Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1b4bc93-3d9c-3633-8063-5fa7e35c0d9d.roa
File:                     a1b4bc93-3d9c-3633-8063-5fa7e35c0d9d.roa (raw, json)
Hash identifier:          dlAe7Pj2k9bPoi4ObS7bviiINE3khdmSnXGz/qmfDLE=
Subject key identifier:   9A:1A:E0:2D:BB:E5:AC:C8:2B:4A:1F:77:5C:21:6F:2C:6D:2D:01:3D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16CE06DD6C4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1b4bc93-3d9c-3633-8063-5fa7e35c0d9d.roa
Signing time:             Fri 30 Aug 2019 02:49:50 +0000
ROA not before:           Fri 30 Aug 2019 04:00:00 +0000
ROA not after:            Tue 16 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:e0:6d:d6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 30 04:00:00 2019 GMT
            Not After : Nov 16 05:00:00 2027 GMT
        Subject: CN=084d49c1-c9be-44fe-8f10-045e844e8dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:8e:0f:ff:60:f2:42:df:dd:5f:13:81:ad:
                    09:cd:37:86:34:97:d8:95:2b:a3:0b:5e:36:52:09:
                    25:9c:02:f4:4b:3c:92:52:f5:86:75:52:96:e7:32:
                    80:c3:04:54:5b:9d:f3:37:c1:4a:61:15:76:8d:14:
                    a0:08:8e:db:4a:53:21:7d:26:d0:11:46:77:eb:b1:
                    fe:28:48:d9:79:f9:16:03:3e:43:48:98:b2:bf:d3:
                    c4:e8:7f:9d:1e:a0:f6:55:4e:ed:50:1e:ab:5f:0a:
                    49:7d:dc:4f:f2:97:36:66:50:f9:b9:c3:08:c3:84:
                    02:51:1a:61:c3:20:31:df:f1:3a:42:5a:59:fd:84:
                    1d:9a:83:d8:7e:d4:3d:4a:9f:42:cd:1f:ad:3f:59:
                    c0:71:69:82:67:f2:94:42:17:0a:0d:b5:e8:e8:f4:
                    b1:f1:14:14:5d:a0:5b:62:0f:55:f8:3b:0a:3f:e8:
                    3a:86:bc:89:15:a3:c5:8c:63:d4:d3:4d:e8:6d:9a:
                    33:e8:a9:b7:e1:4d:2c:df:2c:13:b9:3b:34:04:a4:
                    f7:c8:ec:1a:b2:33:0c:42:57:8f:c7:03:0f:71:fc:
                    d9:9d:a0:14:2f:f0:4c:b8:22:3f:74:a5:80:ae:00:
                    8b:f9:ea:ad:96:b6:7f:a7:5e:bf:9d:c0:dc:9d:b8:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:E0:2D:BB:E5:AC:C8:2B:4A:1F:77:5C:21:6F:2C:6D:2D:01:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1b4bc93-3d9c-3633-8063-5fa7e35c0d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:35:1c:19:e2:a6:4f:36:f9:df:9d:df:92:a2:4e:be:4b:ba:
         2e:0b:16:50:c4:d9:8b:3a:b7:7e:1a:52:94:46:5f:0c:91:ec:
         ff:8f:60:da:ce:61:a1:cb:65:6c:89:1c:d2:97:bf:56:f2:8e:
         42:88:60:bf:02:8b:1a:c3:f1:3a:fa:5b:15:a8:30:8e:68:36:
         91:d3:ae:aa:ea:0f:9f:f0:86:c2:4a:69:e3:40:3b:aa:95:39:
         3b:27:07:e2:9f:c3:45:95:c4:20:54:dc:26:30:2e:aa:17:a8:
         34:72:87:3b:11:52:c8:c3:73:80:38:27:07:82:86:1e:97:c4:
         a0:63:76:d1:b9:c5:36:98:5c:d0:ac:72:2c:b9:0f:c7:68:6c:
         61:ce:6e:4d:fc:df:e7:4a:9a:f8:1a:0c:a7:97:b5:dc:45:06:
         89:f8:17:40:cc:8a:4d:95:0c:42:06:d0:d7:67:2e:fb:06:36:
         3a:34:2e:06:89:a4:ca:03:59:ec:8b:be:39:65:4b:77:48:4b:
         a5:06:86:28:27:41:a7:77:d1:f8:8f:ba:9a:f8:9f:87:26:ed:
         fd:bb:ac:c6:c2:83:a3:5b:0b:84:7b:28:92:dd:fc:64:3c:7a:
         3f:46:eb:0e:6f:b6:9d:43:3e:03:66:17:a9:10:b3:97:0e:69:
         8b:71:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:10 2024 by rpki-client on console-ams.rpki-client.org