Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/aff2bb6a-aa2a-3202-a216-cf7b987522da.roa
File:                     aff2bb6a-aa2a-3202-a216-cf7b987522da.roa (raw, json)
Hash identifier:          cR6npWUzrpAaG+31wHFZbKC+o+5iiBq59gtz7hOfm10=
Subject key identifier:   09:9B:E5:76:D9:12:69:09:6C:05:B5:D1:49:E1:D8:05:76:73:AD:32
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584226CDAB131C21FEA511427D00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/aff2bb6a-aa2a-3202-a216-cf7b987522da.roa
Signing time:             Thu 08 Jun 2023 13:00:19 +0000
ROA not before:           Thu 08 Jun 2023 13:00:19 +0000
ROA not after:            Wed 06 Sep 2023 13:00:19 +0000
asID:                     27602
IP address blocks:        198.145.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Jun 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:26:cd:ab:13:1c:21:fe:a5:11:42:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun  8 13:00:19 2023 GMT
            Not After : Sep  6 13:00:19 2023 GMT
        Subject: CN=cbead0fa-4805-41e9-b712-d12a6f4bd149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:4b:29:52:6a:aa:08:03:a6:22:b6:cb:41:
                    e9:03:ac:c6:a2:59:da:d3:cb:34:01:c7:e6:0e:62:
                    e2:aa:53:52:69:f1:00:d6:87:e7:a9:6a:7f:37:14:
                    8e:a3:fd:2e:e0:24:2d:4c:bd:01:35:84:f2:d1:52:
                    a6:f6:28:d9:e6:bc:10:80:8e:20:8e:81:f0:87:38:
                    a2:77:24:e3:a2:99:ef:7e:b5:c1:4b:f5:11:e1:a6:
                    ba:75:77:b8:c5:f4:34:d1:b1:9f:ec:1a:c4:2b:b5:
                    74:86:16:4e:dd:fc:cb:0d:08:2c:d4:5c:be:11:85:
                    b0:2a:f4:35:8a:5b:c8:1d:f0:b3:da:34:be:67:87:
                    fa:dc:88:8d:8a:b6:54:66:59:ab:bf:ac:1f:48:b7:
                    29:88:ec:29:54:f4:78:8e:9d:23:60:9e:fb:0c:91:
                    c7:ff:dd:a5:03:93:e7:e7:46:c7:09:41:06:09:ce:
                    08:ee:3e:55:dc:cc:43:5f:52:a9:bd:e1:88:10:4d:
                    a0:ff:19:f0:b2:42:3e:14:fb:04:c4:75:0d:e8:02:
                    1c:55:52:ef:c3:e1:09:a9:ae:79:ff:e0:04:49:23:
                    d5:ad:0f:8a:9a:37:ee:3e:65:8c:b6:09:40:29:0c:
                    80:83:26:bc:97:44:03:64:5f:fd:cf:0b:67:7f:72:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9B:E5:76:D9:12:69:09:6C:05:B5:D1:49:E1:D8:05:76:73:AD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/aff2bb6a-aa2a-3202-a216-cf7b987522da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:bb:14:b8:b4:e3:a8:cd:c6:c4:b4:ce:00:17:db:f1:2c:
         c1:70:e3:cd:6c:50:e9:0b:13:f8:0e:d1:33:13:f6:d4:02:66:
         90:38:b7:2d:57:06:ec:b2:2f:e8:ed:75:b5:11:f8:23:89:14:
         d4:2b:21:43:ab:24:90:8f:ac:09:8a:06:14:c7:c9:b0:e9:3b:
         f5:db:d3:4a:0c:fe:63:e2:b0:e9:44:1e:24:cb:fb:b8:dc:97:
         eb:d8:85:4b:19:5b:f0:dd:b8:55:92:95:fd:67:74:55:49:ec:
         c1:ae:fa:1e:33:c7:28:a6:b9:91:de:a3:99:a7:b4:e4:c5:db:
         14:0d:19:b3:7e:3d:a0:39:08:af:78:34:fd:ab:f1:82:d6:f8:
         99:88:85:88:25:41:90:d4:85:c1:04:aa:c9:72:9d:4f:f8:56:
         12:34:3a:9b:f6:ec:aa:b8:a5:ce:9b:61:16:50:0b:2c:ca:c6:
         9e:e3:7c:bf:5d:8b:6d:00:a4:9c:99:62:7a:a3:2e:6b:19:ea:
         60:6f:c2:20:34:d4:3a:73:e9:a5:79:41:82:bd:33:eb:80:d6:
         78:d9:78:73:7a:8f:6b:64:46:bc:ee:73:e5:1a:08:f1:2a:0a:
         0a:fe:ed:29:ce:f2:25:30:a5:3c:f1:6d:a3:1d:a5:9c:63:b7:
         72:b7:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 8 13:21:03 2023 by rpki-client on console-ams.rpki-client.org