Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52cf1a49-48a3-3bb5-bcc8-0d247a1e5856.roa
File:                     52cf1a49-48a3-3bb5-bcc8-0d247a1e5856.roa (raw, json)
Hash identifier:          BnnKiOnFEiA8oN/J35SDQWEne27Cg45AaNpGXvzEIDo=
Subject key identifier:   16:70:1A:5B:B0:19:72:4E:01:67:A4:F7:21:F1:88:0E:06:CB:3E:4B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A8134
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52cf1a49-48a3-3bb5-bcc8-0d247a1e5856.roa
Signing time:             Fri 30 Nov 2018 01:10:12 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:81:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=57541a46-96b8-4667-a911-79be2cd32c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:8e:69:d3:4a:ca:ee:55:aa:1c:9e:6b:5e:
                    33:49:ef:56:0a:f3:2e:4f:d0:88:67:ac:5d:d6:fb:
                    54:9a:f7:7d:21:c6:e5:71:4b:89:d2:51:b2:f9:73:
                    15:2e:55:80:70:8c:6f:c2:21:8d:52:c3:6a:3a:53:
                    36:22:2d:a4:e8:a9:7f:3a:bc:70:75:25:fc:da:93:
                    4f:97:4d:87:0f:43:06:95:b8:3d:4d:cf:37:0a:65:
                    44:3d:b5:17:4a:64:0a:95:75:c9:34:54:d3:40:72:
                    15:21:0c:c5:40:ea:2d:0b:0b:fa:bd:98:38:0e:fc:
                    64:31:39:ad:9d:7b:51:09:73:b0:b4:63:6c:13:0d:
                    de:71:4d:13:cb:8e:f6:b7:57:cb:a5:a6:46:26:57:
                    fa:fc:c0:57:4c:da:7b:db:4f:d7:38:b4:1d:54:80:
                    8f:fc:c4:4e:d3:7f:ff:4a:ee:13:bd:f1:23:e2:23:
                    5e:df:98:59:32:be:50:90:9a:1d:b5:ef:15:5d:8d:
                    13:a5:34:7a:b6:98:62:10:f2:31:73:ca:bb:75:62:
                    a4:cf:4c:07:70:43:69:66:a9:7e:78:49:50:51:d6:
                    2d:e2:7c:3f:14:c4:4b:5f:0c:17:16:ff:67:bc:ab:
                    bf:f8:5c:1a:08:67:fe:ed:52:f0:19:b3:6a:9a:b2:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:70:1A:5B:B0:19:72:4E:01:67:A4:F7:21:F1:88:0E:06:CB:3E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52cf1a49-48a3-3bb5-bcc8-0d247a1e5856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:44:66:23:05:7a:de:da:7d:a4:ed:81:0c:5a:9c:ef:bf:e6:
         3c:a1:f6:bb:36:de:0c:04:93:df:05:de:db:a8:eb:a7:33:c0:
         96:1f:ff:5a:83:42:94:0a:90:cd:2c:bd:6a:f7:8e:56:8e:47:
         11:6a:84:ab:07:ce:7e:55:7f:90:3b:ff:d3:c0:38:34:03:dd:
         06:9f:ce:b3:83:13:91:8b:ce:95:24:17:4e:20:ab:2c:6c:90:
         84:23:cd:93:c9:56:42:fe:3e:d1:a8:e8:94:95:35:6d:29:2d:
         7f:f5:51:91:8b:f9:1b:50:20:02:b7:6f:7b:d7:ad:e7:9f:04:
         d4:f8:24:cc:ce:33:93:83:2c:b9:1f:83:73:60:2c:26:c2:42:
         91:95:3f:ce:d0:80:01:ac:cd:40:25:b8:6f:2c:22:f4:92:56:
         b3:6c:d7:00:6a:e7:36:a1:6c:a9:ce:22:71:2c:28:e2:8e:78:
         0f:73:f3:90:31:10:04:b5:87:9f:85:41:13:f8:2a:e9:a7:9c:
         32:a0:ff:da:ab:94:d8:66:e1:04:d9:59:44:16:0c:d7:25:84:
         2a:2b:30:1b:41:0c:21:a6:16:0d:39:ed:79:6d:00:89:5a:23:
         fb:5e:92:b7:b0:95:61:5d:c5:7e:0a:aa:a3:16:0b:6b:25:82:
         d5:8f:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:07 2024 by rpki-client on console-ams.rpki-client.org