Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fc36a20-852f-3b1a-81b1-cd3fe9145009.roa
File:                     5fc36a20-852f-3b1a-81b1-cd3fe9145009.roa (raw, json)
Hash identifier:          Vv+eOf7sH0gyyp6CoNR6kacaNpdjkBgH0WwywU6KaPI=
Subject key identifier:   75:E1:5D:A2:0E:98:33:C8:80:90:49:A2:1F:E9:B2:B1:AF:04:6B:9B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC169EB2CD5FB
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fc36a20-852f-3b1a-81b1-cd3fe9145009.roa
Signing time:             Fri 05 Apr 2019 01:46:17 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Tue 22 Jun 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:eb:2c:d5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jun 22 04:00:00 2027 GMT
        Subject: CN=a92c3229-558f-45d2-b20c-fe9bd6fe6b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:aa:44:6e:b7:3e:5a:da:90:d7:69:fb:3d:
                    71:6f:ab:33:e6:5e:6a:94:f6:b7:fb:fd:65:26:c8:
                    76:2a:64:b0:d2:30:3f:02:3e:57:78:20:bd:b9:0d:
                    87:34:a8:9b:37:38:c7:b2:22:e1:d7:43:aa:3d:6b:
                    42:d9:5b:ea:7c:c8:58:f0:b1:1f:6d:dc:f3:e6:17:
                    2d:6b:32:14:38:ec:07:97:66:41:de:6c:d4:f9:65:
                    4e:75:b3:a4:ac:6b:de:96:e6:e7:35:3c:c9:31:0b:
                    92:dd:6e:d0:5b:db:66:94:a5:52:12:8f:a4:0f:13:
                    29:87:e5:e2:01:8a:3e:0c:97:21:75:1b:58:fb:3a:
                    84:69:58:f3:f1:b9:1b:be:ad:9f:47:f9:a2:e6:6b:
                    a2:1e:0f:36:2a:80:59:88:3a:fd:1f:b2:47:9f:25:
                    90:4f:3e:b1:cd:6e:d4:55:a2:d3:a6:84:82:d1:51:
                    83:66:97:f6:21:ce:53:be:df:b6:df:54:1f:dd:fa:
                    4b:15:81:49:2e:36:0a:2c:2b:4e:39:ed:9b:53:9c:
                    ff:b4:07:91:d9:3a:f2:1c:6e:91:12:da:40:f5:fc:
                    7c:70:2b:8f:18:b3:d9:5c:18:0a:24:4a:3e:7a:a3:
                    65:76:11:e2:7c:c0:d9:8d:3c:c4:fa:41:b4:fa:c9:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:5D:A2:0E:98:33:C8:80:90:49:A2:1F:E9:B2:B1:AF:04:6B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fc36a20-852f-3b1a-81b1-cd3fe9145009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:b2:a5:cc:e7:84:9f:ea:45:c9:05:ef:2d:8f:8d:d8:7d:
         0b:1e:6d:e6:8b:b2:c1:60:27:d0:e6:07:aa:39:a7:f9:4d:f1:
         16:53:3f:99:5f:03:bc:08:26:b2:ad:cb:93:04:9b:44:31:60:
         ae:84:41:1b:7a:8a:a1:41:4e:2d:09:3e:b7:59:e3:0a:49:d1:
         07:2b:2f:78:a1:47:43:7d:03:56:cd:f8:04:65:28:10:de:4d:
         19:e1:ac:f6:8c:e2:76:ab:1d:28:14:84:a8:22:c5:37:bd:97:
         e5:c7:48:d2:17:13:6e:80:0f:33:1b:30:94:1f:b2:72:02:c2:
         74:7c:95:69:c0:e6:27:5b:74:53:87:40:6e:78:79:2a:0b:3b:
         e0:88:ee:e7:f4:c9:cc:68:6c:01:38:e7:21:d7:cd:fe:ff:cd:
         e8:be:76:c0:0f:b3:42:4f:ec:a7:1b:77:44:7d:09:0b:50:0e:
         32:67:2f:91:29:c3:91:05:5b:60:ee:eb:8a:20:cf:be:c5:27:
         0e:dd:09:cb:b1:85:44:b9:91:ac:ae:20:9b:d5:5a:2e:cd:2e:
         0d:a4:34:b8:4d:84:f6:c1:a9:fc:89:c6:6b:1d:5b:02:f1:c5:
         36:b4:c8:3a:11:3f:34:24:a8:eb:ad:b3:43:f1:83:67:b4:c8:
         92:61:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:01 2024 by rpki-client on console-fra.rpki-client.org