Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/805f72f1-e22b-3181-9fcd-96922be70e91.roa
File:                     805f72f1-e22b-3181-9fcd-96922be70e91.roa (raw, json)
Hash identifier:          1AJbK4YAE6FkSS5Q071aNkKye/67XCbivqsI/EtGMWk=
Subject key identifier:   07:32:42:14:41:81:BF:56:8A:06:C2:D6:99:60:69:05:2B:62:9F:0D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AF2D8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/805f72f1-e22b-3181-9fcd-96922be70e91.roa
Signing time:             Fri 30 Nov 2018 01:10:41 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:f2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0c762621-86a1-49a7-a384-44df65491074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:4d:29:8e:4b:04:89:48:4e:ad:a8:e7:cf:
                    c1:3c:6e:dc:8c:cd:bc:da:dd:14:e8:28:02:f6:12:
                    11:e0:98:ce:ca:2c:c9:1b:ec:3e:97:ae:92:c0:18:
                    b3:be:31:12:e2:d9:23:cb:7d:7e:db:8d:43:c0:b0:
                    e6:c2:56:3f:7a:c3:31:54:7d:de:90:9d:c8:a5:b0:
                    4a:ad:e7:6a:6f:3f:27:a4:43:8e:81:b1:fc:f0:c2:
                    be:94:7f:28:a1:75:9e:a2:96:6c:cc:77:47:6a:28:
                    39:e4:5d:0b:ed:23:b9:59:5e:05:fc:5a:29:4a:c0:
                    63:e8:0b:bf:96:02:1c:71:e9:1c:c9:ad:42:1b:72:
                    b9:23:22:fb:06:c9:73:3f:5a:cc:e5:75:7e:ab:b1:
                    aa:9b:62:23:b4:61:72:80:70:d6:d0:6d:d3:c6:cf:
                    9b:71:98:7d:39:43:f3:8d:ad:26:6b:fd:53:15:1f:
                    48:35:b6:97:81:e3:39:b2:09:e0:33:d3:0e:6a:d4:
                    7b:82:7d:0f:23:d3:e3:70:52:37:5f:5c:f3:b3:b3:
                    b6:d2:ec:94:04:8d:b6:cd:32:e4:eb:07:f0:47:39:
                    c7:8c:87:4f:e9:99:28:7b:da:f3:04:49:bf:db:15:
                    9b:4d:f1:31:e1:2f:87:3e:1a:ca:0a:97:72:b7:c1:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:32:42:14:41:81:BF:56:8A:06:C2:D6:99:60:69:05:2B:62:9F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/805f72f1-e22b-3181-9fcd-96922be70e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:15:0b:5b:bd:9c:17:21:ad:9c:75:7e:b8:e2:30:23:fd:
         e7:95:16:c3:ea:32:46:b9:e3:d6:5d:0e:fa:2c:33:6e:64:cf:
         03:b3:12:d6:cd:9e:fb:f7:71:03:bb:c4:cf:31:d2:7f:e2:aa:
         ad:37:1c:9d:e6:e8:f0:09:39:d3:f2:aa:41:77:73:9b:6a:f0:
         4e:63:a3:a4:a2:6a:72:2b:10:88:1a:87:07:f1:e9:21:e8:2d:
         e1:6e:b2:9e:f6:86:88:55:f7:18:8f:de:83:fb:28:e2:b5:5d:
         fb:44:fa:78:2a:e3:f3:be:4a:77:2f:8d:98:a8:1c:ee:ec:f8:
         78:2e:bc:fa:92:6c:4d:35:20:5d:ea:72:71:c1:ce:8c:3b:04:
         3b:43:c6:78:06:fe:cf:c7:2b:17:44:92:ba:09:c2:6d:e3:52:
         7d:d3:bb:94:0c:42:51:e3:e1:b8:6f:11:aa:34:ed:ea:fe:9c:
         ab:4e:28:8f:c6:ad:74:f7:02:76:4f:27:c4:1b:b4:9e:75:b7:
         96:0c:a3:72:7f:cc:79:10:1d:ea:c9:9d:f2:f1:ff:af:db:12:
         be:11:6a:f6:34:1a:d7:a2:f5:b8:c0:07:48:1f:9d:14:59:4b:
         35:ef:97:f7:85:81:92:f5:36:8f:23:7f:0f:8f:79:a2:79:42:
         20:97:54:c6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Iq8tgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDBj
NzYyNjIxLTg2YTEtNDlhNy1hMzg0LTQ0ZGY2NTQ5MTA3NDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKd4TSmOSwSJSE6tqOfPwTxu3IzNvNrdFOgoAvYS
EeCYzsosyRvsPpeuksAYs74xEuLZI8t9ftuNQ8Cw5sJWP3rDMVR93pCdyKWwSq3n
am8/J6RDjoGx/PDCvpR/KKF1nqKWbMx3R2ooOeRdC+0juVleBfxaKUrAY+gLv5YC
HHHpHMmtQhtyuSMi+wbJcz9azOV1fquxqptiI7RhcoBw1tBt08bPm3GYfTlD842t
Jmv9UxUfSDW2l4HjObIJ4DPTDmrUe4J9DyPT43BSN19c87OzttLslASNts0y5OsH
8Ec5x4yHT+mZKHva8wRJv9sVm03xMeEvhz4aygqXcrfBKisCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQHMkIUQYG/VooGwtaZYGkFK2KfDTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzgwNWY3MmYxLWUyMmItMzE4
MS05ZmNkLTk2OTIyYmU3MGU5MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxFCDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAcusVC1u9nBchrZx1frjiMCP955UWw+oyRrnj1l0O+iwzbmTPA7MS1s2e+/dx
A7vEzzHSf+KqrTccnebo8Ak50/KqQXdzm2rwTmOjpKJqcisQiBqHB/HpIegt4W6y
nvaGiFX3GI/eg/so4rVd+0T6eCrj875Kdy+NmKgc7uz4eC68+pJsTTUgXepyccHO
jDsEO0PGeAb+z8crF0SSugnCbeNSfdO7lAxCUePhuG8RqjTt6v6cq04oj8atdPcC
dk8nxBu0nnW3lgyjcn/MeRAd6smd8vH/r9sSvhFq9jQa16L1uMAHSB+dFFlLNe+X
94WBkvU2jyN/D495onlCIJdUxg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:01 2024 by rpki-client on console-fra.rpki-client.org