Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/014170d1-894a-34ff-9ce2-04f3a354060a.roa
File:                     014170d1-894a-34ff-9ce2-04f3a354060a.roa (raw, json)
Hash identifier:          G5uB/6sBQQxH773IWDzpuCWz6/fHe6J2GqAd4v3RQVk=
Subject key identifier:   32:9F:66:6D:DD:95:5E:34:D3:7D:19:C7:77:70:9E:8B:B6:24:0A:AC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285840018C7A018AD7BF31A44837A8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/014170d1-894a-34ff-9ce2-04f3a354060a.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:01:8c:7a:01:8a:d7:bf:31:a4:48:37:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=3cbdbe23-99b9-4850-8778-97ceede63b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:09:ed:67:4f:c3:3f:8f:34:26:8c:7f:4d:
                    c0:a6:25:18:01:43:a8:ff:4c:29:55:a1:d3:71:bc:
                    78:c2:de:2b:11:9c:95:f8:7d:3a:ff:e4:9d:79:7a:
                    24:eb:4c:fc:45:a8:b8:24:b6:c8:84:59:da:b3:cb:
                    9b:72:4b:f9:2d:cc:7e:6b:e8:7e:25:e5:16:11:1d:
                    23:cc:b0:6d:7b:1b:fe:da:40:5a:8a:99:be:6a:2b:
                    d8:f1:9e:96:70:1b:40:96:1f:b1:46:41:c5:51:de:
                    31:98:5d:da:23:03:9e:b2:94:f4:58:fe:a8:62:a4:
                    88:fc:ba:9e:d1:13:cc:88:eb:9a:4c:3b:40:d9:ca:
                    76:fa:66:06:30:8b:d0:91:61:31:09:bd:6b:d0:45:
                    96:55:46:b6:2a:2b:c3:f8:50:84:4e:7f:70:6f:8a:
                    76:75:d9:64:9f:11:45:1b:b4:09:47:04:36:33:a7:
                    b9:4b:08:99:31:b2:ee:7f:3f:3e:84:d4:97:d0:23:
                    2b:7d:f5:50:71:92:79:94:7a:39:0f:a4:f8:00:07:
                    66:c0:72:15:7d:fd:e5:79:38:64:8d:82:94:85:c1:
                    20:94:43:a8:a3:a6:c8:53:f5:3f:0c:ac:90:cf:e2:
                    91:0a:94:97:ae:68:26:f3:3a:c0:9b:2f:1b:01:2b:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9F:66:6D:DD:95:5E:34:D3:7D:19:C7:77:70:9E:8B:B6:24:0A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/014170d1-894a-34ff-9ce2-04f3a354060a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:aa:33:f1:f6:7b:a7:18:a2:30:55:b7:90:43:b7:78:ce:
         88:20:2f:67:65:40:fc:9e:12:9d:6f:67:92:c0:3c:28:7e:57:
         ac:4d:f3:71:3e:87:4d:09:77:e4:28:2d:50:7d:59:4c:f4:f9:
         e6:e1:f5:47:59:85:fa:b6:f9:39:6a:6b:30:f6:07:b9:5e:29:
         7f:ae:59:93:89:46:eb:0d:19:77:f5:2c:92:19:1b:dd:c9:fd:
         15:c1:17:c6:99:f0:be:e1:fa:3b:79:c1:15:dc:3f:57:b7:33:
         0c:e7:a4:c1:ce:52:a7:64:ff:c5:64:47:c3:51:b6:84:e8:c4:
         bc:eb:3a:8d:df:05:1c:ab:c4:e3:3a:26:a4:24:88:d7:f5:44:
         a4:cf:8d:f3:fd:67:0c:df:ee:f1:a2:49:cd:90:d5:88:e0:f2:
         23:2e:7a:fd:c8:c5:98:8e:55:19:07:f8:f4:b0:9c:d8:9a:58:
         f2:cd:31:1d:50:f6:74:ef:c6:61:cc:f2:f7:23:bb:cc:32:fc:
         d7:c1:13:57:3a:cf:bb:e0:93:24:9d:d7:9a:85:e0:58:fe:07:
         95:3a:4a:12:0e:a5:45:e5:9c:ea:93:51:9b:5a:f8:6f:45:f5:
         a9:2d:b0:67:07:71:ac:7c:0e:52:95:35:95:b4:57:96:cb:30:
         34:69:4f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:18 2024 by rpki-client on console-fra.rpki-client.org