Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/01be7613-cc25-3470-9b06-5179b07f9865.roa
File:                     01be7613-cc25-3470-9b06-5179b07f9865.roa (raw, json)
Hash identifier:          i/mnA3nxcXCngoZLUMJczlLL2+ptbm1BICAmIIYoDnU=
Subject key identifier:   3E:23:05:A0:15:57:11:C5:ED:FA:88:D2:6A:EB:1A:6E:57:4C:6F:35
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583CF584DE2F1E2F2B9F3299C3C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/01be7613-cc25-3470-9b06-5179b07f9865.roa
Signing time:             Thu 17 Feb 2022 05:00:00 +0000
ROA not before:           Thu 17 Feb 2022 05:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.71.4.0/24 maxlen: 24
                          172.71.5.0/24 maxlen: 24
                          172.71.6.0/24 maxlen: 24
                          172.71.7.0/24 maxlen: 24
                          172.71.8.0/24 maxlen: 24
                          172.71.9.0/24 maxlen: 24
                          172.71.10.0/24 maxlen: 24
                          172.71.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f5:84:de:2f:1e:2f:2b:9f:32:99:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 17 05:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=9cae4a2b-d5c3-4fd9-b75f-9efd075d6c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:b3:c7:83:44:c1:36:3e:0c:47:dc:71:bf:
                    31:14:e4:e1:03:c7:c2:51:a5:00:4d:50:7d:23:44:
                    34:98:b6:77:f3:d5:85:cf:22:06:09:81:3f:b5:78:
                    96:55:9e:fb:ef:4d:7a:d5:40:cd:50:93:b4:3d:8e:
                    74:a4:ed:0a:c7:44:f3:f0:c9:7f:2c:03:4b:10:e3:
                    33:ee:ac:3a:58:a1:6e:f3:1b:93:c5:9f:36:86:74:
                    3d:0b:8b:9b:05:e0:45:65:ca:77:57:0a:dc:9e:22:
                    78:8e:5f:50:b7:77:dc:35:50:80:29:dd:1a:0f:37:
                    0f:18:b0:c4:25:f5:0d:21:de:c7:19:8e:13:7a:da:
                    b0:d7:ee:cc:6b:cb:23:e5:e5:fc:ec:55:df:f9:7c:
                    fb:5a:89:6a:c6:6c:21:99:0b:5f:aa:d1:4a:9f:8f:
                    52:08:d1:03:ab:e6:54:4b:26:da:d5:44:c8:57:e2:
                    59:f0:eb:1a:5f:53:c8:e1:0c:d7:5b:fe:c7:71:9b:
                    04:b2:3c:b3:fa:aa:1d:d0:83:b1:d5:82:2a:28:cb:
                    b3:26:41:2b:18:88:91:91:fd:68:ef:95:2e:04:66:
                    eb:92:e0:b4:7a:f2:bc:96:40:77:3c:2b:06:84:09:
                    68:11:c7:4d:7a:be:9b:6b:6a:bd:e6:8d:52:30:36:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:05:A0:15:57:11:C5:ED:FA:88:D2:6A:EB:1A:6E:57:4C:6F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/01be7613-cc25-3470-9b06-5179b07f9865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.4.0-172.71.11.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:62:fa:f4:23:42:97:a4:15:f4:e9:16:5b:cf:c7:11:f9:
         51:4d:25:9f:6d:0c:e7:1c:6d:0c:9a:b9:8e:e9:ec:17:7e:0a:
         17:ce:fb:a7:9d:f6:0f:6f:22:3d:ce:7d:e8:f8:93:e0:ed:e0:
         98:74:1d:93:30:bf:65:2c:a3:5f:cf:fb:3c:02:95:6e:76:3c:
         cd:fc:6c:2b:1a:4e:16:4e:0a:62:5a:c9:f1:f7:2e:c2:dd:f2:
         86:d0:5e:6f:cf:7b:e0:5d:0e:da:e8:7f:7e:4c:93:3d:47:c2:
         8f:99:c4:c8:af:3a:cf:ae:a8:97:a4:3d:4d:14:52:77:75:75:
         20:58:4d:0b:4e:09:93:7f:f5:99:b8:b4:b5:80:05:d7:53:ac:
         23:65:71:27:b3:16:56:11:97:93:c4:37:54:5d:e5:a5:f2:2a:
         c6:f6:38:b2:72:92:06:02:39:86:53:92:11:fd:85:8e:57:7a:
         a3:6d:45:09:e0:53:31:64:35:40:b6:b2:29:39:69:cb:e2:35:
         a3:8b:7d:b0:08:fb:30:a3:27:cf:01:b1:25:e8:d9:87:49:32:
         c4:ea:5e:09:12:4c:0d:09:6a:90:4b:11:87:1c:50:76:ed:28:
         f1:69:3d:4f:50:ae:24:3b:54:21:1b:2d:ea:3c:c6:8d:35:40:
         e9:76:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:58 2024 by rpki-client on console-ams.rpki-client.org