Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29340a41-d0b5-32f6-9fbe-5d3b2e5764dc.roa
File:                     29340a41-d0b5-32f6-9fbe-5d3b2e5764dc.roa (raw, json)
Hash identifier:          fOHOUdrRmcMT+4md09iyGxbVArN9p/qBRESsn8/PNMA=
Subject key identifier:   56:58:A0:C9:9A:E0:F5:1B:0C:80:10:D6:AF:DF:B6:01:BA:C1:94:CE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583BCE50FF4FC6DDBF0C6882EF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29340a41-d0b5-32f6-9fbe-5d3b2e5764dc.roa
Signing time:             Wed 03 Nov 2021 04:00:00 +0000
ROA not before:           Wed 03 Nov 2021 04:00:00 +0000
ROA not after:            Tue 30 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:ce:50:ff:4f:c6:dd:bf:0c:68:82:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  3 04:00:00 2021 GMT
            Not After : May 30 04:00:00 2028 GMT
        Subject: CN=d44d87a0-84a9-44ce-bee1-15804a74ca56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:5e:33:9a:91:f4:a5:f3:ed:ee:16:6f:d5:
                    13:86:b9:78:16:1b:46:80:b3:76:09:97:2c:bb:4e:
                    b6:9d:79:ff:58:ed:ba:d5:0c:8e:1f:9d:54:9f:7f:
                    62:2b:da:e1:93:f9:cf:de:d7:3a:4d:54:ff:dc:4b:
                    c6:80:62:e2:10:80:c6:72:00:e7:8e:e8:9f:f0:67:
                    4d:47:8a:a4:d0:72:ca:29:cd:23:b0:6c:2c:ee:5f:
                    2f:ee:7a:fc:15:18:04:66:ce:13:42:f4:d3:12:02:
                    ae:b1:63:6a:de:e6:d9:ec:63:de:fb:bd:13:0c:82:
                    96:60:78:45:db:f2:46:cd:3c:d1:3f:15:97:4a:4d:
                    e3:bb:8d:d2:aa:c3:c1:c0:fe:79:5f:2e:7d:7d:58:
                    7c:9d:20:bb:fd:50:8e:94:d2:a7:4f:8e:d1:34:78:
                    c5:c4:99:db:12:37:8f:b7:c1:a2:f4:3f:17:cb:c4:
                    ac:a8:2f:2e:c1:1f:0c:eb:0b:3b:46:b1:42:85:48:
                    53:fc:6c:89:81:fa:d6:8e:57:9a:62:44:bd:e3:c4:
                    48:7a:1c:82:ad:f6:d2:67:03:23:25:07:8f:89:08:
                    b7:91:ed:97:8c:f5:68:ce:e7:ac:89:05:3b:90:59:
                    2a:7e:ca:56:4b:0a:2e:78:78:b0:00:e2:aa:ea:fa:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:58:A0:C9:9A:E0:F5:1B:0C:80:10:D6:AF:DF:B6:01:BA:C1:94:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29340a41-d0b5-32f6-9fbe-5d3b2e5764dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:45:d8:0a:a7:e1:cb:e5:e4:92:8c:5a:9c:d0:20:7c:4a:
         fb:1e:ff:0f:55:7c:ac:4b:5f:8e:02:64:56:bd:3c:11:bc:af:
         82:af:1b:30:4d:e2:23:04:37:72:50:bb:14:a9:7a:09:fe:22:
         c8:2e:63:97:2a:65:4d:3d:67:03:e1:53:44:e8:32:4c:9b:44:
         50:b3:d0:46:33:be:b9:5b:ff:8d:43:05:70:f4:ff:43:ff:e3:
         a4:0d:7e:18:06:20:5d:32:0d:22:05:e2:49:ae:fa:13:3e:06:
         3b:32:74:11:79:4d:7a:1d:8b:d1:86:57:0f:30:34:0d:33:e4:
         4b:f6:9f:7b:ba:a9:94:8b:14:c4:1e:d3:c0:3d:64:95:3c:0a:
         95:9a:60:7f:d8:a0:0a:c6:44:1c:96:44:d7:f3:ae:97:a8:f9:
         96:e0:8d:81:2d:42:7a:fc:2b:b1:3e:be:e4:e5:fb:d8:6f:39:
         d1:50:99:69:fc:69:14:58:29:9c:a9:16:ae:e6:cc:29:b9:bc:
         de:10:a8:72:f2:31:c7:a1:e6:13:61:98:d9:69:64:64:6a:d5:
         a8:8a:27:85:ae:a5:a5:eb:e2:d3:54:52:b5:58:fd:77:91:e1:
         bb:56:0f:d4:74:e9:32:57:bf:13:b0:32:86:b1:74:d9:ff:86:
         a2:6b:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:08 2024 by rpki-client on console-ams.rpki-client.org