Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d38a87c-87a3-32a0-85d4-016f6b979448.roa
File:                     8d38a87c-87a3-32a0-85d4-016f6b979448.roa (raw, json)
Hash identifier:          WG//rc+O0TubPlofEVjJjOyj0czds8o5HNzCCTrjTVk=
Subject key identifier:   66:6E:51:CE:2A:1F:62:27:5D:68:93:ED:6B:DC:A1:85:3F:CC:70:B0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583F4FC1102792C5470DD36E0600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d38a87c-87a3-32a0-85d4-016f6b979448.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Sun 19 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4f:c1:10:27:92:c5:47:0d:d3:6e:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Sep 19 04:00:00 2027 GMT
        Subject: CN=e03468cb-2a20-4af4-84ac-8a70783b68bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:56:ff:88:34:d8:92:ad:ec:ad:90:cb:53:
                    b8:5b:28:ba:ad:39:27:33:cf:d9:29:97:4b:7d:fc:
                    e6:1b:06:e3:8f:03:3c:6e:ad:2c:74:56:15:c5:38:
                    0a:99:d6:12:49:5a:7b:c1:a0:17:94:8b:39:c3:a8:
                    4a:e0:9c:1a:c6:dc:ab:44:c5:25:23:f7:f9:84:05:
                    96:a6:9a:54:c4:20:3b:d1:1f:30:4c:7e:e2:d6:f6:
                    4e:ae:b9:00:34:9e:04:07:09:68:e6:5a:06:16:da:
                    05:98:f6:4a:a8:25:ea:6f:c1:1e:5e:75:03:4d:57:
                    87:32:93:48:e6:85:6a:6b:18:6e:2a:a4:e1:2d:60:
                    bd:b2:fd:28:2e:04:3e:30:f0:9d:96:b5:52:6f:ef:
                    47:f8:4d:b4:fa:fd:be:27:1d:52:47:b5:64:25:52:
                    0e:fe:6e:70:c6:b2:fe:bc:a1:a6:ad:82:8b:d9:8c:
                    9b:dd:d0:8e:c4:60:60:cf:ba:87:8d:e9:3f:04:47:
                    60:57:89:f0:01:09:1f:98:3d:fc:16:47:b1:89:0f:
                    f7:09:70:ba:fb:f0:30:25:6c:6d:2b:27:2a:4a:14:
                    f8:e5:8e:2b:27:01:e0:19:2c:cd:c1:d5:60:c8:f2:
                    89:e3:ad:9f:a8:c7:0d:7e:f4:4a:f6:05:7b:c3:7a:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6E:51:CE:2A:1F:62:27:5D:68:93:ED:6B:DC:A1:85:3F:CC:70:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d38a87c-87a3-32a0-85d4-016f6b979448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:16:12:3d:dd:0d:4c:61:0f:bd:42:99:a5:8f:ad:91:c6:eb:
         bd:a3:4b:f1:fb:d8:6d:06:d6:fc:62:e7:4b:7c:3f:df:e7:0d:
         f9:61:85:3a:30:69:7e:4e:1f:4b:cf:04:c9:ef:5f:4b:2d:9b:
         9c:00:2e:c4:a6:e8:aa:95:94:18:de:7e:53:44:69:91:fc:1a:
         63:2c:b8:e1:14:58:ed:1a:88:86:93:fa:a3:d6:6a:7f:6e:37:
         d6:b6:76:b3:25:29:ec:ae:49:57:a6:8c:7a:a8:25:dd:0a:e5:
         65:c4:0f:c9:2d:d1:4a:21:23:03:e5:35:80:1a:62:d1:03:52:
         55:90:25:15:5c:f0:75:f9:e4:53:fc:50:20:fd:7e:75:2b:7d:
         43:88:b5:3a:27:e0:64:83:e9:55:00:70:c8:75:f5:0f:e9:3a:
         f0:65:77:33:bc:46:57:79:39:40:51:3a:0e:b6:2e:59:c8:b7:
         9d:5f:30:3a:e7:4c:cd:73:17:ba:4b:e0:27:65:3d:b9:e5:9b:
         75:79:f8:3b:a4:e8:29:65:66:0e:7f:96:97:90:a7:48:60:ab:
         5a:e3:c3:5c:25:40:d6:d5:16:12:ec:73:1a:e5:04:68:12:32:
         6d:49:4f:78:b0:5b:2f:e5:0f:61:48:2b:ec:3a:47:c2:cb:08:
         a3:79:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:09 2024 by rpki-client on console-ams.rpki-client.org