Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39fccb44-840d-3b93-b183-e0efc18b2fa8.roa
File:                     39fccb44-840d-3b93-b183-e0efc18b2fa8.roa (raw, json)
Hash identifier:          m2fnMZH1DSLUrszSfKKU7PJ6Rd3t69F+V2LBbHZwogs=
Subject key identifier:   63:32:B9:85:AF:F9:9E:D3:36:10:C9:22:D0:E1:FE:D6:72:EC:8B:BF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A4BE2
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39fccb44-840d-3b93-b183-e0efc18b2fa8.roa
Signing time:             Fri 30 Nov 2018 01:09:58 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:4b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=32b2d6d1-b0a1-4c9c-8997-b2809ea427c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:25:7a:96:45:bc:85:f9:c1:f8:a6:5b:e9:
                    62:28:3d:7f:06:77:a7:ec:f1:29:05:3b:8a:47:fd:
                    9e:00:9b:8f:5b:00:80:11:85:ea:15:b8:4a:2f:34:
                    37:a7:2e:42:f9:45:9c:f3:cb:67:5e:88:14:8a:19:
                    84:23:86:f8:ef:5e:68:d5:f0:1c:b9:74:e6:2a:8f:
                    51:f9:22:d7:50:d3:ca:5f:51:83:de:40:24:8e:27:
                    32:94:54:fd:62:ba:27:53:40:02:09:df:eb:0c:f0:
                    97:dc:4d:cf:99:d6:9c:7f:7a:d0:57:ed:03:d5:20:
                    eb:e0:45:8a:36:47:de:fe:f8:13:cb:a7:79:91:37:
                    dd:8b:a3:86:69:52:79:b8:97:75:0d:17:54:2c:78:
                    66:a3:73:be:c7:84:01:c4:dd:60:a8:7e:86:0f:a5:
                    ca:ab:94:14:14:ee:ec:60:25:a8:bd:f1:0b:0d:c0:
                    78:12:45:a3:85:ec:71:71:45:99:d8:72:69:ab:78:
                    1e:4a:e8:64:03:a4:ac:7f:c9:34:ad:3b:f8:2f:e2:
                    51:c4:43:7e:06:59:cc:06:e3:d7:df:69:4e:1a:12:
                    99:41:8b:e1:d2:db:6f:f6:5e:af:08:a1:a3:16:84:
                    27:aa:68:ee:8b:2e:65:06:77:af:25:09:46:9a:82:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:32:B9:85:AF:F9:9E:D3:36:10:C9:22:D0:E1:FE:D6:72:EC:8B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39fccb44-840d-3b93-b183-e0efc18b2fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:82:51:5e:bb:a2:a2:e0:9d:e1:bd:d9:2a:99:56:15:b8:f7:
         19:b5:8e:8b:f0:2a:f3:36:3b:72:65:25:fc:fe:49:59:07:15:
         4c:7c:a1:54:b6:6d:5a:cb:66:c5:b1:70:2c:83:9c:c4:5b:6a:
         f6:a8:12:f8:9b:27:87:15:d8:fc:36:ae:d4:8f:bf:96:c4:de:
         3c:f1:19:b0:4b:36:18:cc:bf:6d:87:41:27:ff:d5:ba:35:20:
         8a:5d:2f:f1:2e:cd:09:36:9f:fb:c6:e5:ac:14:fd:50:12:e7:
         b3:53:73:08:19:8d:d8:fd:55:68:95:d9:d2:18:70:c9:d3:9f:
         7e:f8:40:4e:b2:06:cb:05:2d:c4:ea:27:9c:a3:a2:4b:f8:55:
         04:72:8c:da:0a:7b:28:e9:ec:5e:c4:95:7d:0a:59:ca:6c:69:
         0b:06:f2:c0:34:19:cc:54:aa:26:32:b1:66:1d:b6:fe:45:9f:
         eb:3c:06:88:60:a2:db:81:96:b9:2f:8f:6c:c1:38:7e:38:4a:
         4b:8a:58:2b:3a:ad:5b:bf:52:19:6b:13:35:cd:2e:1b:91:dc:
         eb:91:0c:da:6f:d2:a8:50:13:33:e8:51:f8:b5:c1:21:fc:19:
         86:90:b4:69:03:c6:19:6e:6a:c4:42:00:f2:76:07:43:96:0e:
         59:7b:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:57 2024 by rpki-client on console-fra.rpki-client.org