Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97dc5de0-635b-3e60-b81c-a315e00289b8.roa
File:                     97dc5de0-635b-3e60-b81c-a315e00289b8.roa (raw, json)
Hash identifier:          MP4gK4MGzyIJWg4eMhr2L2ShiyCtrVrJs22QxWln9L0=
Subject key identifier:   31:C0:C4:01:C2:29:27:77:CE:E7:A2:D3:FE:EB:16:5A:28:65:C8:A0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F1556201C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97dc5de0-635b-3e60-b81c-a315e00289b8.roa
Signing time:             Tue 17 Dec 2019 19:29:23 +0000
ROA not before:           Tue 17 Dec 2019 05:00:00 +0000
ROA not after:            Wed 21 Oct 2026 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:15:56:20:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 17 05:00:00 2019 GMT
            Not After : Oct 21 04:00:00 2026 GMT
        Subject: CN=ff63f5c1-7695-4185-bdf8-431a5aeca1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:bc:d2:75:25:b7:f6:2c:2f:94:e9:66:39:
                    3e:9e:13:1f:1c:3f:73:db:ad:0e:0d:d7:62:b0:a6:
                    76:f2:4e:20:2c:80:05:9d:49:28:98:ab:d1:99:02:
                    83:a0:2b:91:78:2d:99:41:53:1b:fa:28:67:7e:39:
                    97:54:38:ef:2f:fa:82:30:64:d7:65:e0:0c:22:a4:
                    c5:80:bc:41:72:dc:47:2e:96:16:61:0f:a6:9f:47:
                    4f:dd:a7:0a:84:68:24:6e:47:c1:b6:bb:a5:80:7f:
                    bf:57:b5:40:a4:b1:56:b2:d6:53:51:12:79:b4:7f:
                    91:94:62:a2:31:34:0b:eb:62:7a:44:54:98:db:7d:
                    25:3c:49:60:80:76:25:0a:9d:cd:13:fe:4a:56:8b:
                    80:12:d8:e7:00:b2:cd:bf:92:22:15:c9:64:bf:00:
                    fb:01:16:88:4c:9d:16:51:cb:c1:33:e0:6e:f5:24:
                    33:89:89:d7:19:1e:12:dd:9e:3c:bd:53:7a:ee:52:
                    8a:48:06:5e:f5:a5:54:fe:bc:51:df:67:d3:7a:c0:
                    ca:cb:08:08:bd:68:5d:f5:05:f6:82:42:81:bb:12:
                    50:0d:4d:ca:52:33:5c:93:9e:6c:57:dc:a8:89:e8:
                    5a:c8:01:64:97:4f:70:10:b0:b3:20:99:a7:11:f6:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C0:C4:01:C2:29:27:77:CE:E7:A2:D3:FE:EB:16:5A:28:65:C8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97dc5de0-635b-3e60-b81c-a315e00289b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:df:b9:35:77:a1:c1:cb:d7:46:f0:01:7e:c8:57:f1:fd:
         b5:ae:ae:fb:da:c5:5c:8b:9a:35:f0:b1:f1:6d:00:68:c0:31:
         2f:c0:e6:9d:23:1b:df:de:58:4f:2a:cc:b8:a1:d7:f1:30:35:
         aa:69:b6:3f:e7:56:5e:61:ac:0c:df:b8:d2:c8:ee:12:c2:03:
         ce:21:9d:3e:50:da:d1:03:e8:3b:dc:04:b1:5e:5c:35:27:71:
         ba:a0:f6:73:cf:7c:d2:7c:b8:6d:fa:21:07:d9:27:35:a4:b5:
         7f:01:cd:07:17:cb:37:12:0e:2c:ba:d6:61:af:2a:0b:b7:60:
         05:aa:04:39:1e:df:0f:08:bc:5a:50:6c:ea:f0:f0:ac:ef:23:
         98:94:ec:fc:ae:b7:55:5e:11:65:ce:4d:b4:ca:21:f6:f7:26:
         79:8c:6b:ff:ea:4e:10:4d:73:59:b4:d0:ff:f9:12:76:46:f3:
         de:75:c8:b9:1d:3e:c3:31:a5:7f:0e:d8:7b:b4:d5:e2:61:fd:
         a8:94:76:45:db:9b:3f:b8:30:75:e5:ab:11:e5:93:c2:00:d1:
         90:05:ed:8c:ea:8c:ef:91:15:bc:b9:32:72:e5:1b:5e:21:f0:
         d8:76:2e:4f:86:dc:07:b5:28:49:96:26:84:03:19:a7:f1:1f:
         76:32:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:42 2024 by rpki-client on console-fra.rpki-client.org