Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33730cb6-b98b-3e5b-83d1-8f77c692ace5.roa
File:                     33730cb6-b98b-3e5b-83d1-8f77c692ace5.roa (raw, json)
Hash identifier:          80Fe3kGQ+KNlJflsNr9pZ5PNXFezNLOi3sY0GQiThWU=
Subject key identifier:   0E:A4:62:7B:FF:D7:6A:5E:5A:AB:6F:46:14:4A:E5:D8:78:94:13:77
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E496DCBFD
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33730cb6-b98b-3e5b-83d1-8f77c692ace5.roa
Signing time:             Fri 08 Nov 2019 05:12:42 +0000
ROA not before:           Fri 08 Nov 2019 05:00:00 +0000
ROA not after:            Tue 25 Jan 2028 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:49:6d:cb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  8 05:00:00 2019 GMT
            Not After : Jan 25 05:00:00 2028 GMT
        Subject: CN=64b9e792-2ab9-4203-bf9f-3e30e0f81a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:69:37:8e:5a:20:d5:1c:1d:90:2c:4e:4b:
                    1d:0f:e5:7b:fe:02:c9:7a:5f:31:e3:f3:e4:0a:0d:
                    2b:cc:a6:ca:ed:47:10:50:12:ce:73:da:90:ea:a8:
                    66:67:96:95:e5:96:71:08:5b:3d:93:b7:49:ab:bb:
                    a1:f5:96:c2:e3:d3:34:48:c0:06:48:b9:c9:b2:6f:
                    7f:d3:8b:10:8e:ad:b2:8b:27:99:a4:e8:c1:09:17:
                    c4:5e:94:38:d7:25:4a:9d:91:76:e7:9f:60:4a:ab:
                    46:e1:04:9c:09:86:2c:42:a0:70:df:a7:20:b8:2e:
                    07:72:44:50:c1:ac:16:bc:01:da:9e:1b:9f:f9:68:
                    77:86:5a:56:f5:f3:d4:9e:82:5d:f3:42:a6:ce:b0:
                    0b:30:50:ef:6f:86:22:87:c5:59:98:7b:d6:9f:09:
                    ae:30:ed:5f:7b:b6:dc:20:bb:96:e1:33:94:b1:b3:
                    08:df:17:af:19:93:6b:b1:57:f0:fb:06:5d:99:99:
                    6a:7d:13:a0:6b:61:d3:1e:ee:4f:f1:d3:e9:bd:b8:
                    86:a2:32:45:46:e5:11:d6:5a:a0:1f:76:9e:3c:a3:
                    8b:f2:d6:d8:39:f2:70:af:95:e6:1c:8f:a9:c6:a4:
                    c3:38:59:2b:90:f0:6e:29:62:56:bb:20:49:be:18:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A4:62:7B:FF:D7:6A:5E:5A:AB:6F:46:14:4A:E5:D8:78:94:13:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33730cb6-b98b-3e5b-83d1-8f77c692ace5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:5f:cf:b1:88:5b:5c:55:36:1d:a7:96:1f:47:a1:1c:20:
         55:ff:93:e9:96:a2:1c:47:6e:79:ad:a9:6e:52:6c:3f:e4:88:
         0a:4c:a7:c0:c2:a6:32:9b:d6:21:13:90:df:87:fe:35:c0:51:
         b0:e1:2d:61:61:ed:bf:c5:20:1d:60:34:1a:1d:3a:39:61:52:
         a0:e3:97:70:4f:93:41:22:fc:e9:ad:b6:72:05:6b:cd:9c:f1:
         ca:07:ce:49:24:38:08:78:aa:c9:5c:ce:1e:64:32:37:a9:e1:
         1b:91:49:0e:fc:f1:83:82:bd:06:49:44:40:0d:bf:97:f7:73:
         aa:e5:8f:44:f1:f9:c0:7c:92:b6:0e:76:7f:62:8c:45:7b:ed:
         65:15:ab:34:a5:17:2e:94:80:32:1a:3f:a3:16:a2:1a:6c:df:
         26:c0:4e:49:d1:13:c9:89:d0:d3:4a:f9:60:52:84:c7:a3:f2:
         ca:2c:f4:b2:19:5c:24:88:19:db:42:a6:06:34:35:02:0d:0f:
         eb:bf:04:20:85:2b:09:e7:c5:83:25:87:79:4d:a5:56:5b:43:
         62:ad:5b:95:ad:c6:a6:60:07:7e:f6:70:d8:b4:5e:a4:cd:c4:
         f6:59:32:b6:6e:62:0c:21:39:68:fe:a9:a4:8f:c5:59:90:46:
         03:83:74:4e
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbklty/0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xOTExMDgwNTAwMDBaFw0yODAxMjUwNTAwMDBaMC8xLTArBgNVBAMTJDY0
YjllNzkyLTJhYjktNDIwMy1iZjlmLTNlMzBlMGY4MWE4YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKhcaTeOWiDVHB2QLE5LHQ/le/4CyXpfMePz5AoN
K8ymyu1HEFASznPakOqoZmeWleWWcQhbPZO3Sau7ofWWwuPTNEjABki5ybJvf9OL
EI6tsosnmaTowQkXxF6UONclSp2RduefYEqrRuEEnAmGLEKgcN+nILguB3JEUMGs
FrwB2p4bn/lod4ZaVvXz1J6CXfNCps6wCzBQ72+GIofFWZh71p8JrjDtX3u23CC7
luEzlLGzCN8XrxmTa7FX8PsGXZmZan0ToGth0x7uT/HT6b24hqIyRUblEdZaoB92
njyji/LW2DnycK+V5hyPqcakwzhZK5DwbiliVrsgSb4YJA8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQOpGJ7/9dqXlqrb0YUSuXYeJQTdzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzMzNzMwY2I2LWI5OGItM2U1
Yi04M2QxLThmNzdjNjkyYWNlNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxFojBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAk7pfz7GIW1xVNh2nlh9HoRwgVf+T6ZaiHEduea2pblJsP+SICkynwMKmMpvW
IROQ34f+NcBRsOEtYWHtv8UgHWA0Gh06OWFSoOOXcE+TQSL86a22cgVrzZzxygfO
SSQ4CHiqyVzOHmQyN6nhG5FJDvzxg4K9BklEQA2/l/dzquWPRPH5wHyStg52f2KM
RXvtZRWrNKUXLpSAMho/oxaiGmzfJsBOSdETyYnQ00r5YFKEx6Pyyiz0shlcJIgZ
20KmBjQ1Ag0P678EIIUrCefFgyWHeU2lVltDYq1bla3GpmAHfvZw2LRepM3E9lky
tm5iDCE5aP6ppI/FWZBGA4N0Tg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:35 2024 by rpki-client on console-fra.rpki-client.org