Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/54040d43-3d2e-3b71-94d2-624d464150be.roa
File:                     54040d43-3d2e-3b71-94d2-624d464150be.roa (raw, json)
Hash identifier:          ZI+wJ8DfQTyVCjFu1qXeXXRG/WG+4oOXItpL/z1FDQc=
Subject key identifier:   98:C9:C3:53:2C:23:43:60:29:DA:E7:A1:6E:6D:E7:33:44:70:60:22
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583EF43DD7A78846F08326A59A40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/54040d43-3d2e-3b71-94d2-624d464150be.roa
Signing time:             Thu 18 Aug 2022 12:00:00 +0000
ROA not before:           Thu 18 Aug 2022 12:00:00 +0000
ROA not after:            Tue 21 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.71.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:f4:3d:d7:a7:88:46:f0:83:26:a5:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 18 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2027 GMT
        Subject: CN=1d50be1b-8f12-44a2-bc97-02a8eeac65aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:fa:39:7f:e4:fa:cd:f5:33:9d:2e:55:2d:
                    af:f8:00:45:e4:12:c9:f4:0f:83:35:a2:9e:66:a4:
                    ea:a4:ed:cc:ce:75:36:5a:45:1a:a2:59:76:46:fd:
                    96:1c:ba:3c:7b:37:c4:85:ab:91:b4:25:d6:29:a3:
                    24:6a:16:38:f5:16:64:4b:d0:60:73:5a:79:c7:36:
                    71:9b:8d:3a:7a:71:26:52:8a:f4:eb:70:98:df:60:
                    76:40:37:65:00:e4:35:15:dc:ba:d3:3d:18:dd:df:
                    24:44:61:c9:67:fe:7b:b4:0f:c6:2c:70:65:13:34:
                    97:39:44:49:09:b4:79:35:01:e0:34:c7:81:30:a4:
                    53:98:98:8d:ea:44:53:0e:65:bd:38:9d:e0:d7:d9:
                    93:a0:d1:ed:29:7c:cd:69:2c:96:bd:af:a2:60:99:
                    67:74:49:62:d2:7e:37:00:54:ca:46:c5:51:30:a6:
                    f6:85:1b:ca:f0:00:05:fe:36:2e:28:09:94:c0:d0:
                    d3:a2:78:35:98:6b:97:16:5d:bf:b9:13:8f:43:9b:
                    73:c2:a3:dc:bb:df:0c:dd:eb:4e:70:e0:0c:d6:70:
                    bd:a2:0e:91:19:2a:55:a4:db:c9:ea:52:78:a9:5d:
                    07:85:10:e6:e5:47:e5:d5:f5:a2:dd:ab:72:46:40:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C9:C3:53:2C:23:43:60:29:DA:E7:A1:6E:6D:E7:33:44:70:60:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/54040d43-3d2e-3b71-94d2-624d464150be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:20:cb:17:29:df:cb:7a:4e:5c:c3:46:10:44:21:09:f8:
         47:88:1c:99:d2:df:bc:07:98:a6:50:6a:6d:36:9c:78:4b:45:
         b8:54:c7:a9:da:5e:29:25:c5:fc:80:2f:da:41:6b:37:9a:23:
         ba:2b:48:ff:ef:13:4f:7e:a8:fb:fb:5f:ee:b1:7a:4a:c5:ad:
         7a:08:25:6b:de:86:b2:f4:05:8d:c3:e7:21:ba:50:5f:47:55:
         65:0e:03:2e:dd:4e:6c:d2:34:aa:7b:e2:d3:8b:6c:ae:3b:af:
         61:d2:ea:b9:ba:76:d2:7c:52:c1:0b:41:e4:8c:a8:e7:c9:5c:
         a2:83:a6:84:e0:a9:6e:fe:3f:41:59:69:51:7e:4b:94:f6:a3:
         70:74:e0:b3:08:b6:51:52:93:6b:85:f4:1f:89:5b:7f:58:40:
         9e:a8:a4:6d:28:b4:5b:d3:d5:f5:72:50:2d:64:8c:ea:e9:a8:
         5e:7a:bf:50:87:50:06:74:e9:5c:91:b5:f3:13:f7:7f:a4:8b:
         5e:d0:ec:0f:89:39:6c:40:10:99:e5:ed:ea:7f:65:d0:4d:46:
         75:e8:32:57:97:ef:d8:38:64:b7:d9:73:3a:63:d1:89:51:8f:
         4d:0c:e8:e9:53:b5:5e:7d:60:2e:84:87:f7:6b:3f:dd:d2:f8:
         8e:dd:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:06 2024 by rpki-client on console-fra.rpki-client.org