Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9493dfde-c92a-3697-a174-f3b66e9c9c31.roa
File:                     9493dfde-c92a-3697-a174-f3b66e9c9c31.roa (raw, json)
Hash identifier:          FJn8t3B+SNOarzB8bhqa8CGGB03dy47qqUDDx8P+QbA=
Subject key identifier:   BA:C0:1A:6C:28:F0:7A:55:E8:33:4B:8F:0A:96:B0:82:18:CB:A1:6B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A2CBF6A01
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9493dfde-c92a-3697-a174-f3b66e9c9c31.roa
Signing time:             Wed 17 Apr 2019 19:21:43 +0000
ROA not before:           Wed 17 Apr 2019 04:00:00 +0000
ROA not after:            Sun 04 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:2c:bf:6a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 17 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2027 GMT
        Subject: CN=59484efc-1f61-4970-9cb3-5fca4704aea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:4d:c3:d5:cb:2b:aa:7a:96:87:5d:c3:e6:
                    9d:4c:07:43:50:86:4c:5e:ca:e5:68:58:a3:07:06:
                    e0:3a:3e:52:3b:ac:14:79:5c:95:a5:f3:a3:b7:df:
                    72:dd:dd:9f:74:46:8d:cd:e7:31:96:4a:43:42:9f:
                    72:17:86:9a:a3:75:ba:f6:6d:07:d8:ff:dd:f4:eb:
                    fb:8b:ea:65:56:be:38:c1:5a:47:56:cb:9c:4b:39:
                    a0:32:22:93:81:72:9c:c2:56:fb:d1:3e:d5:b2:a4:
                    03:e1:00:11:07:ab:5a:0d:84:9c:01:a4:ca:91:e8:
                    c0:17:fa:5f:ee:2b:5d:34:96:3b:33:6d:a1:31:50:
                    81:5a:d8:7b:5b:3e:a1:2a:7e:a1:a7:3b:d4:a3:46:
                    5e:44:14:99:e0:8b:9c:e6:66:24:e9:1d:40:8b:0d:
                    ac:8b:70:6e:dc:8a:4e:8d:62:b2:f8:3c:16:44:eb:
                    ea:d1:f2:98:0d:b9:68:3e:28:ca:eb:10:66:dd:4f:
                    32:10:63:75:a8:11:58:97:67:a2:a4:02:e1:c4:ef:
                    92:c6:73:8c:94:54:05:da:75:a1:57:77:04:20:ac:
                    a0:5b:18:58:f1:47:36:c9:f0:a3:c9:c5:f3:18:1b:
                    e7:9c:92:ed:6e:79:ce:5b:1b:62:bd:41:58:98:15:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C0:1A:6C:28:F0:7A:55:E8:33:4B:8F:0A:96:B0:82:18:CB:A1:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9493dfde-c92a-3697-a174-f3b66e9c9c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:42:88:9e:1f:e9:60:89:5d:d6:82:b5:c7:24:99:ab:1c:
         70:11:aa:80:e9:8e:82:d9:26:59:f1:ee:97:90:0f:d1:84:59:
         25:7d:d2:e1:47:3c:e8:2b:03:2e:38:35:e6:da:7a:6a:9e:8b:
         18:9a:6d:ab:20:29:75:77:a7:be:d5:bc:70:7e:53:a3:8f:d1:
         75:13:94:54:b4:6c:5e:86:fa:42:07:f2:2d:59:18:78:93:c7:
         ae:f8:b3:8f:ab:81:15:f5:80:b0:2f:3e:c7:f4:ae:f5:a2:35:
         e2:d5:d4:fa:e6:ce:87:d7:b9:1a:e2:47:5e:97:96:49:b2:18:
         f7:72:b2:4d:17:be:9a:81:b6:74:fa:e5:a9:d2:4c:3d:69:83:
         e5:89:35:5c:d5:08:c5:78:c9:17:96:ba:60:c7:22:97:df:83:
         20:11:53:f3:e5:93:4e:b5:0c:33:91:6a:3f:b2:19:c6:3c:96:
         19:92:5b:f7:23:e0:4e:15:3f:ad:0e:d4:95:e6:ac:be:e4:85:
         7a:d2:b3:1f:52:ce:08:59:e5:d4:ce:3b:0d:20:14:05:ba:b0:
         79:03:1e:67:fc:1f:18:f0:70:90:ab:de:b1:3e:09:43:80:53:
         ad:7c:c7:ee:39:c6:24:b7:75:23:02:8d:e8:8f:98:b2:f9:69:
         88:30:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:42 2024 by rpki-client on console-fra.rpki-client.org