Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/744cb416-a28e-3f4c-a443-aa3ab4153af5.roa
File:                     744cb416-a28e-3f4c-a443-aa3ab4153af5.roa (raw, json)
Hash identifier:          bclvUcEimEtG7O4KabUtDmR0TN/7fb0/6e5GjPdysGU=
Subject key identifier:   89:14:90:86:81:B2:53:B5:2B:F5:65:13:FD:AA:EF:E8:A1:76:D4:8A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16EEA24F8D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/744cb416-a28e-3f4c-a443-aa3ab4153af5.roa
Signing time:             Mon 09 Dec 2019 10:12:01 +0000
ROA not before:           Mon 09 Dec 2019 05:00:00 +0000
ROA not after:            Fri 25 Feb 2028 05:00:00 +0000
asID:                     13335
IP address blocks:        172.64.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:ea:24:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:00:00 2019 GMT
            Not After : Feb 25 05:00:00 2028 GMT
        Subject: CN=176f27dc-8cdd-4be2-be3f-d18aa5ac71fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:9f:12:9b:99:25:2e:62:e5:e6:49:7d:b5:
                    64:6e:b6:f7:ed:71:20:b9:ca:59:4b:e5:a9:f2:aa:
                    2d:9c:3b:0d:01:f9:cc:c6:d9:65:d8:dd:5f:e9:fc:
                    27:cc:91:06:9a:4b:5f:24:c5:13:dd:18:38:10:93:
                    16:9f:e1:d0:e3:b0:e5:ac:04:a5:5f:2f:43:b9:d5:
                    5f:f5:7c:a1:70:7d:a5:96:72:51:42:cb:d7:3b:72:
                    99:d5:30:e5:a7:df:a4:12:62:4b:8a:20:17:05:5a:
                    2e:23:cc:04:d9:2c:a9:4f:74:53:14:05:12:8e:66:
                    d4:dc:b5:5a:3f:3e:ac:04:43:20:60:9b:7e:c3:ba:
                    be:55:9e:48:6d:bc:e9:f8:8d:a1:6b:e5:c1:6f:7d:
                    db:c5:53:01:46:f8:a6:b6:56:e0:c8:44:64:dd:20:
                    cd:01:da:dc:73:a7:7c:5a:30:36:6d:4c:2e:b8:df:
                    1a:ae:7d:25:d8:85:48:67:55:5b:2c:c9:a2:d6:a5:
                    89:52:62:02:f9:92:19:d1:2b:36:07:18:82:c9:24:
                    0a:94:7d:87:8c:ca:cd:04:70:52:a3:0a:9e:9c:40:
                    7a:52:f5:d0:ce:cd:8a:69:89:e4:43:c4:2e:1f:29:
                    f2:51:50:a0:90:61:48:eb:53:7b:03:dc:64:86:78:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:90:86:81:B2:53:B5:2B:F5:65:13:FD:AA:EF:E8:A1:76:D4:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/744cb416-a28e-3f4c-a443-aa3ab4153af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:24:d2:e4:0c:90:a4:85:dd:3d:98:10:95:83:19:30:5e:
         65:9b:df:53:3f:bb:f8:38:29:bf:90:54:39:68:94:52:46:ae:
         d2:83:cb:c8:0c:b8:eb:1f:ef:e8:68:a7:c3:ef:ae:76:f4:cf:
         8f:7d:a1:81:ea:73:4a:91:fb:cb:47:d6:a5:9c:59:50:00:b3:
         99:ba:60:88:86:da:1d:2f:8a:b8:a5:25:d7:e0:c3:74:62:36:
         93:f1:9c:5b:9a:fc:b5:8a:71:86:c4:08:ea:a3:b5:38:f4:bf:
         3b:8b:39:52:c3:2e:33:e6:e6:47:93:6d:e3:2e:4e:1e:49:fd:
         3c:19:e4:37:11:9f:a6:27:1f:69:0c:c9:4b:d8:87:ae:f1:da:
         71:71:45:7f:ff:a6:cf:ce:e5:59:f9:16:53:b2:56:29:81:80:
         0a:5b:5a:ee:99:7c:9c:92:dd:c6:e4:c0:cd:18:61:8f:a8:11:
         33:a9:67:1c:fd:3d:6f:d3:d1:d1:e5:4c:b7:db:9e:7b:0f:55:
         4d:6c:fa:99:96:e4:60:a8:e7:77:1a:6e:56:d0:12:fb:c4:27:
         b1:e4:63:59:87:7c:39:c7:0c:ad:ce:2e:98:e4:84:26:81:fa:
         c5:d1:03:ed:8e:00:23:9f:e2:91:51:e8:af:94:36:ef:68:5f:
         dc:ff:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:06 2024 by rpki-client on console-ams.rpki-client.org