Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2661fc25-96c4-3ef0-befc-24f990019098.roa
File:                     2661fc25-96c4-3ef0-befc-24f990019098.roa (raw, json)
Hash identifier:          1KaMfluuCJ+93ncAKzHYNMv74Kx5HhlkhsBxRfnQ4GU=
Subject key identifier:   CE:35:47:54:1D:4F:E0:2D:11:8C:0E:0F:2D:5D:D1:50:57:8B:0C:7F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A5011
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2661fc25-96c4-3ef0-befc-24f990019098.roa
Signing time:             Fri 30 Nov 2018 01:09:59 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:50:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=d5e33a1a-5434-4cc5-a695-2e4f52005e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:6f:0a:ea:27:27:a7:51:21:5e:49:bd:dc:
                    93:b4:f4:30:0b:fd:22:8e:32:66:53:42:47:32:be:
                    73:d1:24:18:b8:52:89:4b:41:35:db:64:7f:d5:c0:
                    8d:7a:96:f5:ef:48:40:2b:4e:2b:c2:65:6c:0c:4a:
                    a9:b8:f5:8d:9b:80:51:9d:88:7e:14:c4:54:4f:92:
                    61:12:48:b1:87:12:e1:40:56:b7:35:ff:39:4a:ef:
                    49:1d:86:09:e0:33:85:86:68:a8:30:e9:74:c3:bd:
                    4b:e4:ce:22:3e:2b:7d:e9:59:f0:ee:ad:d7:48:25:
                    bf:e9:8c:44:21:0f:b7:e3:9e:e3:62:b6:51:3d:67:
                    56:ac:e8:51:8f:81:64:d8:0a:3d:c4:1e:67:2c:92:
                    f2:3f:7e:d0:69:25:27:11:01:4d:b1:26:e3:e7:3b:
                    79:01:b5:77:ad:11:0f:ec:68:e6:c1:38:f9:b8:7c:
                    58:83:dc:92:f9:a3:84:36:8b:3a:dc:9f:54:55:18:
                    0d:6f:58:c4:1a:cb:17:95:3c:1f:61:e1:b0:54:99:
                    06:76:f3:ec:e0:63:a9:85:94:cc:3d:69:ef:21:6f:
                    a9:96:cc:49:5f:59:bb:b3:16:01:72:80:ed:df:9c:
                    ba:68:05:ff:ef:44:ad:c8:35:b8:07:c9:73:35:7d:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:35:47:54:1D:4F:E0:2D:11:8C:0E:0F:2D:5D:D1:50:57:8B:0C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2661fc25-96c4-3ef0-befc-24f990019098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:fd:9c:86:53:4b:62:b0:c6:64:f6:a5:43:24:2a:b3:b5:2f:
         d6:34:80:0c:27:fa:77:13:19:ee:3c:07:5a:97:b7:de:49:a0:
         9b:50:b4:1e:d3:3f:e2:26:68:9a:2a:e9:2c:e5:4b:d5:9b:d9:
         a0:04:84:c6:f9:a3:52:ec:ef:1b:07:e2:c1:69:a2:69:fb:50:
         9f:88:74:a1:81:4e:76:b6:22:53:5a:d3:f5:f3:ae:12:f4:5e:
         1b:b8:3d:60:69:7c:fa:13:5a:12:52:fe:7e:11:28:69:2c:90:
         42:19:e0:ac:33:7c:ca:7a:13:f2:f7:23:73:96:02:00:7f:58:
         05:9b:a7:9f:06:30:b9:fa:26:a7:35:7e:17:d7:fb:43:59:b4:
         9a:8a:63:25:b0:1e:8c:6c:dd:c2:b5:87:92:b8:78:3a:f9:df:
         c2:3a:76:22:d4:8d:85:88:73:18:43:58:4a:b0:c4:27:6b:be:
         18:b6:28:9b:0a:7f:b9:3c:7a:d4:78:3f:80:8f:4b:17:df:99:
         90:db:24:98:a7:62:a1:6b:2c:bf:08:ad:b1:ac:fc:31:dd:72:
         1a:da:2b:90:54:95:16:21:49:f1:2a:f9:c0:ea:6f:4d:23:9e:
         e0:68:2e:90:31:f8:a9:3b:b6:36:c0:ba:b1:ad:fb:1d:6d:68:
         32:3b:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:55 2024 by rpki-client on console-fra.rpki-client.org