Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d36f0ed-c0d6-3bbb-9509-3580621968bd.roa
File:                     0d36f0ed-c0d6-3bbb-9509-3580621968bd.roa (raw, json)
Hash identifier:          bS0toZq4Nxwuwj4Ft5GkGeRLB4bRFv4ygFwEXafINPU=
Subject key identifier:   27:2C:41:9F:D2:B5:90:C3:7A:06:1A:45:29:7B:56:82:A2:69:96:B9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A6D30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d36f0ed-c0d6-3bbb-9509-3580621968bd.roa
Signing time:             Fri 30 Nov 2018 01:10:06 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:6d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=62a55a05-8a5c-4dfe-baae-b0c33f3d01e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:1e:3e:c6:43:0b:4b:30:66:d1:17:5c:5f:
                    59:18:45:5b:53:ca:73:49:85:4b:3f:6a:f5:2b:bb:
                    25:96:84:bf:ce:4f:a7:24:b2:ea:15:7f:a7:fd:ef:
                    7e:50:d8:a2:7c:bc:b2:51:79:88:39:64:63:ce:0b:
                    39:f3:3a:3f:f3:c0:6d:44:c0:b9:93:40:59:9e:7d:
                    10:2b:da:0a:65:d7:df:49:95:02:d7:8e:68:e9:18:
                    79:40:bd:56:d4:73:37:35:be:a7:39:fa:38:12:bf:
                    24:c2:3d:ac:c1:c0:7d:50:8e:34:0c:46:c1:1e:37:
                    fa:e1:a2:a9:a7:10:88:05:55:5f:43:67:7d:23:cd:
                    5e:20:ae:ea:70:aa:fc:52:ab:27:95:7b:1b:87:0f:
                    4d:8e:8d:e9:e7:6f:d6:81:5a:da:e2:42:44:ce:b3:
                    b4:72:68:1c:2d:96:77:04:08:fc:a1:e8:17:20:4c:
                    84:2d:63:f5:37:99:71:5d:95:1f:f8:2d:e3:01:00:
                    d2:f2:e8:7a:e8:57:57:a7:37:fe:2e:f7:10:f9:c1:
                    83:b6:7c:61:39:21:4f:71:8f:16:8d:50:52:95:73:
                    16:d6:92:57:1a:ea:a6:08:d6:3f:8d:b2:4f:f2:4a:
                    30:24:5b:8b:3f:fd:de:d8:b8:47:82:63:97:ef:23:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:41:9F:D2:B5:90:C3:7A:06:1A:45:29:7B:56:82:A2:69:96:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d36f0ed-c0d6-3bbb-9509-3580621968bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:12:37:1c:9d:df:c4:46:72:42:b8:b3:6d:e0:1e:73:e7:
         28:7d:23:c5:04:36:f7:d3:19:b6:a8:2c:19:22:78:3e:43:f9:
         b2:1c:a8:8f:57:3e:98:a8:34:f0:c3:dd:2c:9e:d0:15:d8:57:
         77:0a:60:87:e3:34:ce:a4:01:16:0f:81:af:10:93:11:df:3c:
         42:25:00:b1:f4:ee:fe:df:9e:6e:36:c4:06:e1:b9:b2:0e:a0:
         f6:a8:0a:44:bf:c5:5d:b0:da:1a:2a:82:c0:ed:0d:9d:a4:71:
         ab:db:0c:bb:8a:b8:6b:b5:93:00:60:ec:a1:f4:da:ef:ab:17:
         a9:4d:7c:cc:19:c4:9c:37:d5:41:c1:a5:ad:c5:bd:c5:d4:9f:
         ba:97:6b:80:a6:83:00:0c:35:c2:99:79:a3:b5:46:73:27:9b:
         4d:48:f1:3b:ea:83:85:17:d7:a3:44:8b:1e:02:fe:fe:c0:5b:
         b2:89:45:04:97:2f:ae:f7:26:36:2a:7d:2f:8f:0a:ab:b8:66:
         33:21:ef:35:a5:d5:12:08:b8:97:47:c9:79:72:57:a6:84:27:
         d7:30:ad:2a:87:db:b5:d6:88:fc:b4:75:44:ff:fb:f0:e0:4b:
         93:1e:06:c3:ce:09:ba:8b:e5:b2:77:87:a7:51:c3:6a:f6:9c:
         e4:50:02:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:08 2024 by rpki-client on console-ams.rpki-client.org