Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c4121d-0d54-3a8b-aa32-49df59582450.roa
File:                     20c4121d-0d54-3a8b-aa32-49df59582450.roa (raw, json)
Hash identifier:          exOHesTaPgF8RbyJeeI+UOTfUhs++LRn2PUfSuhBKds=
Subject key identifier:   D7:35:F8:21:95:65:8D:75:7D:76:44:E3:3A:36:4F:E5:E2:A0:E4:F2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583FFF34BF8DE0AE8127DAAAF4E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c4121d-0d54-3a8b-aa32-49df59582450.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ff:34:bf:8d:e0:ae:81:27:da:aa:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=1bf5f848-1fcf-4d66-adad-e02651dcb4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:b1:09:f0:78:e7:01:dd:de:8b:94:88:53:
                    d0:88:3e:83:79:08:ee:8f:75:f4:35:59:d0:60:50:
                    35:38:10:39:06:f4:e5:f2:13:bf:f3:62:b1:0b:08:
                    fc:16:a7:e9:04:72:ef:ac:d1:0e:47:bf:69:a0:4b:
                    22:25:4e:aa:0e:d9:76:fb:6f:a4:24:7e:d4:da:f8:
                    f2:4b:04:d4:dc:f1:00:90:44:5b:ba:70:1e:16:13:
                    e2:9d:d7:39:51:b7:f9:c9:b6:de:44:e1:e8:65:65:
                    1e:36:a8:67:09:97:97:3d:4c:81:75:89:ea:9b:97:
                    2a:f7:66:d4:a9:61:d7:82:2e:52:e8:f5:50:0e:90:
                    b1:82:2d:2e:f8:30:bf:06:7e:ac:ad:c5:e2:bf:da:
                    f2:ea:75:9c:de:6f:09:29:48:1b:be:9f:95:a0:b2:
                    05:43:ba:0c:8f:f6:34:1c:21:cd:65:b2:6e:21:95:
                    61:39:56:e3:73:bd:e9:32:0c:6d:99:df:19:ab:59:
                    df:3d:f0:69:a4:a1:a1:0e:40:de:93:b2:85:a9:cb:
                    d2:ae:0c:2c:09:09:60:b3:ee:2f:9e:88:3c:02:ca:
                    a9:ca:f0:d7:06:2d:5e:dc:d2:ee:98:72:b5:d1:ae:
                    7e:0b:f7:15:92:c2:f7:98:81:82:56:fa:85:8f:b8:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:F8:21:95:65:8D:75:7D:76:44:E3:3A:36:4F:E5:E2:A0:E4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c4121d-0d54-3a8b-aa32-49df59582450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:a8:57:fc:c8:6b:35:99:2c:8e:3e:26:43:b4:ed:c9:df:
         11:23:d2:95:26:42:c0:12:7b:72:14:7d:9a:9f:8d:24:e7:b9:
         78:70:38:2f:3c:12:47:0a:0b:26:3b:41:e2:5a:d6:da:0f:5b:
         4c:18:bc:79:a0:34:22:96:4e:38:4f:de:cf:c0:3e:97:15:5a:
         62:11:99:90:8a:00:17:eb:e6:4f:3a:55:72:2c:7e:c0:7a:01:
         cb:1f:e6:b9:6d:54:e1:1b:27:36:92:52:3f:1e:a1:30:cd:98:
         0c:17:ed:cd:6f:ed:8a:be:0f:ff:22:b7:d6:66:b8:06:a0:23:
         d6:2d:9b:88:76:b0:03:e0:c6:f6:63:a8:87:84:4e:d9:a5:96:
         67:77:f4:9b:71:3e:79:8e:68:58:65:b1:87:ff:d5:b6:5c:d0:
         3d:98:a2:01:e0:e7:b6:8e:93:bf:46:71:77:6e:0e:83:02:27:
         ab:12:fd:f4:87:df:6c:40:60:fc:64:31:b0:b6:b1:f8:a9:e1:
         91:02:df:5f:1f:8d:0d:d3:fa:f2:a1:39:66:56:ae:47:9a:6d:
         d5:77:42:77:f6:fc:1d:9e:0e:d8:d1:2a:7a:4d:f2:df:4b:3e:
         25:9e:da:03:34:35:15:e4:41:be:b8:87:44:fd:8d:e8:68:91:
         a2:68:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:04 2024 by rpki-client on console-ams.rpki-client.org