Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0eb922-47f2-3a26-917b-13cb6a67193e.roa
File:                     4f0eb922-47f2-3a26-917b-13cb6a67193e.roa (raw, json)
Hash identifier:          Zl8UmeTluLRbRSfHv7cBJsYXJSFyQkas0KatOrSAwaM=
Subject key identifier:   9E:25:07:70:D2:8D:A0:8E:6E:36:74:82:A3:43:B3:FE:F8:D4:09:9C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583F74DE3367C88A5108CB8D11C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0eb922-47f2-3a26-917b-13cb6a67193e.roa
Signing time:             Mon 03 Oct 2022 12:00:00 +0000
ROA not before:           Mon 03 Oct 2022 12:00:00 +0000
ROA not after:            Fri 24 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.71.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:74:de:33:67:c8:8a:51:08:cb:8d:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  3 12:00:00 2022 GMT
            Not After : Sep 24 04:00:00 2027 GMT
        Subject: CN=b257ce2e-7a94-427f-855c-f27112be1cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:16:74:f4:16:36:9c:e7:40:4d:c0:3b:d2:
                    c6:fa:3c:30:d4:24:82:35:24:c7:46:37:61:05:78:
                    c2:cc:a8:c6:a4:2e:eb:24:9d:3b:3f:4b:72:ef:11:
                    a1:4c:5f:24:9f:cd:9d:93:b6:aa:9b:b0:e4:9b:a1:
                    67:4a:82:e3:80:90:a3:de:a6:7c:45:fe:d9:48:f8:
                    ba:3d:10:b3:dd:95:9a:38:26:80:23:20:32:18:ab:
                    44:6d:95:97:7b:60:67:10:e6:42:ed:8a:e8:1c:26:
                    12:7e:af:e0:78:2a:0f:d9:b3:20:70:c5:67:b2:59:
                    39:2f:10:5d:41:92:5e:f4:bf:01:e4:b3:9f:d4:6e:
                    73:33:1a:d4:0a:13:8f:3e:c4:60:be:54:b7:d7:7d:
                    ff:90:96:3a:a6:d7:27:48:75:4e:96:68:d5:04:d3:
                    89:5d:90:b1:09:40:3e:2d:17:24:c4:90:45:f9:c8:
                    1b:3c:d9:38:da:d5:ed:9a:5e:35:ca:a1:c9:7d:65:
                    f2:c8:eb:41:0a:0d:0e:10:06:95:53:9e:a7:71:88:
                    c8:06:63:e9:67:7e:13:a3:a9:bd:c8:7c:a9:09:4e:
                    d4:56:c6:5f:4f:94:7c:0c:e8:e3:09:39:cb:4e:e3:
                    68:7b:27:07:0f:f5:89:80:5c:fa:2e:ab:7c:86:73:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:25:07:70:D2:8D:A0:8E:6E:36:74:82:A3:43:B3:FE:F8:D4:09:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0eb922-47f2-3a26-917b-13cb6a67193e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:1f:7e:cf:37:b1:59:b9:8a:f2:50:0c:3b:13:d6:da:cd:
         ac:01:ad:b6:9b:a9:c4:0e:65:95:e4:96:68:45:09:01:12:94:
         7b:af:5d:9c:f9:3c:ec:b2:ee:63:d9:4c:3a:31:b7:94:fc:16:
         1b:61:47:c2:07:17:21:2b:2c:cd:10:21:c3:4c:b5:bf:a0:b4:
         b9:28:fa:6c:57:c4:8c:a0:ae:0f:c6:a2:a4:45:46:44:0b:ef:
         2f:3d:8b:ab:18:eb:a4:e7:98:59:43:82:16:35:a3:ef:f1:c7:
         3d:9f:94:f7:69:74:5e:6c:e1:dc:39:5b:7d:02:62:5d:f3:20:
         2b:28:9f:2f:cc:87:60:c1:82:93:49:b9:90:9a:26:28:6f:17:
         bc:2c:4b:6c:21:e3:88:93:c1:eb:19:2a:03:b1:97:66:ff:bc:
         16:8d:b8:42:86:3f:b3:76:89:cc:41:38:de:5d:b8:1c:c9:15:
         c4:ce:cc:1f:22:46:4c:cb:a6:b4:5f:7f:b9:0e:ba:e8:38:4f:
         09:f6:3d:e9:6c:8a:f8:ec:10:6f:53:92:ec:7b:ff:3b:90:e8:
         42:0a:84:60:d1:66:41:db:4e:8f:46:63:52:17:45:34:fb:fc:
         75:5e:0d:b9:5e:2e:57:af:76:7f:7b:40:5c:98:b6:d5:67:00:
         6e:05:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:00 2024 by rpki-client on console-fra.rpki-client.org