Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/008cc679-bc51-3465-a9fc-8d4ad29668fd.roa
File:                     008cc679-bc51-3465-a9fc-8d4ad29668fd.roa (raw, json)
Hash identifier:          UPH5ZcPtNC73TvlFgj2UQ4WiOtRkOoKYDE3L7/46FHE=
Subject key identifier:   9E:F6:12:AE:5E:F1:AD:29:8B:D3:88:FA:F8:B6:79:85:05:BD:88:E0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473ADE0697981B607347185980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/008cc679-bc51-3465-a9fc-8d4ad29668fd.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:de:06:97:98:1b:60:73:47:18:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=0784c559-6007-4558-adcb-f6002abc76d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:e4:f1:f5:8b:38:fa:ee:fd:5a:b6:27:23:
                    8b:be:00:97:41:49:6a:30:cf:ff:ad:d3:0c:b1:7e:
                    81:79:38:12:d9:e3:b9:da:6a:b6:76:22:80:8e:35:
                    0f:2a:e5:44:b7:97:5e:87:87:70:3b:9d:b3:31:da:
                    00:8c:b4:f9:3f:ff:cc:f7:41:48:d8:81:6c:5b:5d:
                    bb:dd:fa:d6:53:92:96:de:4b:db:51:5f:58:f4:a3:
                    23:77:fd:98:a9:13:90:03:6e:39:49:d0:5c:96:14:
                    6c:a7:c1:88:0c:ae:8a:08:3c:13:20:de:c2:06:69:
                    63:de:ea:5b:3c:b1:55:5d:7e:6e:b4:67:fb:2f:40:
                    29:0c:06:b1:24:9f:92:d0:ac:06:60:99:e5:e1:03:
                    0c:78:32:83:37:75:54:71:f7:16:89:8c:41:30:6f:
                    09:24:54:5a:2a:bf:7c:f8:59:97:63:8a:a2:41:bb:
                    67:48:fd:46:a1:a2:b0:df:c2:d9:cc:a4:fa:28:43:
                    65:b9:06:50:d0:52:9d:d7:e4:33:bc:82:ff:d7:96:
                    89:36:4a:10:ab:fe:ce:fb:0b:95:42:4d:f4:fe:b8:
                    f2:c7:e2:16:fd:57:16:44:ee:de:fa:b3:5f:15:cd:
                    9a:22:f5:cb:b5:a3:36:5a:28:70:99:0d:15:ee:89:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F6:12:AE:5E:F1:AD:29:8B:D3:88:FA:F8:B6:79:85:05:BD:88:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/008cc679-bc51-3465-a9fc-8d4ad29668fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:68:47:04:76:7d:93:ad:92:3e:83:29:d9:28:ea:e0:11:27:
         77:ff:15:73:be:10:c7:16:11:4a:ac:b2:4c:77:ef:e1:2f:bc:
         cb:c2:15:df:44:84:76:7d:62:5a:0d:6c:b8:8c:3a:02:ca:56:
         ba:6c:68:55:6c:9f:ee:4f:43:d4:4b:bc:d7:25:d5:25:4d:85:
         26:6e:b4:ac:9b:4a:f8:94:ff:15:ae:8d:cb:f9:12:03:f4:8a:
         89:c4:ae:90:57:21:a9:7f:dd:cc:2d:50:b5:73:4f:dc:a1:c7:
         92:cd:a0:dc:e7:30:54:f8:7b:13:06:12:7e:18:45:72:20:1c:
         e1:e6:11:4a:19:77:c2:ae:a2:94:46:ae:69:79:62:89:82:30:
         cd:61:03:c5:a9:01:4b:90:d3:85:52:3f:75:dd:48:4e:e1:7d:
         3c:73:ce:49:24:f4:25:4c:79:ad:d0:80:52:f1:f7:d5:d0:f5:
         17:4c:3f:2f:bb:51:b3:04:e2:f2:28:a6:3e:b8:35:cc:1a:24:
         04:31:60:8d:77:d0:54:8b:41:24:73:30:f5:e3:f3:aa:75:81:
         a0:84:1b:5d:4c:6e:6e:9a:07:2f:f6:51:1b:7a:31:f7:dd:98:
         72:52:f2:3b:0c:fd:7d:2d:a9:06:96:42:ce:bd:b1:45:31:6e:
         95:c4:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:50 2024 by rpki-client on console-ams.rpki-client.org