Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50435fec-5baa-36b6-88c9-a2c608acec69.roa
File:                     50435fec-5baa-36b6-88c9-a2c608acec69.roa (raw, json)
Hash identifier:          Y3AKgcIWi/HLeCo4j1KJVf1WUynQtN34+8JOM/VW5vo=
Subject key identifier:   2C:30:82:3E:5A:DD:80:F8:10:A6:ED:D9:60:C1:17:ED:0D:8E:12:6B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583DB93759D08EC4A96A73067400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50435fec-5baa-36b6-88c9-a2c608acec69.roa
Signing time:             Wed 27 Apr 2022 12:00:00 +0000
ROA not before:           Wed 27 Apr 2022 12:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.71.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b9:37:59:d0:8e:c4:a9:6a:73:06:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 27 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=3a63d2f1-ff62-4638-902b-f4feb68a873b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:fd:bf:30:a5:1e:c9:0a:95:57:56:a9:c2:
                    72:de:22:5a:d8:e5:f1:7b:22:d4:fa:f9:d1:59:41:
                    3c:11:7b:77:9c:10:5b:de:4d:61:7a:de:74:e4:27:
                    f4:a2:86:82:4e:7f:b6:0a:c1:11:13:8e:d8:3e:96:
                    9b:9f:7f:3a:86:39:df:df:a6:8c:e2:04:58:55:bc:
                    54:86:36:07:8e:4b:5a:b7:95:99:34:4f:01:3a:03:
                    30:72:eb:3e:da:f5:c3:4b:7b:93:ce:d1:50:26:6a:
                    35:8f:59:5c:dc:47:f0:ed:f5:e7:ea:41:27:e4:d5:
                    dd:f3:29:86:0d:e4:ec:f5:db:a3:20:01:9a:21:32:
                    c6:3e:e6:74:85:00:22:a3:48:90:3f:72:e9:32:85:
                    d8:5d:ee:ac:76:27:ff:c4:05:19:bf:79:b9:8d:fd:
                    de:9f:10:56:19:ea:a9:9a:c8:40:80:53:f0:70:96:
                    24:b8:d0:cf:97:19:b6:e3:91:98:32:a9:f4:8e:7a:
                    f6:f3:32:18:0a:51:70:60:b2:8e:24:f7:c1:fd:15:
                    3a:ab:dd:44:0f:c9:15:f5:42:39:40:8d:9b:15:52:
                    fc:b9:c1:c1:e3:f0:e1:74:f0:2c:db:77:c7:71:39:
                    29:cb:b4:41:f4:9a:22:9b:a9:e4:80:c0:83:9c:1e:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:82:3E:5A:DD:80:F8:10:A6:ED:D9:60:C1:17:ED:0D:8E:12:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50435fec-5baa-36b6-88c9-a2c608acec69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:da:99:23:f3:80:60:8b:ec:c1:48:82:c3:3f:12:e6:e1:3a:
         9a:46:db:d5:6d:0f:cb:e8:0f:c0:5e:a6:8d:a4:82:22:0b:16:
         42:0d:66:27:26:9e:e4:a3:8a:30:84:75:1a:11:9f:8f:7b:6d:
         a3:4a:e6:40:a2:ee:d6:02:11:cd:10:be:a7:97:61:80:27:f4:
         9f:7d:b4:44:6f:85:c3:56:fc:71:68:cd:72:e8:de:42:4f:ef:
         80:4c:64:8b:37:aa:95:00:bc:e8:42:12:04:c5:0e:46:91:43:
         f8:33:92:b5:59:73:0d:65:c0:07:bb:d5:2d:7b:56:54:8c:69:
         dc:83:79:cd:4b:e0:ac:7a:8e:2d:4f:ae:4c:ae:a0:90:ac:75:
         ce:01:80:93:02:fa:0c:64:ca:c4:65:69:f9:2a:4a:7c:7c:62:
         3b:61:b0:5e:b4:51:37:89:7d:13:17:69:c6:97:62:76:1a:57:
         b9:8f:02:91:cb:f8:6e:99:18:95:d0:1c:aa:07:c5:77:d2:87:
         1c:7c:ea:f7:c3:38:ed:aa:1f:4d:80:f7:72:29:f5:ac:ee:da:
         c7:09:ae:ce:ff:d0:17:c5:5c:8b:3a:28:04:25:3c:be:fe:31:
         36:66:18:c3:de:c1:3c:46:7b:9a:31:1d:6b:88:9e:aa:18:9e:
         4d:76:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:40 2024 by rpki-client on console-fra.rpki-client.org