Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/403cec4f-c524-3a41-8435-b9a67d791818.roa
File:                     403cec4f-c524-3a41-8435-b9a67d791818.roa (raw, json)
Hash identifier:          cMATgjkj6BGl7vMdpZkpy273XnJmqMtCDRzLDNQHneU=
Subject key identifier:   03:8C:1D:41:39:9D:D5:0D:C2:2D:12:51:0F:7A:04:8F:B4:2A:A6:5E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A6377
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/403cec4f-c524-3a41-8435-b9a67d791818.roa
Signing time:             Fri 30 Nov 2018 01:10:04 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:63:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=83aca508-bd12-47ad-9005-afd7b13d6100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:86:a4:60:67:64:24:f1:65:ff:c3:0c:1e:
                    c7:48:ca:41:13:fe:7b:5c:18:e1:cc:d9:df:d5:70:
                    03:04:0f:ff:b4:48:96:3c:e3:f8:21:90:a8:85:86:
                    0c:bb:8b:87:22:03:fa:08:e9:52:07:f9:2e:fe:b0:
                    ae:d8:af:cd:fe:be:a1:3d:4e:51:37:e3:97:25:0d:
                    d6:70:d8:61:d4:c3:f5:59:6e:56:7f:b4:24:d8:e0:
                    f0:e9:4e:be:1f:b0:10:de:6d:1b:85:32:dc:b4:fb:
                    49:cb:52:9c:94:12:80:d4:8f:2f:18:d9:69:b7:11:
                    89:90:24:06:b8:fa:d3:67:cc:d0:a3:a3:ea:40:a2:
                    5c:b3:58:c3:91:0e:41:68:14:43:01:36:53:88:7c:
                    b7:38:46:73:72:6f:66:65:e4:f1:e4:b7:36:b9:3a:
                    1a:d0:98:55:65:f8:b0:22:ad:ff:f6:8f:87:37:93:
                    34:d4:3a:49:15:c0:37:d6:4d:7f:87:d5:4b:3d:02:
                    00:de:e7:a4:95:50:c2:ef:58:f1:95:6e:07:69:20:
                    db:8d:8a:fc:7d:b5:99:08:cb:52:d9:88:4e:57:2b:
                    3e:50:69:e5:1d:39:4b:20:12:0e:a0:35:10:cd:7a:
                    d3:0f:0f:48:8f:34:62:36:29:b0:6d:6e:ba:3b:de:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:1D:41:39:9D:D5:0D:C2:2D:12:51:0F:7A:04:8F:B4:2A:A6:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/403cec4f-c524-3a41-8435-b9a67d791818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:57:d2:b2:99:74:08:b2:a3:d0:eb:6e:5f:18:87:3d:cc:14:
         fd:33:34:79:30:a9:29:73:31:9a:f5:14:77:30:7d:48:0d:65:
         6d:58:78:66:05:c5:a6:e0:3a:11:6d:39:41:e2:15:76:84:03:
         24:fb:1a:0d:05:b1:69:e3:de:6e:19:7c:23:c8:31:01:3e:24:
         44:76:37:00:3a:53:f1:13:31:88:3c:c5:30:f2:5c:d0:b6:0a:
         21:b9:aa:2a:4e:67:fa:09:62:e9:41:89:79:8c:0d:e9:83:74:
         f6:4d:1d:bc:25:fc:22:a9:17:94:89:c5:36:7f:66:8b:91:d8:
         bd:3b:8c:dc:9d:33:90:08:d5:a0:13:60:84:52:c4:7b:08:bf:
         17:2c:69:c2:5f:a3:9d:52:62:10:51:bb:e0:8f:2e:96:b3:d0:
         d0:07:b8:77:b6:db:a3:9b:ed:b3:c1:c9:fe:bb:54:d0:39:a6:
         3e:52:14:1b:04:dd:be:b9:76:c7:27:b3:e9:3a:ac:45:e0:f7:
         34:f8:17:a3:a3:c7:55:9e:97:54:19:2f:7a:96:98:84:c3:79:
         89:65:a9:40:05:5d:aa:87:7d:f6:01:e0:ea:aa:63:20:21:93:
         19:ef:39:d9:17:dc:9c:23:53:35:23:44:c9:ec:82:35:4a:93:
         8e:6d:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:05 2024 by rpki-client on console-fra.rpki-client.org