Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d91060-541f-3136-8a62-699e5d56fbd9.roa
File:                     29d91060-541f-3136-8a62-699e5d56fbd9.roa (raw, json)
Hash identifier:          d9jVMkDmYztktegRECkqIqf91nEIpHsq3Ch2WUlbl74=
Subject key identifier:   0C:08:54:8D:35:A0:F8:EA:EC:94:82:05:30:0F:30:42:0E:58:47:36
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583A712F0C2A95AE8F8DEA7B73C1
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d91060-541f-3136-8a62-699e5d56fbd9.roa
Signing time:             Thu 01 Jul 2021 04:00:00 +0000
ROA not before:           Thu 01 Jul 2021 04:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:71:2f:0c:2a:95:ae:8f:8d:ea:7b:73:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  1 04:00:00 2021 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=bdf5a47f-270c-4b3e-9b50-0d2a501214ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:9c:bd:ae:b7:90:8a:82:2a:43:d7:bc:8b:
                    6b:f4:de:76:e8:06:3c:25:26:7f:99:ae:f8:37:63:
                    bc:58:28:b2:40:4a:08:52:fe:a5:80:09:ba:12:3a:
                    ad:92:70:94:0f:d7:2b:76:8a:57:2a:47:d1:c1:78:
                    d5:a9:c1:bb:78:3d:d2:87:9d:44:ad:56:e0:d1:9a:
                    98:64:4f:03:d3:58:63:d4:74:6c:89:c0:cc:87:63:
                    4c:e2:45:d2:ac:54:e2:56:fb:4c:ca:e4:18:57:91:
                    ca:98:fe:69:18:34:bc:c9:65:c2:9a:87:e3:ce:f8:
                    6c:b2:de:91:4b:e6:d3:08:3b:f8:b6:1c:a9:3d:49:
                    3e:9b:4b:0a:c9:a3:6f:76:d9:4b:18:9c:67:07:a5:
                    9b:ee:4a:38:8c:3a:a6:20:a5:1c:d2:b6:bc:8e:63:
                    04:c8:0b:6e:71:be:23:a4:24:e2:42:d4:ff:6d:99:
                    fb:f3:b3:2b:41:1b:d0:2f:ba:21:a8:39:53:94:48:
                    4c:43:fb:a9:73:c2:17:e7:01:7a:45:3e:8a:ab:44:
                    f9:3c:88:df:6a:ef:e1:85:ed:ba:14:99:54:99:66:
                    3d:44:94:df:ad:c4:03:b3:be:cd:5d:e6:f4:8b:1d:
                    bc:80:c8:76:04:38:29:ef:43:72:35:b1:c6:c9:43:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:08:54:8D:35:A0:F8:EA:EC:94:82:05:30:0F:30:42:0E:58:47:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d91060-541f-3136-8a62-699e5d56fbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:82:fe:91:b5:5f:9e:c9:16:3c:b8:cd:71:e0:a5:32:2f:
         b0:75:5f:87:ea:d3:0a:9c:b0:14:aa:42:40:10:dd:2e:c4:48:
         f7:a1:1e:2a:9b:74:ce:77:7d:a2:79:02:3e:4c:9b:15:53:5f:
         ae:85:22:9b:76:e5:99:0a:ac:fc:e6:97:3f:0e:48:b9:bd:08:
         5d:be:84:b0:73:28:69:f9:88:db:71:68:d9:8d:7f:35:9e:ee:
         2c:f1:1c:8a:19:13:c8:9a:63:53:10:b8:5c:eb:42:9d:f2:7f:
         18:2d:34:6d:9f:ea:9f:77:77:d3:ff:f3:49:e4:66:77:cd:56:
         3e:e6:53:cd:2f:88:e3:36:d5:82:1e:8a:1f:05:07:0d:d0:cc:
         d7:ec:58:24:b3:3a:b9:ec:e6:e3:75:4f:ad:ea:65:30:36:3e:
         c9:eb:06:3f:b8:84:84:3b:8f:41:54:66:5e:46:86:60:29:ab:
         84:b6:ff:92:58:c3:89:e9:41:fa:fb:29:1a:06:ec:26:8f:9a:
         ab:e8:c6:2c:1d:d4:52:f3:96:36:0e:65:54:1b:7b:7d:6e:e4:
         68:00:ae:d2:5b:d6:4c:58:38:53:72:03:4f:00:29:23:af:66:
         25:e9:4d:bd:e7:73:fa:0e:ac:be:db:90:0d:3a:d6:b1:21:05:
         06:0a:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:34 2024 by rpki-client on console-fra.rpki-client.org