Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa
File:                     49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa (raw, json)
Hash identifier:          OLlsgK2BfWyjzi0pYrOykvpF7ElY52DEtWWrZPx5UsU=
Subject key identifier:   AE:0E:F1:4F:D7:A9:6A:8A:20:3A:AA:9D:EB:26:CC:E6:23:DD:40:64
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583C56BFF49A431C452556815B40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa
Signing time:             Wed 22 Dec 2021 05:00:00 +0000
ROA not before:           Wed 22 Dec 2021 05:00:00 +0000
ROA not after:            Sun 23 Jan 2028 05:00:00 +0000
asID:                     13335
IP address blocks:        172.70.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:56:bf:f4:9a:43:1c:45:25:56:81:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 22 05:00:00 2021 GMT
            Not After : Jan 23 05:00:00 2028 GMT
        Subject: CN=36262a30-ef42-431e-9f62-e8a35921be0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:77:1d:88:63:2c:cc:95:fd:d1:ea:e7:69:
                    72:5a:b6:98:2d:55:1f:5e:75:d8:b4:fd:14:91:aa:
                    9a:b8:86:ec:d8:03:ec:55:3c:41:37:ae:56:72:3e:
                    06:32:cd:99:d1:ab:8e:17:f8:9d:71:5f:dc:dd:57:
                    fd:c0:21:36:a0:d1:a4:fb:2b:28:85:19:80:a5:60:
                    01:af:ba:18:1d:73:1e:a0:ec:64:13:b6:c6:7c:ce:
                    16:69:4b:aa:2b:e1:b7:d4:70:51:0e:a6:0d:55:b2:
                    d7:aa:55:70:14:a7:92:aa:48:a1:5e:44:1d:4e:b4:
                    a5:20:72:5b:cb:cf:09:90:3e:69:dc:ea:07:6d:bd:
                    6e:0c:06:f5:6f:6a:6f:d3:1d:6d:e2:d8:05:2d:2e:
                    b9:77:1d:26:3d:cf:56:ed:6d:22:26:5c:5c:34:96:
                    96:99:c9:eb:c8:fd:33:44:8b:48:1d:a7:7c:bb:e1:
                    a6:33:4d:35:25:43:0c:7a:94:a8:4f:ca:c1:f9:4c:
                    7d:df:9f:07:d7:94:f3:65:36:22:8e:c5:b6:eb:83:
                    cf:2b:35:74:da:e0:a3:7a:15:7b:0d:18:c3:c5:90:
                    be:f4:e4:98:83:6c:82:c8:be:fc:35:a4:30:77:93:
                    d8:55:44:ed:d6:0e:62:fa:9d:02:75:18:4b:31:d9:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0E:F1:4F:D7:A9:6A:8A:20:3A:AA:9D:EB:26:CC:E6:23:DD:40:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:87:06:90:5d:3d:60:a0:6d:26:49:5d:c3:96:42:e1:6f:56:
         64:3a:38:26:ba:3f:cc:0d:c9:42:93:b8:0b:1e:3c:9b:f9:c0:
         46:d3:dd:74:91:73:46:e9:81:f2:71:54:71:a0:cb:d3:b2:90:
         13:80:b6:9c:96:b5:61:e5:b2:e6:df:60:a3:db:80:e1:ad:5c:
         63:4d:59:b7:13:97:2b:ea:28:34:63:0d:43:46:4f:09:33:6d:
         4d:01:5d:56:72:06:57:bb:7c:82:a8:3d:4c:cb:ae:f1:98:86:
         4a:ee:dd:66:6f:b1:70:28:79:b3:ce:2f:e3:c9:d9:9c:e2:5a:
         fe:75:6c:0f:ec:6d:8f:7d:38:7c:d3:74:5d:41:f2:51:70:c4:
         4a:4d:dc:e8:5a:8f:21:91:30:bd:33:64:7f:e2:46:cb:9d:6c:
         56:f7:d6:89:83:c7:b3:ce:f0:82:61:59:4b:cd:82:ed:ce:37:
         a1:a9:9f:19:15:df:a7:2f:45:46:6b:26:d6:83:75:cb:c9:8a:
         9b:f1:54:31:40:66:de:dd:79:b1:1c:c3:1c:03:77:f9:17:67:
         c4:05:c5:bb:23:dc:bf:0b:c2:15:fb:b3:05:14:68:de:4e:f9:
         45:82:8c:1b:51:71:d3:3f:52:2b:28:ce:8d:8d:66:1e:99:97:
         f0:dc:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:39 2024 by rpki-client on console-fra.rpki-client.org