Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9959c879-69f2-374c-b120-58010c09e7f1.roa
File:                     9959c879-69f2-374c-b120-58010c09e7f1.roa (raw, json)
Hash identifier:          RAXXABdisXmn03CFWy31ni+md8lCoVvl3gb8mHL3swY=
Subject key identifier:   57:C8:0F:74:83:08:6A:35:2B:5B:53:81:2A:7A:EF:B8:A8:A5:69:7A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583CAB2654CE01A3FA0FA265DA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9959c879-69f2-374c-b120-58010c09e7f1.roa
Signing time:             Fri 21 Jan 2022 05:00:00 +0000
ROA not before:           Fri 21 Jan 2022 05:00:00 +0000
ROA not after:            Tue 09 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ab:26:54:ce:01:a3:fa:0f:a2:65:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 21 05:00:00 2022 GMT
            Not After : May  9 04:00:00 2028 GMT
        Subject: CN=0319ede4-30f3-4e29-9438-5b58e18d71af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:2f:b9:40:44:e8:c8:85:76:70:14:ff:75:
                    69:d7:db:78:4b:d4:0e:d5:1f:a3:b8:ff:72:c4:de:
                    f0:ea:e7:13:57:66:7d:fc:cd:38:b4:85:5e:ee:bf:
                    49:c9:13:cd:0e:4e:76:30:28:04:de:8c:90:1b:51:
                    2c:8f:fa:83:68:6f:72:1c:ff:10:dd:e3:3e:c5:22:
                    fa:b3:b9:06:ab:88:63:5e:cc:ab:0c:90:58:2c:01:
                    96:b6:69:52:fc:de:ab:75:6c:31:ac:24:1a:1d:9c:
                    4d:42:72:2c:c6:e4:d2:72:c6:d9:e8:39:d4:c8:db:
                    5f:52:64:80:f6:59:f1:5e:15:8f:78:1f:42:e1:de:
                    57:93:d5:37:b7:71:83:db:ad:2e:1c:30:56:c4:c4:
                    d2:86:d5:8a:81:8e:d3:b8:99:d3:74:10:54:d6:28:
                    b5:b5:bf:76:d9:54:9c:37:a2:a5:e3:fe:67:99:d6:
                    95:03:12:90:cb:93:12:7e:75:d0:7d:fa:2d:d1:be:
                    bc:96:bb:51:bb:18:4e:9b:cb:0a:2f:cc:16:db:51:
                    56:a2:21:63:90:ce:77:e8:41:fb:c5:40:09:b3:49:
                    9a:1e:95:f2:9e:03:38:32:08:11:12:c6:04:9c:d7:
                    26:5b:f8:d7:dd:92:6b:5d:df:55:68:25:98:9f:94:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C8:0F:74:83:08:6A:35:2B:5B:53:81:2A:7A:EF:B8:A8:A5:69:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9959c879-69f2-374c-b120-58010c09e7f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:f5:c9:bb:9e:ed:b6:cb:0c:e2:63:fd:0d:10:53:8d:9e:
         c0:76:57:60:bb:b4:1d:f4:28:f5:d6:84:e3:91:8e:6c:53:41:
         1b:9c:3c:ef:77:7a:23:e1:e8:e9:56:fa:bb:99:eb:7e:dc:20:
         b9:32:f0:15:7e:f1:60:2d:0d:6b:02:9d:17:74:87:c7:ef:67:
         46:72:7a:4e:2c:2b:3d:18:65:1b:08:2a:73:4d:79:ec:a5:4c:
         29:2a:51:06:24:18:a9:4c:c5:81:46:d6:ee:7f:c4:b5:56:1c:
         92:f0:70:8e:23:a2:58:1f:62:99:57:39:72:76:53:d8:3d:f1:
         e5:d7:9d:1c:4d:5b:ac:81:f8:4f:54:e0:88:8d:d8:5e:51:f0:
         5a:e0:99:bb:2c:bb:29:a9:96:20:6c:df:42:9d:bb:ec:65:69:
         7f:9e:61:de:e7:8c:b1:ab:aa:b8:50:8a:ca:0c:bc:66:ed:96:
         9c:ec:be:30:4c:43:75:91:12:0d:4e:54:29:e3:b0:da:18:01:
         65:92:0f:cb:5f:d3:17:29:ff:4b:10:fa:3b:69:34:04:4d:70:
         56:1b:b7:3b:22:ed:18:83:47:59:d0:86:2c:2b:b9:92:71:0b:
         f4:67:bb:aa:79:6f:9b:7d:cd:73:b9:78:81:79:f9:9b:f5:0f:
         5f:7f:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:09 2024 by rpki-client on console-ams.rpki-client.org