Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6414671b-e391-3eef-b5b6-dd6f1435d7be.roa
File:                     6414671b-e391-3eef-b5b6-dd6f1435d7be.roa (raw, json)
Hash identifier:          JrDy78N2CA4lpAOX488aqBGzQCaLWc8ROpO/vLZkuzw=
Subject key identifier:   60:D4:05:0B:DB:B1:FF:BF:F6:28:71:E2:33:A0:8C:E0:D1:45:08:A2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5A75CBECDDC59D91EAF758
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6414671b-e391-3eef-b5b6-dd6f1435d7be.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:5a:75:cb:ec:dd:c5:9d:91:ea:f7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=c5e742d0-7b61-43e0-b211-4271b8a9894c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:f8:6b:9c:9b:79:4e:fb:f2:bb:4b:f4:af:
                    e3:a3:da:21:f8:c0:d8:67:23:17:2d:b8:49:48:8b:
                    d6:41:99:ea:4b:fe:6c:65:ab:3c:d0:ba:70:6b:87:
                    1b:6c:4b:38:78:e7:a4:91:c3:46:07:9f:40:91:70:
                    86:e8:cb:39:2f:f8:11:23:05:0d:7b:18:c5:22:79:
                    fb:03:1d:77:b4:2d:b9:45:63:5b:e1:61:94:4c:c3:
                    a4:0d:74:1d:48:ce:af:95:14:a9:36:be:15:85:16:
                    94:90:3f:ca:24:a4:64:8d:4a:5d:94:1e:43:ab:ed:
                    3e:60:59:ba:80:a1:1c:4d:55:ab:5d:51:f9:80:2f:
                    80:85:44:91:11:d6:d7:6b:1a:48:06:7b:52:28:77:
                    b7:bb:06:5e:89:fb:53:0b:d5:bf:ed:6d:2f:4d:2b:
                    51:2b:b0:71:44:7e:d4:dc:73:d9:bb:f9:35:4f:2b:
                    29:ea:e2:6b:fb:41:f9:01:66:5e:18:83:39:46:58:
                    95:1a:b6:94:36:5b:84:de:95:f9:cf:c6:bf:cb:5a:
                    45:db:fa:d3:50:6d:88:20:04:ae:97:a0:d3:3e:0b:
                    d0:c7:57:72:5e:a5:d7:4f:2e:86:4f:3f:92:e8:23:
                    65:80:a5:1a:4b:b7:dc:47:f6:2e:27:ae:ed:44:c2:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D4:05:0B:DB:B1:FF:BF:F6:28:71:E2:33:A0:8C:E0:D1:45:08:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6414671b-e391-3eef-b5b6-dd6f1435d7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8b:5d:4f:ef:f0:4b:49:4e:0b:9e:b4:1a:77:2e:a1:74:6f:
         51:17:32:2d:e1:99:3a:63:74:80:52:32:7b:90:15:44:4c:9d:
         76:6a:5e:51:1d:ad:ae:50:03:32:a1:45:a8:48:44:ad:17:20:
         52:60:82:18:fc:5d:5b:fc:cb:3b:b3:3e:05:d3:c0:9f:25:03:
         ee:d9:c2:12:c4:2a:a2:06:84:c8:d4:96:98:74:9f:06:9c:5d:
         03:c5:2f:c2:76:81:f7:96:e5:63:23:2f:0c:31:1e:e3:35:26:
         53:8c:58:0a:ee:01:0f:af:1b:49:98:00:3d:a2:b9:22:05:e6:
         ea:b4:1d:ba:46:15:8e:0b:48:69:34:62:be:fb:c9:1f:22:23:
         90:ef:3c:69:24:8b:00:fa:88:bd:aa:3e:45:9d:36:ea:2a:9f:
         c3:6b:4e:c3:ae:00:d4:c2:72:90:09:89:a6:93:53:08:17:2a:
         56:46:c8:30:32:81:7f:6b:c4:76:93:52:2c:1a:d3:e0:ca:4d:
         73:f3:da:8c:ac:a3:9f:8b:e9:f3:25:9d:e4:4c:9b:6f:29:cf:
         cb:c0:c6:85:db:f7:e5:c9:95:66:5b:f4:d0:ea:1d:42:c3:a7:
         c7:5f:5a:87:f3:5f:d1:0d:03:cf:a9:cf:2c:68:bb:47:5e:88:
         f6:18:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:05 2024 by rpki-client on console-ams.rpki-client.org