Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a559f7fa-e6e8-3fab-a427-ddf18bfcbbea.roa
File:                     a559f7fa-e6e8-3fab-a427-ddf18bfcbbea.roa (raw, json)
Hash identifier:          OZ++NkNyGvU/Y25m5563DW7se8zZ/nruJsbZ4PSIdhg=
Subject key identifier:   92:0C:E8:C3:7B:8F:19:9A:4C:84:0C:A3:C4:4D:E0:A1:7B:51:68:73
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583B9702F281DEA14A3B2D5319BE
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a559f7fa-e6e8-3fab-a427-ddf18bfcbbea.roa
Signing time:             Thu 14 Oct 2021 04:00:00 +0000
ROA not before:           Thu 14 Oct 2021 04:00:00 +0000
ROA not after:            Wed 10 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:97:02:f2:81:de:a1:4a:3b:2d:53:19:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 14 04:00:00 2021 GMT
            Not After : May 10 04:00:00 2028 GMT
        Subject: CN=636da127-24c2-4554-8469-381d8eed6774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:44:00:57:81:3d:16:12:24:db:44:16:bc:8a:
                    18:b8:6e:7d:75:6e:4f:47:43:a5:a2:0c:64:8f:ea:
                    20:62:ec:fd:d7:dc:b5:27:eb:49:d0:2c:66:7f:7e:
                    07:e2:2d:86:65:c9:83:7a:61:be:f3:45:b8:de:2a:
                    ac:5c:07:ba:97:6e:cc:e5:aa:8b:35:a8:07:70:b8:
                    2c:fe:cf:57:9a:b9:ea:fd:7d:a1:26:99:a8:03:e9:
                    92:e9:e0:3d:af:31:9d:85:84:30:ef:14:1b:cd:aa:
                    83:34:04:c9:f1:04:0c:59:75:f4:59:cd:a6:f3:4f:
                    5a:1b:f3:3f:9c:71:14:f9:92:0c:02:14:68:18:be:
                    88:ab:2b:cd:5b:60:f2:17:87:4d:cc:17:6b:70:b3:
                    b7:45:66:ff:02:fa:e0:cb:88:12:1c:af:4d:7d:1b:
                    c7:3d:68:2b:24:0f:43:b7:28:57:ca:7b:5c:f0:78:
                    53:53:c7:2b:c7:24:30:6b:75:15:63:6d:5b:d0:64:
                    8d:d5:66:86:46:3e:0b:8b:4b:24:39:ab:02:94:a8:
                    4d:f4:41:ed:13:fc:fb:bd:e0:95:45:c4:97:ec:32:
                    81:0f:87:ff:d4:f4:50:7b:2c:38:f3:9a:79:81:92:
                    2a:b4:39:13:35:f1:59:06:54:fe:9d:c3:0a:f3:87:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:E8:C3:7B:8F:19:9A:4C:84:0C:A3:C4:4D:E0:A1:7B:51:68:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a559f7fa-e6e8-3fab-a427-ddf18bfcbbea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:27:c4:d2:ff:2d:4e:9f:5c:79:2c:60:19:0f:d1:27:0c:b7:
         ab:4d:b1:53:42:a9:0a:95:10:e6:20:ef:8e:54:2a:8a:67:8f:
         ff:48:e7:e8:39:34:46:c1:3d:08:05:88:21:22:d6:74:f4:b2:
         c8:71:f5:5e:af:36:81:2d:30:0b:0e:34:54:05:b2:e9:1e:3c:
         76:ca:e0:fa:7b:56:9d:aa:c8:a6:a8:91:57:76:dd:ba:b8:67:
         c6:85:ad:d7:d7:ee:ef:db:f0:b4:de:22:72:18:38:4b:8e:ea:
         2f:05:cb:71:19:00:62:31:5e:89:a1:5c:8a:84:39:60:2a:c4:
         a0:bd:3e:f8:a8:49:1d:d2:99:9c:4e:33:48:37:48:ae:3d:91:
         6c:f2:61:02:b6:51:e9:03:0a:8c:40:40:9a:4a:27:60:9a:c6:
         50:67:38:0f:1b:70:e3:b4:d0:68:24:3b:da:31:cc:8f:c1:60:
         41:62:54:db:a7:47:21:4d:5a:27:01:94:4c:32:a0:03:6d:50:
         e4:8f:13:19:fb:7b:21:73:bb:6f:ce:b1:b8:08:e8:92:8f:4d:
         84:7a:44:9c:cb:4c:75:e9:bd:58:63:0c:e9:8a:34:f3:d6:3f:
         55:4e:fc:10:36:85:f4:58:c8:1c:fb:a0:d7:d3:f2:79:4f:83:
         67:a0:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:12 2024 by rpki-client on console-ams.rpki-client.org