Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/965a8ff1-1332-31d0-83ec-fa3634766893.roa
File:                     965a8ff1-1332-31d0-83ec-fa3634766893.roa (raw, json)
Hash identifier:          fjvsp6kaRcDuTHseZXNMQET4VYl9IOyi7GmRDbg9CVA=
Subject key identifier:   81:C9:E5:B8:C3:6E:43:AB:66:61:37:2A:BB:CD:D8:C4:CE:40:C0:BB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583CD0C0183EFF21887BA3251BC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/965a8ff1-1332-31d0-83ec-fa3634766893.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d0:c0:18:3e:ff:21:88:7b:a3:25:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=34bf83d8-8e6f-4574-b1e9-117a48ba9651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:08:9f:9f:6b:9e:64:54:e2:73:2d:30:08:
                    c6:a6:08:9d:c8:8a:52:21:e0:24:72:15:03:08:87:
                    aa:77:1d:3b:b0:f6:cd:05:a8:05:e7:82:53:28:1c:
                    6a:38:38:4c:56:1b:52:d2:9c:bc:b0:7f:68:58:dc:
                    0e:1a:8c:2c:b5:c7:81:d8:a8:06:0a:42:02:31:df:
                    b9:95:a6:eb:09:fa:3f:6a:b0:d9:78:12:c9:5d:af:
                    0e:ad:10:f4:83:b9:94:93:c4:1f:b9:0c:9e:d4:b1:
                    8f:4f:08:ca:56:e7:65:3c:a7:4a:9f:78:e2:66:e1:
                    dd:09:d3:68:78:b9:0f:d6:f7:4c:b8:45:a9:26:06:
                    0d:41:ea:6b:6e:e4:ea:b4:50:94:0b:86:1e:e4:5c:
                    5d:87:c5:9a:7d:d2:8d:57:80:6f:a5:47:95:6a:98:
                    29:fe:af:8a:60:e0:3a:6f:60:05:0f:c9:84:e7:6a:
                    43:ea:b2:90:61:31:a3:fc:c0:17:14:9c:d0:67:66:
                    3d:20:26:56:36:b3:76:95:32:f0:eb:e7:ba:59:95:
                    9d:7f:70:71:b8:92:09:22:a1:88:b5:c3:18:60:17:
                    1b:97:45:b8:be:de:07:6f:56:1c:88:6d:09:35:91:
                    58:fd:fd:84:9e:e6:89:44:2c:f9:cd:4e:bb:cc:30:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:E5:B8:C3:6E:43:AB:66:61:37:2A:BB:CD:D8:C4:CE:40:C0:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/965a8ff1-1332-31d0-83ec-fa3634766893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:b9:ee:1a:ac:50:46:04:34:64:fd:c6:15:db:f1:b3:10:
         df:5f:40:c8:35:b0:ee:f4:22:30:ba:aa:a9:f9:e8:15:7c:85:
         0b:d1:03:81:5f:63:6c:e5:48:e3:b4:d1:41:87:bf:a0:f2:16:
         fc:25:95:5c:24:ee:8a:88:0d:4f:45:9c:ea:75:b7:79:f7:53:
         40:36:eb:e8:2b:60:e1:3b:b4:ca:49:a1:41:c7:42:34:77:f7:
         1a:68:5e:a4:61:0c:36:df:08:5c:a5:a1:cd:ce:61:9c:a8:2d:
         76:ee:03:c6:9f:77:a9:e5:6d:99:70:35:6f:12:80:39:95:5a:
         d9:44:eb:d0:7f:76:42:25:c4:f0:ba:23:27:21:f0:58:c2:ba:
         b8:ed:b6:d2:ef:ec:86:a4:49:9b:98:e5:93:64:76:10:a4:31:
         8c:b4:75:ba:6a:36:2f:e2:2c:4a:04:3b:a5:da:6a:41:ed:e5:
         e9:4a:51:bb:de:de:ae:c4:3a:57:02:ba:69:73:9f:d4:3e:d3:
         9e:d8:66:06:88:56:ab:28:8f:f7:45:38:60:78:bc:5e:95:f3:
         1d:0c:24:b2:25:1e:bb:b2:84:c1:14:58:51:36:2f:99:a0:35:
         9b:5e:6f:7f:74:f1:a0:bf:49:c0:49:37:df:8e:88:50:91:ea:
         3d:fc:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:42 2024 by rpki-client on console-fra.rpki-client.org