Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f508264-2e24-3629-bade-977b8b09fcc0.roa
File:                     1f508264-2e24-3629-bade-977b8b09fcc0.roa (raw, json)
Hash identifier:          EwK67mI7w1BQEMb+vXM/EdLzVRfF65y4W8UPBV0N5SQ=
Subject key identifier:   EE:F5:73:23:FD:A2:CE:0F:AC:09:04:38:56:BC:49:5E:C0:1F:6A:EF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC169EB105E4B
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f508264-2e24-3629-bade-977b8b09fcc0.roa
Signing time:             Fri 05 Apr 2019 01:15:12 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Tue 22 Jun 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:eb:10:5e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jun 22 04:00:00 2027 GMT
        Subject: CN=deb61af8-07d3-4934-9e9b-302f16be6376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:9d:d2:56:4a:dd:9e:cf:65:b0:f3:90:52:
                    b5:d5:5e:fb:e9:b0:5f:3c:35:da:b8:1b:66:ef:81:
                    6b:c3:b7:86:25:cd:72:67:33:17:97:4f:a1:c2:fc:
                    f6:90:07:ef:f0:ea:30:b3:53:15:c2:78:71:b5:ba:
                    56:44:f6:7e:cc:50:12:56:3b:48:3b:6c:ca:f8:08:
                    fd:cf:5a:d5:51:2c:67:aa:9f:b6:d5:2c:4c:2c:26:
                    a8:fa:f4:63:73:74:5a:9e:a0:b1:85:fe:81:8b:3d:
                    ed:db:14:53:16:f1:82:e0:a5:d2:20:9f:5f:c4:bc:
                    dd:07:9d:30:6d:ed:a6:46:a4:93:39:c8:60:44:7c:
                    d1:42:ea:83:c4:24:ca:b7:2e:06:7b:01:30:97:bd:
                    9f:dd:6b:96:a1:bc:7b:ca:28:3d:c1:11:71:31:05:
                    68:50:7d:92:79:11:af:fd:58:47:86:93:09:c4:96:
                    58:df:a2:15:49:3d:43:0e:f1:19:a3:7c:f8:15:df:
                    36:da:6d:4e:4f:69:e5:64:7a:4d:7c:11:dc:ba:53:
                    c6:06:d6:b7:02:08:ac:89:c8:a2:98:b2:d1:6f:94:
                    be:2d:47:65:b7:1f:21:b0:a5:02:cd:ba:ed:d7:e6:
                    63:d1:bb:db:9b:63:47:88:6b:5d:f0:48:e5:a7:01:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F5:73:23:FD:A2:CE:0F:AC:09:04:38:56:BC:49:5E:C0:1F:6A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f508264-2e24-3629-bade-977b8b09fcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:07:bc:a4:82:14:9d:c7:be:0f:71:60:db:a0:6f:8c:40:8c:
         23:3d:32:09:c7:e0:45:3e:b0:fa:cc:d4:a9:67:6b:50:2d:08:
         13:28:04:42:7f:73:fe:0e:40:af:34:86:df:c1:45:3c:1a:4a:
         ec:3a:46:d6:e7:74:6a:a2:8e:ea:45:fa:59:a9:6e:9d:f6:5a:
         83:84:e6:da:4b:fc:a0:58:25:4f:35:85:18:46:3f:54:dd:ac:
         f2:09:61:01:09:e9:0f:bd:12:ea:16:66:67:a7:1e:eb:2e:c8:
         8f:5d:32:96:99:0e:77:14:85:56:13:5b:41:1e:49:72:8e:18:
         27:6c:84:8c:c4:af:4c:01:4e:66:a1:a4:dc:70:45:6f:a1:5f:
         70:4a:4d:ce:5a:ce:b9:59:76:7b:fd:e8:8f:59:0a:24:1f:3d:
         e6:a5:40:c9:b8:e4:0c:88:53:c4:3b:cc:47:de:d9:de:1f:20:
         a8:a3:16:d4:e4:36:75:ef:3b:0b:36:35:ba:e3:90:78:9e:b7:
         32:1c:4f:ea:80:2c:1b:cf:98:b0:b2:36:87:a2:6a:73:72:14:
         5b:a6:71:ac:cd:4e:fd:93:01:a9:88:a2:14:f9:a9:77:29:1e:
         45:54:91:bc:72:ba:f5:5f:5b:28:eb:14:1d:87:48:7f:75:1e:
         ac:62:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:54 2024 by rpki-client on console-fra.rpki-client.org