Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f4c9dff-75cf-3078-a22b-a23bd09d65f1.roa
File:                     8f4c9dff-75cf-3078-a22b-a23bd09d65f1.roa (raw, json)
Hash identifier:          qwNj6H9UtELt4zv4CuunxpvJ/mngcxzH8EOvF4p7lvM=
Subject key identifier:   9A:98:07:21:30:10:63:0B:F9:51:57:81:43:62:25:EE:6C:D3:77:50
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC169EB100FF5
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f4c9dff-75cf-3078-a22b-a23bd09d65f1.roa
Signing time:             Fri 05 Apr 2019 01:14:52 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Tue 22 Jun 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:eb:10:0f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jun 22 04:00:00 2027 GMT
        Subject: CN=931eedac-d3bd-4cbf-a806-9cdcf6264844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:f2:24:52:30:a4:74:a0:d4:53:e7:57:53:
                    8a:ee:0b:95:3e:46:ae:f2:e4:79:3a:b7:ff:1a:a0:
                    0c:d3:75:08:4b:c2:83:97:4d:55:72:d7:d7:a7:c8:
                    aa:f3:51:3b:ae:06:18:cd:07:d3:a5:2e:1b:7c:2b:
                    69:0f:67:00:c3:10:11:b0:71:78:0f:f5:63:79:2e:
                    9e:04:f6:6a:33:01:8f:35:d4:72:54:72:27:79:2e:
                    1f:23:ee:35:e9:75:37:e6:88:90:b1:34:a1:87:03:
                    85:49:1e:e4:94:8a:33:22:ac:70:b7:c7:68:58:e6:
                    93:f3:2f:1b:5d:87:06:f2:a7:35:ac:b4:94:a8:4e:
                    b3:db:f9:e9:b0:fa:f7:a0:d7:91:fb:42:4f:b5:1b:
                    fa:5f:a4:a5:ac:f6:28:75:09:23:87:91:02:d2:d9:
                    2c:20:0b:0f:4c:c7:cb:66:d8:1c:86:7c:53:1f:cf:
                    49:15:f6:06:91:2b:86:cf:99:38:11:06:9b:4d:70:
                    d0:44:3e:cb:ad:9b:9e:d9:60:16:bb:82:f8:7a:a8:
                    33:68:b0:a7:09:b3:ec:51:25:e5:d2:ae:9c:ef:9a:
                    4d:4b:bc:38:f0:de:77:37:71:8f:5f:a0:d5:99:27:
                    02:46:72:ca:5c:c4:ac:57:25:15:75:49:22:18:73:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:98:07:21:30:10:63:0B:F9:51:57:81:43:62:25:EE:6C:D3:77:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f4c9dff-75cf-3078-a22b-a23bd09d65f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:09:0a:36:0e:8b:6b:e0:d8:52:16:62:c6:97:32:5d:d1:
         a2:5d:eb:4b:79:ab:15:77:fc:ba:d4:ac:2e:72:d7:14:31:44:
         bf:63:53:22:53:ef:5b:92:b9:00:19:ee:01:cc:01:c0:68:40:
         32:8e:b0:29:83:15:4b:08:ed:10:a7:39:c8:6f:0d:c2:78:f1:
         2a:e6:c8:65:5d:87:78:15:d1:d8:86:80:4b:f8:4b:fa:03:c7:
         1e:1c:52:c8:cb:3e:59:c6:95:bb:09:9a:92:62:a3:3a:df:fe:
         8f:60:31:fb:83:c1:41:1c:f0:dd:d0:ca:4e:74:44:a0:67:d7:
         31:e8:46:8e:89:1c:a8:c6:d2:70:bb:ba:1f:dd:77:b3:ab:a8:
         5c:9b:2c:94:0a:5d:6c:f6:12:d2:dd:19:f3:94:52:b4:f3:16:
         25:61:d5:59:bb:12:2e:4d:3e:4d:21:40:45:fd:4e:16:97:6e:
         9e:a5:da:9f:22:ab:40:47:ba:67:86:cf:75:65:aa:08:82:85:
         6b:f2:c7:ce:6d:96:31:3c:33:b1:a8:f5:fd:3e:2f:d6:65:bf:
         e0:8c:a8:14:3b:df:b8:01:ed:8f:73:03:96:68:29:88:5f:0a:
         16:fb:71:37:59:11:94:86:ea:2c:cd:a0:e6:c2:d7:81:a3:66:
         65:93:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:42 2024 by rpki-client on console-fra.rpki-client.org