Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa
File:                     bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa (raw, json)
Hash identifier:          sLy6Y9IS8fXL+PTISawYoKj8Si/6GCugPPyd93nUkPM=
Subject key identifier:   80:4E:04:0F:33:FC:C4:7F:55:6E:52:9E:36:82:1D:41:91:34:6D:7C
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584793B1122C3A31BD5812881B40
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     23470
IP address blocks:        172.96.172.0/24 maxlen: 24
                          172.96.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:12:2c:3a:31:bd:58:12:88:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=c8b700f1-18b9-4d6c-92cd-1879c3908e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:4a:68:89:7d:c8:ee:62:2c:91:e1:bc:53:
                    3f:bc:70:98:e7:a9:b4:73:7c:36:30:b3:9e:37:ae:
                    51:6e:6c:d2:0f:11:44:6d:cd:ee:cb:bf:77:75:0b:
                    41:00:b1:ed:6b:27:ce:9f:02:f6:0e:65:e7:62:ca:
                    23:70:72:78:6a:a0:2b:f4:55:23:5e:22:de:97:80:
                    e4:ce:bd:88:91:c3:1d:91:fc:04:45:f1:cc:3c:41:
                    5d:da:84:e6:a1:58:2e:a9:f5:c3:85:a1:51:e8:70:
                    14:4c:5b:8e:99:96:a2:58:81:f3:0a:53:40:94:7e:
                    c2:6a:75:f2:52:c6:e5:3e:17:f0:96:db:a4:6e:6e:
                    1c:48:39:07:fa:bc:ad:da:d4:b2:5b:6b:f0:e4:cd:
                    86:79:fa:56:ad:5e:5c:4f:6a:54:92:dc:e4:d7:c7:
                    a0:4f:76:79:77:2e:ce:63:38:66:c5:19:ed:54:d2:
                    54:6f:72:53:07:fa:99:af:af:a2:7f:ad:7b:e4:64:
                    36:76:a5:5e:4a:8d:64:2f:1e:1d:29:c4:05:77:36:
                    00:af:47:39:78:52:91:21:eb:24:49:1b:b7:4d:a9:
                    6f:39:16:37:98:c4:53:cd:19:cf:8a:ca:a6:2b:74:
                    dc:da:4c:3d:7f:78:f5:b1:16:f4:bd:1a:00:1a:69:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:04:0F:33:FC:C4:7F:55:6E:52:9E:36:82:1D:41:91:34:6D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:9c:38:f4:97:44:70:a5:11:b6:9d:99:67:e2:3d:3f:2d:
         cf:6f:f7:58:80:5a:58:6a:70:12:9f:ac:db:91:54:df:8b:d9:
         12:a6:fd:67:a1:47:7f:50:b8:1e:04:f6:7f:dc:df:26:d3:89:
         a0:bf:f6:9b:2f:2a:80:99:d6:92:99:c0:93:f3:83:8a:fc:f2:
         6b:7d:e2:08:33:4f:16:a7:fa:98:9a:a1:25:81:11:29:97:c9:
         48:ef:6f:c1:72:4e:59:61:f2:9e:8d:ca:02:7d:3f:dd:60:d2:
         7e:fb:02:96:83:12:b9:93:66:dc:28:bd:18:93:2d:ae:13:c5:
         43:ea:e6:2b:a2:bd:9e:30:60:12:cd:d0:db:da:ac:9d:ef:76:
         87:04:25:e3:9b:1f:08:46:8b:6e:ac:40:bd:df:11:95:a1:f3:
         98:f6:94:10:4f:62:7c:b2:d4:c8:22:6a:3e:8f:0f:e2:b7:e3:
         bb:26:cc:c5:f3:56:75:1e:32:1e:a8:22:43:68:8f:1e:4b:cc:
         de:ee:4c:21:1a:bd:33:71:9f:11:1d:be:53:f6:b3:36:6a:3e:
         8b:75:de:b5:81:1a:26:03:0f:ce:45:84:22:3b:8a:23:4a:9f:
         90:2b:21:c4:56:b6:2f:b9:02:ad:e5:e1:c5:1d:da:14:89:a8:
         4b:9a:d5:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsRIsOjG9WBKIG0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy
NTQ0MB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
YzhiNzAwZjEtMThiOS00ZDZjLTkyY2QtMTg3OWMzOTA4ZTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8BKaIl9yO5iLJHhvFM/vHCY56m0c3w2MLOe
N65RbmzSDxFEbc3uy793dQtBALHtayfOnwL2DmXnYsojcHJ4aqAr9FUjXiLel4Dk
zr2IkcMdkfwERfHMPEFd2oTmoVguqfXDhaFR6HAUTFuOmZaiWIHzClNAlH7CanXy
UsblPhfwltukbm4cSDkH+ryt2tSyW2vw5M2GefpWrV5cT2pUktzk18egT3Z5dy7O
YzhmxRntVNJUb3JTB/qZr6+if6175GQ2dqVeSo1kLx4dKcQFdzYAr0c5eFKRIesk
SRu3TalvORY3mMRTzRnPisqmK3Tc2kw9f3j1sRb0vRoAGmlmIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBOBA8z/MR/VW5SnjaCHUGRNG18MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5
YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmY3ZTZmMGQtYjY4OS0z
ZGM5LTlmMzYtMWZjNjljYmYzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2
ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj
MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx
ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGCsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAp8nDj0l0RwpRG2nZln4j0/Lc9v91iAWlhqcBKfrNuRVN+L2RKm/Weh
R39QuB4E9n/c3ybTiaC/9psvKoCZ1pKZwJPzg4r88mt94ggzTxan+piaoSWBESmX
yUjvb8FyTllh8p6NygJ9P91g0n77ApaDErmTZtwovRiTLa4TxUPq5iuivZ4wYBLN
0NvarJ3vdocEJeObHwhGi26sQL3fEZWh85j2lBBPYnyy1Mgiaj6PD+K347smzMXz
VnUeMh6oIkNojx5LzN7uTCEavTNxnxEdvlP2szZqPot13rWBGiYDD85FhCI7iiNK
n5ArIcRWti+5Aq3l4cUd2hSJqEua1aI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:40 2024 by rpki-client on console-fra.rpki-client.org