Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4601f436-2dee-3b11-9d38-64230b6ddc5e.roa
File:                     4601f436-2dee-3b11-9d38-64230b6ddc5e.roa (raw, json)
Hash identifier:          SjWQy6BVDT/ixlIYIE44Z0y+pcveyeH79EzsA6RusCA=
Subject key identifier:   41:56:75:47:1F:8E:16:25:84:31:D8:50:5E:63:D4:45:42:C2:54:33
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583A22CA61D46DDF90684FF27780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4601f436-2dee-3b11-9d38-64230b6ddc5e.roa
Signing time:             Thu 03 Jun 2021 04:00:00 +0000
ROA not before:           Thu 03 Jun 2021 04:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.132.0/24 maxlen: 24
                          172.70.133.0/24 maxlen: 24
                          172.70.134.0/24 maxlen: 24
                          172.70.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:22:ca:61:d4:6d:df:90:68:4f:f2:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun  3 04:00:00 2021 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=0d28a2e5-03fd-49fa-8f67-2efa3da02dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:0a:2f:74:26:3c:81:42:82:78:b7:56:d6:
                    dc:2a:20:62:27:cd:2e:f1:27:92:eb:99:ba:85:21:
                    ee:c6:cc:4f:2b:1c:c1:8a:df:aa:fb:2f:cc:4e:9a:
                    c8:15:6d:25:7d:35:5e:6a:5c:d8:3f:fd:bd:e5:29:
                    db:60:04:9d:4e:81:d2:31:ba:29:71:c2:98:8b:5f:
                    3d:0a:69:22:e6:ac:55:c9:08:41:1b:35:8c:ec:64:
                    97:31:7a:8c:0b:dc:1d:00:68:00:fa:c0:de:c2:c0:
                    b1:e0:31:41:29:ec:60:c7:5f:28:c7:27:84:4f:dd:
                    c3:a2:a0:26:f2:76:e5:54:78:1c:23:91:65:57:48:
                    d8:36:b0:7d:bf:41:48:f3:0c:71:98:24:c3:20:8b:
                    d2:64:b1:e6:72:b1:9f:bd:58:5b:94:45:8d:36:60:
                    0b:b2:80:ff:c7:68:14:32:cd:25:02:39:f7:99:68:
                    2d:39:57:00:3e:04:aa:7d:15:f4:95:87:d3:cc:53:
                    47:52:93:fb:8d:28:ef:68:33:ad:6e:60:29:e4:cc:
                    f5:bd:83:dd:7e:e9:7d:a7:8c:40:be:f9:a2:6a:6b:
                    7b:57:32:43:17:8d:07:c2:d7:b2:c3:b3:a2:d1:27:
                    9f:66:6c:70:4a:21:40:e5:42:c3:8e:5a:eb:1a:21:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:56:75:47:1F:8E:16:25:84:31:D8:50:5E:63:D4:45:42:C2:54:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4601f436-2dee-3b11-9d38-64230b6ddc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:32:9f:03:c1:25:7b:11:07:4b:be:53:79:21:65:d1:21:04:
         3e:8d:33:68:e8:bd:bf:f3:41:39:67:29:f8:12:19:ac:cf:de:
         e0:e7:94:02:13:f4:db:6d:32:0d:39:1c:1d:8b:9a:f7:f5:e8:
         64:53:1e:ad:ae:58:8b:d4:ac:dd:4d:3f:cc:08:65:04:1c:07:
         f2:1c:1f:ee:ea:9f:c4:c2:38:91:14:03:d7:bb:cb:ac:7a:8d:
         3c:4d:68:48:9b:82:7d:a4:34:b4:7d:ab:10:45:60:9a:f1:70:
         16:39:13:22:f2:9b:7d:79:be:e6:65:ae:42:a1:9b:fe:a7:87:
         30:8d:ba:b2:3b:d1:5e:a4:18:27:91:b2:82:c2:2b:ef:a0:0a:
         d4:be:7d:e2:79:b5:41:53:f7:df:e3:48:b8:05:98:0a:3f:01:
         06:f5:eb:a2:a5:68:62:bc:f0:17:78:9a:54:98:5c:0a:4f:e1:
         01:e7:a7:19:ac:e6:94:0d:ed:bc:2d:29:15:d1:f8:85:a7:83:
         af:e3:36:8e:fe:85:86:63:39:87:18:ce:15:8d:ef:18:37:90:
         ef:ed:2d:ab:dc:cb:1b:4e:ee:78:71:55:e8:c0:42:a3:a6:6e:
         68:3a:7e:66:76:58:fb:9d:c8:59:73:c8:3a:78:30:92:5c:b8:
         62:e6:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:00 2024 by rpki-client on console-fra.rpki-client.org