Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/324e1840-6bc5-3f64-abbe-9138214e1404.roa
File:                     324e1840-6bc5-3f64-abbe-9138214e1404.roa (raw, json)
Hash identifier:          EJpnsgjYyZuYgKgbDM7ihuhPPUYiUrmNmD4Ym9XC5AQ=
Subject key identifier:   7A:8C:55:75:B1:76:60:29:1A:25:E2:40:63:24:FE:7A:5C:6E:18:3B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FEEBC63BA
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/324e1840-6bc5-3f64-abbe-9138214e1404.roa
Signing time:             Wed 29 Jan 2020 00:38:41 +0000
ROA not before:           Mon 11 Jun 2018 04:00:00 +0000
ROA not after:            Tue 02 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:ee:bc:63:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 11 04:00:00 2018 GMT
            Not After : May  2 04:00:00 2028 GMT
        Subject: CN=119c41e6-ccd9-402d-8d2a-9680f0675889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:7d:f8:fd:e1:a6:a8:d3:5e:17:44:d9:50:
                    6e:31:84:65:fc:3f:d4:e7:1e:87:f9:d5:0f:21:3c:
                    29:71:f9:d5:d1:78:f5:fc:37:02:c3:92:87:75:b0:
                    0e:80:81:5a:02:99:56:af:92:2f:e6:b8:a5:ff:90:
                    8a:3b:b5:e3:7c:b1:7a:ac:5c:18:c7:8f:55:d0:0a:
                    56:b9:2b:26:46:8e:40:d9:da:dc:96:26:95:d0:88:
                    42:6b:a2:dc:7a:8e:70:7e:50:9c:d8:53:b6:54:43:
                    dc:78:8c:a6:48:17:07:50:f1:12:20:9d:86:64:39:
                    f8:1f:df:61:8e:b5:f2:68:da:cc:85:c3:e8:3d:63:
                    c3:b5:d7:b5:e2:1b:d6:3e:1e:ca:f6:02:49:6c:49:
                    5b:b2:90:08:89:86:1a:38:c2:fc:ee:4a:36:67:68:
                    bf:8d:1f:c5:2c:68:a4:e5:83:8a:dd:a1:ea:9f:c1:
                    85:7b:28:d6:b1:6b:56:cc:74:93:59:ef:40:ab:e6:
                    2e:25:e6:2a:d7:0e:dc:46:62:87:00:5c:77:4d:1e:
                    36:54:35:a6:fa:96:21:26:de:86:e9:92:b8:29:9a:
                    b9:bc:43:4b:8a:55:3a:36:67:e8:44:65:a8:00:d7:
                    8f:9b:59:5b:14:67:c5:2a:1f:ea:87:f2:fc:d1:d1:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8C:55:75:B1:76:60:29:1A:25:E2:40:63:24:FE:7A:5C:6E:18:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/324e1840-6bc5-3f64-abbe-9138214e1404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:32:20:24:3c:84:fe:1d:1b:42:20:0c:0f:24:92:aa:b9:c6:
         55:f2:d1:3c:51:08:54:7d:c2:5e:72:68:7b:2e:f0:49:37:8c:
         18:c6:d8:6a:71:49:a1:bc:ba:43:fb:71:54:1e:cd:4b:93:d4:
         60:7c:05:50:ee:1f:83:3c:3f:99:01:59:89:33:ae:68:d0:c9:
         c8:49:8b:21:08:41:c0:1b:7a:c3:a3:2e:73:78:8b:a5:d2:eb:
         a8:3c:4f:86:a2:71:f9:2f:a5:ff:d8:70:b2:6d:4a:ee:0d:00:
         ca:94:3c:f4:7d:82:42:61:d8:cb:9b:29:40:66:72:65:be:a4:
         a1:26:3a:60:39:03:23:fb:d2:36:03:08:66:21:4f:61:68:35:
         1e:b5:e4:e7:30:5d:da:35:ef:c7:35:98:72:70:ab:a7:a6:4a:
         8f:ef:90:9f:24:49:35:fd:7c:49:d8:f4:fc:3c:10:b5:2d:46:
         58:d9:cb:8d:1a:4c:08:e6:29:f4:f6:f4:00:c4:b7:e5:27:bc:
         7e:08:74:70:b3:04:8e:d6:c9:36:ba:76:44:0b:7d:04:c9:f6:
         cb:31:50:52:cc:b9:1b:55:0b:ad:ff:2d:86:ac:3c:14:ae:ed:
         3b:69:40:94:41:a1:a5:33:71:4f:0a:42:36:35:27:93:9e:6f:
         ac:56:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:08 2024 by rpki-client on console-ams.rpki-client.org