Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
File:                     6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json)
Hash identifier:          AXSIkO4jv82B3lhA1+zggzqVQSD/UeQsXSzmuPfmSUc=
Subject key identifier:   C8:B6:12:91:88:D8:BE:E4:EF:2D:9F:E7:62:4E:26:05:0F:AF:CE:D7
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F43285849F87A8EEAD9D6D3EC0A08CA00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     22765
IP address blocks:        72.20.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8e:ea:d9:d6:d3:ec:0a:08:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=e5c2c781-1787-47f4-9027-bf0810bdf170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c1:83:7a:ee:e2:a6:24:b1:c3:8b:75:58:84:
                    f5:4a:20:b8:a3:ce:84:65:d2:ed:4c:ff:d8:4d:60:
                    29:f1:62:47:10:26:32:0a:53:6c:4c:d5:f5:33:c1:
                    52:2d:e3:56:1e:c7:a8:90:7c:4d:06:7d:a2:51:bb:
                    36:7b:18:83:dc:b3:1d:50:06:cf:96:12:0b:f7:2a:
                    2b:33:ef:14:86:2e:ed:40:f4:ea:59:d1:71:0f:91:
                    01:08:ea:6d:94:90:8b:5f:58:5a:52:4a:a8:ad:8a:
                    bf:45:a4:fd:f1:dd:c1:28:5a:59:ab:79:60:3e:b4:
                    7a:09:c5:94:bc:f9:f9:a5:c3:ac:2f:90:1e:2f:19:
                    5e:e0:58:77:28:0c:80:fe:72:37:a5:71:30:70:3b:
                    bb:11:29:de:dd:39:61:17:dd:fa:60:0c:6d:4c:a1:
                    41:97:11:c5:58:64:73:1d:8f:48:0a:17:6d:9e:6b:
                    13:5b:ca:47:df:21:63:ad:5b:47:9b:18:74:b1:e1:
                    82:81:e0:28:ac:e1:18:f3:54:56:63:4f:5e:a2:db:
                    76:71:3f:8a:59:c4:c6:06:a5:0c:4f:dd:0a:58:98:
                    dd:c2:43:4e:15:80:16:de:ff:4e:ad:2f:d6:3b:04:
                    1e:7f:46:ac:d7:8c:0a:d8:fe:3c:bd:eb:0e:1c:df:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B6:12:91:88:D8:BE:E4:EF:2D:9F:E7:62:4E:26:05:0F:AF:CE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:1b:90:33:86:6f:78:88:d9:fe:46:cf:0d:a1:e1:8d:61:
         fb:cd:8b:bf:99:99:97:bf:15:da:dc:ec:32:21:75:86:f4:db:
         ff:e0:5e:43:f1:2a:cf:aa:e7:1e:ed:15:73:6d:bd:27:c8:df:
         c9:c3:32:68:70:d8:a3:c1:69:b3:1e:55:69:62:55:4a:6f:de:
         23:ce:2c:85:0d:40:fa:5b:46:6b:9e:b4:71:e6:3e:87:b3:90:
         7f:84:26:e4:6f:16:11:13:02:b3:b1:f5:87:d4:b9:fa:78:03:
         b9:6c:27:7e:9a:23:73:e2:f9:7c:21:8c:6b:4d:39:a2:8b:99:
         ac:e0:df:76:24:f0:f5:c9:d7:ef:c9:8e:4a:b6:e6:a9:03:3c:
         48:91:84:cf:5c:39:0c:7f:7e:8c:03:95:8e:0a:dc:08:3f:fe:
         99:f8:56:91:cd:d0:42:f5:c5:e7:c7:ac:1d:70:67:e9:46:39:
         66:79:7b:50:c8:af:ce:b6:e4:9d:f2:f0:4d:0c:f4:1f:aa:81:
         df:d4:e5:e8:a1:00:b6:24:6d:27:2e:70:8c:91:f3:33:f7:d8:
         42:f7:32:e7:f2:5b:69:ab:fa:f5:25:92:3b:9b:65:16:2c:c2:
         c8:e2:2a:76:f1:03:d9:31:08:53:19:b1:f2:c3:94:78:52:ac:
         5a:12:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:23:38 2025 by rpki-client