Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a42809ee-fc16-3c22-a874-112824cad337.roa
File:                     a42809ee-fc16-3c22-a874-112824cad337.roa (raw, json)
Hash identifier:          lCEIIj3f/rOgFQNrKrAtyFJtT5qMxfLDwmaCfKk4QB4=
Subject key identifier:   51:55:3C:DD:0E:7D:4E:85:F3:0B:26:83:4C:50:4B:0E:94:51:F9:1B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A4364
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a42809ee-fc16-3c22-a874-112824cad337.roa
Signing time:             Fri 30 Nov 2018 01:09:56 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:43:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0cc3a8fa-99f5-45b2-8e75-8c3f3423f9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:65:78:6e:8e:10:af:98:dc:fc:7a:c9:c7:
                    1c:80:21:09:f6:76:61:6f:97:42:6a:60:e7:5e:9c:
                    ec:8c:ac:f0:36:2b:57:bd:ec:25:3c:6e:89:62:35:
                    0a:3a:d5:5b:8d:cc:f9:ab:02:4b:82:e7:dd:21:fa:
                    67:b6:30:0f:c7:e1:47:f4:4b:c9:b8:7a:45:82:74:
                    54:60:fc:ca:a6:dd:28:bb:79:23:86:16:5e:fc:14:
                    c4:ea:20:e6:48:e7:24:cc:ae:36:a3:f7:c9:fa:43:
                    c0:f6:7b:c7:78:3c:8d:11:48:46:36:a8:6a:65:18:
                    96:fe:99:49:8e:67:31:29:26:ee:a9:fd:9f:bd:dd:
                    e9:e5:6b:7e:44:8b:39:23:1c:7f:73:3c:47:03:8f:
                    54:4c:37:2d:8f:c5:1b:49:1e:75:93:43:31:81:78:
                    8c:23:d0:fa:d0:8d:e6:1c:43:1c:3b:52:bd:75:07:
                    b2:10:09:19:21:03:5c:da:de:ab:b6:6f:8e:a0:bc:
                    31:e1:dd:7e:06:1e:ea:42:ce:50:81:e5:5d:4a:c8:
                    e7:28:77:e6:9a:37:ee:2f:84:5e:7c:72:59:66:e7:
                    88:74:5a:fb:fe:02:8d:76:24:13:fc:7a:16:cb:d2:
                    fa:70:ac:4a:13:44:86:3f:e0:ba:89:45:41:2d:35:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:55:3C:DD:0E:7D:4E:85:F3:0B:26:83:4C:50:4B:0E:94:51:F9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a42809ee-fc16-3c22-a874-112824cad337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:87:f4:d4:23:d5:16:c4:2d:3f:06:a9:33:24:a0:72:c0:62:
         4d:f7:11:35:04:88:fc:70:11:6f:94:bc:b0:2f:a9:eb:03:30:
         e3:01:0c:93:59:01:22:8b:5b:b9:eb:bd:07:6e:a5:30:1a:a7:
         73:62:9a:de:5f:98:18:f4:b3:44:e0:9e:44:db:0a:c9:61:d2:
         60:04:87:9c:bd:a8:14:1a:3d:b9:83:3f:f0:fb:1e:c4:13:79:
         87:5b:74:fc:6e:33:b9:4f:b6:a5:56:2f:45:f5:ee:00:98:ff:
         7c:01:58:9b:7e:41:d3:86:4a:7f:ac:e6:1c:f9:25:0d:c1:2d:
         bc:76:15:f2:c7:42:0d:79:41:2e:99:09:60:8b:0e:15:f5:fc:
         b6:45:a4:a4:23:7f:55:ce:72:39:53:ac:e6:de:f4:e2:a5:b9:
         8e:f5:a8:6c:6a:7e:af:cf:b0:5d:aa:ff:6a:e0:13:01:b4:51:
         67:8a:d2:9a:de:8b:71:2e:38:52:f8:ae:81:bb:61:9f:98:e9:
         f9:ee:70:92:8a:41:51:7c:d2:6f:7b:f7:7c:e4:c6:41:8b:a3:
         27:a3:6e:60:8a:d2:a0:c7:68:bb:7f:c0:f1:45:d7:8a:29:f5:
         62:73:6b:d8:99:ab:1e:4b:a2:c7:e0:e3:7b:9b:95:de:df:e9:
         9a:45:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:10 2024 by rpki-client on console-ams.rpki-client.org