4c:
                    0c:d5:7f:1c:c6:a3:8f:1b:44:d3:0b:6a:2e:92:de:
                    39:be:0c:c4:17:f3:58:86:b0:01:cd:da:97:db:3b:
                    95:a2:e1:7c:ad:4e:17:32:5e:7c:10:a4:b1:97:96:
                    93:af:31:09:70:cf:43:5c:25:cd:17:9c:26:cc:03:
                    11:b9:bc:01:28:e6:14:11:5e:4d:b2:4d:89:66:ec:
                    82:8d:42:53:22:cd:83:eb:c5:a0:ec:f6:e9:31:ef:
                    df:bd:d3:dd:6b:97:20:43:88:f6:8d:33:9a:28:b3:
                    ec:d8:6f:d1:fa:05:32:fc:18:9c:48:29:12:da:10:
                    3b:81:bb:53:18:5a:75:91:f5:d3:59:4a:66:85:5f:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D8:03:D9:92:09:E0:94:DD:BB:2F:9B:1B:16:E2:20:E2:08:F1:6D:BD
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier: 
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:31:ee:e9:37:2f:c7:14:2b:03:4c:37:32:f6:25:32:c8:eb:
         36:9c:50:68:4c:c6:d8:e8:f2:4d:ca:fa:62:9d:6d:7e:19:c8:
         d8:96:d5:79:f0:6d:ac:c6:59:45:8e:b1:fb:85:7f:41:f0:11:
         e6:15:6b:dd:48:4e:de:60:d5:4e:38:ed:51:44:45:5f:fd:ec:
         7e:00:e3:85:07:0e:bf:81:9d:f4:1e:dc:57:17:74:0c:15:e6:
         fc:7e:f8:8c:be:d6:2c:51:3d:4d:b1:d7:8e:7c:86:47:d1:e5:
         34:c6:fb:48:f3:fc:e7:2e:f6:11:d0:02:fd:e4:84:ed:ab:45:
         9d:be:72:ee:da:d7:07:99:d1:e2:b8:56:de:11:ea:b4:1d:ad:
         38:de:80:64:5e:32:e1:74:22:ab:61:04:84:2e:80:61:a2:ee:
         42:f6:11:de:98:e3:96:66:b4:98:43:ca:c6:78:f8:44:72:bc:
         cf:db:b8:dc:fc:cf:bc:cb:d4:7d:48:a8:ad:ec:37:85:26:fc:
         2c:56:e2:dc:b8:22:7a:e4:ea:03:cd:73:06:4c:19:38:69:02:
         51:41:74:15:40:ea:7d:ff:1d:b2:d0:50:62:52:a3:d4:ba:81:
         75:40:86:1f:22:05:a3:f0:f5:b4:ea:7b:1a:a6:b9:e1:24:c6:
         0b:97:05:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:57:13 2023 by rpki-client on console-ams.rpki-client.org