Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f6b3bf6-3bd0-3728-a0cc-18596d2b3170.roa
File:                     5f6b3bf6-3bd0-3728-a0cc-18596d2b3170.roa (raw, json)
Hash identifier:          yD4EknnPUk2GBaYlTS+gNw5WMXfmhXPv68lATUEB1s8=
Subject key identifier:   CE:BE:9D:53:88:A2:13:8D:08:36:1E:0A:79:27:18:56:CF:44:34:74
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285843BE471B357B5C4CD4FF0F3E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f6b3bf6-3bd0-3728-a0cc-18596d2b3170.roa
Signing time:             Tue 31 Oct 2023 12:00:00 +0000
ROA not before:           Tue 31 Oct 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.113.0/24 maxlen: 24
                          172.69.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:be:47:1b:35:7b:5c:4c:d4:ff:0f:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 31 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=9dea1afd-2efb-4954-912e-827e688046e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:96:3d:49:5f:55:f8:e2:7d:1a:40:e4:d8:
                    65:c2:89:11:ca:a3:ba:df:aa:de:2c:38:8a:79:6e:
                    41:f2:53:26:b5:c7:f4:09:c2:44:24:d2:84:cc:a7:
                    a3:a8:43:6c:9a:3f:9e:0c:71:08:14:c6:44:d8:65:
                    93:53:c2:b2:9a:d5:ff:06:16:ab:de:40:59:01:08:
                    94:8f:62:b1:a6:b4:d9:ad:83:28:e4:ce:5d:e2:0e:
                    22:11:fb:f9:df:ac:35:be:ea:3d:d2:fa:df:5e:9c:
                    a2:99:e4:e9:1b:a8:92:da:99:6a:87:b1:a2:7d:69:
                    e6:84:fe:3d:5a:39:f2:02:c9:6d:b2:80:77:7b:c3:
                    f7:2e:7c:ed:d4:ae:ec:b2:36:a1:46:a5:5e:4d:29:
                    6e:40:19:e7:06:5e:75:53:17:c4:ab:02:7c:1d:ab:
                    26:57:08:07:43:01:69:7a:55:e6:20:d9:f3:e9:d8:
                    06:b7:f1:44:58:88:ef:15:6f:29:9d:47:c8:65:db:
                    4f:7a:73:3b:b2:89:9f:e3:d0:61:20:7a:c7:40:bf:
                    eb:aa:ea:0e:84:fc:f5:d9:27:37:25:72:04:50:59:
                    9a:7a:ad:b1:bd:56:7f:c9:12:9a:8b:2d:d5:d2:be:
                    44:91:84:30:4a:5d:24:69:1f:ce:a8:55:4e:4b:84:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BE:9D:53:88:A2:13:8D:08:36:1E:0A:79:27:18:56:CF:44:34:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f6b3bf6-3bd0-3728-a0cc-18596d2b3170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.113.0/24
                  172.69.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d5:d0:fe:46:8e:2b:35:fc:d1:63:04:0c:21:ad:9a:c3:83:
         7a:e0:fd:b3:c4:b5:70:13:89:76:4b:96:f8:44:00:d7:f0:80:
         f6:c5:ec:85:ec:ed:87:31:7c:af:e1:18:4f:2b:a0:e3:8e:44:
         fa:96:48:03:df:df:88:2d:db:ee:f2:21:aa:40:4c:04:88:69:
         2d:b0:1a:0e:bc:46:41:42:fd:4a:d4:88:d8:bc:67:d5:1f:14:
         4d:40:90:97:e4:77:e0:25:e6:c8:73:50:2c:6e:0f:96:79:7a:
         c1:28:aa:8b:1b:0b:b9:f4:51:35:fc:9c:9e:53:ad:e8:f1:eb:
         dd:3e:a2:38:f0:93:4e:98:25:0d:cf:00:cf:4c:16:c5:0d:b9:
         de:7e:08:bd:50:1f:83:23:6c:76:41:33:5e:dd:ab:13:83:b2:
         b8:e9:86:76:4a:3c:15:6a:1c:57:51:b8:08:c2:86:86:c8:80:
         0a:c5:ea:c5:99:9f:2a:0a:a8:f1:59:a3:72:85:40:3f:2a:46:
         d4:14:97:6a:d3:73:9a:06:be:04:1e:45:bb:d5:a0:55:cf:68:
         3c:47:cb:09:2b:3c:64:cf:47:bf:64:ba:69:ff:c5:68:c0:93:
         fd:c8:5e:7c:73:51:a8:75:8b:d5:20:f9:9b:1b:aa:79:41:38:
         ea:76:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:40 2024 by rpki-client on console-fra.rpki-client.org