Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/240b06e4-ec49-315b-bc69-4f72dfdc70a8.roa
File:                     240b06e4-ec49-315b-bc69-4f72dfdc70a8.roa (raw, json)
Hash identifier:          aA3hlnpk3sBWr3KL5YkDI4lN7+rjcDd5R7z67t33bYI=
Subject key identifier:   86:A9:A2:C2:8F:E6:9F:03:6B:B6:1F:8A:D1:47:99:DF:88:B0:D4:27
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A4566
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/240b06e4-ec49-315b-bc69-4f72dfdc70a8.roa
Signing time:             Fri 30 Nov 2018 01:09:56 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=9f6cb2a9-c0a7-42fe-bbf3-b0d45c22bdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:89:6e:2a:d8:0b:c4:d0:ba:7f:da:66:4f:
                    78:64:9b:b3:bb:d4:92:92:b3:a1:58:71:42:a8:ca:
                    23:8e:35:09:9a:12:6f:48:7e:72:67:d3:2e:54:66:
                    86:ea:38:31:32:e1:fa:77:9d:3b:6d:7c:41:69:51:
                    3e:87:55:b7:0d:70:f2:75:12:8b:e5:62:33:a2:01:
                    86:a2:cc:76:c3:a0:fb:4a:5f:d2:ab:ad:3d:76:35:
                    8a:a2:f4:32:ca:c9:da:63:ff:39:ac:5f:be:7a:be:
                    46:7a:8b:0f:20:18:23:3d:7c:e8:6c:5f:5a:48:79:
                    9d:01:88:4a:21:4c:ae:52:e9:3b:1f:de:54:6e:2b:
                    a4:dc:ea:d6:46:ef:4a:7d:04:1f:3a:82:c2:5b:8b:
                    ad:d0:a7:91:9b:26:98:bb:e2:a1:de:59:fb:3b:55:
                    ca:9a:01:c6:b0:b8:4b:39:c7:da:82:f5:1e:c8:c3:
                    25:e7:a5:5f:85:dd:4b:d9:7b:4c:dc:3c:f6:11:e5:
                    79:1b:2d:71:01:b2:ae:88:31:4f:5f:78:04:97:59:
                    ef:67:e1:a1:7d:26:34:0a:3b:5b:7f:28:43:9b:78:
                    e1:3f:a8:3b:37:b6:e9:28:4b:b9:6b:0d:9c:af:e8:
                    ef:4c:0f:1a:7c:2d:05:b5:29:24:d5:9f:38:02:44:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A9:A2:C2:8F:E6:9F:03:6B:B6:1F:8A:D1:47:99:DF:88:B0:D4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/240b06e4-ec49-315b-bc69-4f72dfdc70a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e9:94:ea:55:76:4c:85:76:8f:d5:8b:79:7b:4d:3b:e2:7f:
         0e:be:f3:29:e9:8b:aa:c0:30:96:e4:59:7f:28:9c:e0:62:68:
         cd:5e:f5:80:90:af:2e:bd:b2:d2:4c:7b:27:c9:69:4a:9f:4a:
         96:13:28:a7:67:2a:62:84:ec:08:0a:10:d5:ac:38:db:d1:fe:
         3a:b3:16:c4:40:44:50:ac:a7:5e:e9:f2:c6:48:5d:88:95:c8:
         f7:c5:88:fa:28:aa:8e:43:5c:27:49:d8:77:00:a5:55:5e:11:
         cd:ad:04:96:79:0a:48:ec:1b:57:0f:b6:44:de:8a:aa:61:96:
         2b:ca:01:9c:d1:5c:ed:55:3a:99:d0:94:0b:d2:51:8d:e7:eb:
         e3:2f:44:fc:82:24:93:fa:9e:b8:3a:a4:61:7f:3b:17:65:ba:
         8f:ea:78:20:35:a0:5a:d9:00:c4:b2:f3:aa:ff:10:16:88:be:
         8b:74:a1:78:01:cf:24:0b:4f:07:ed:2a:de:de:1a:26:da:1c:
         85:66:49:ea:84:b5:8b:4f:f3:44:6f:fe:a7:55:98:40:be:8f:
         f4:5d:95:d5:80:f1:b1:c9:5d:82:cc:f2:2c:80:4f:6c:22:af:
         ab:19:c4:e7:cc:78:8a:78:b7:b8:2a:0c:38:9e:cd:51:3e:11:
         ec:bb:6e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:20 2024 by rpki-client on console-fra.rpki-client.org