Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9eec575-2387-30db-a9f3-5a68f8f22d04.roa
File:                     a9eec575-2387-30db-a9f3-5a68f8f22d04.roa (raw, json)
Hash identifier:          utbgEz9a/lrPdedpYiPdC80CRTS72SjYl8enpDilnZY=
Subject key identifier:   5E:35:10:0B:36:3C:1D:AE:78:95:FB:A7:AE:C4:69:EB:1A:04:55:92
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AE8B68BF09AB03A45D33C30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9eec575-2387-30db-a9f3-5a68f8f22d04.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:e8:b6:8b:f0:9a:b0:3a:45:d3:3c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=58263558-5e6b-4f62-a4f0-12c3801c4963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:86:69:1b:94:d8:79:32:5f:28:68:f6:c1:
                    a7:dd:74:ee:a8:9c:28:3f:6d:a0:db:a0:10:79:c9:
                    bc:52:1e:79:07:8b:1e:eb:66:7d:e8:6d:08:40:8b:
                    2e:0c:5b:4e:9a:44:56:dd:60:2d:88:fc:70:a6:e6:
                    52:1a:a2:ea:e5:f5:1b:eb:f8:81:41:85:3e:77:6a:
                    e5:43:63:8d:56:05:06:d4:6b:96:c5:0e:a2:c9:1e:
                    42:85:b6:1a:6b:b2:fa:8c:38:40:8b:14:04:23:b4:
                    41:9f:8c:2d:b2:2a:ba:67:5b:b2:62:e7:65:5c:ff:
                    4e:1d:28:ec:95:dc:18:69:e4:9a:94:ca:6b:3b:86:
                    8b:6f:a7:19:cc:fe:47:07:48:e5:ef:17:35:3b:31:
                    4a:50:fb:04:2e:d5:2b:d9:01:c4:d7:ed:1a:01:d3:
                    02:16:30:0b:c4:07:18:d7:29:8a:34:b0:59:61:0f:
                    d7:27:e4:2e:ca:fc:7e:38:bb:31:44:64:ae:ad:74:
                    c0:51:a5:1e:b9:f7:99:5d:3c:34:13:c8:30:aa:04:
                    3a:61:bb:95:4d:ad:3f:68:72:c4:95:8e:cf:30:d8:
                    55:58:2a:ba:2e:ba:f5:c8:6f:b9:f0:b7:91:6a:8d:
                    5f:01:c1:0e:fb:15:59:f4:7f:1a:78:3b:6b:f0:90:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:35:10:0B:36:3C:1D:AE:78:95:FB:A7:AE:C4:69:EB:1A:04:55:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9eec575-2387-30db-a9f3-5a68f8f22d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:25:d7:fe:f0:3c:91:d6:7e:f9:35:fb:af:d0:b8:87:3d:
         57:d6:3e:55:81:24:27:63:40:82:c9:57:4e:19:21:61:dd:17:
         a6:f0:bc:a1:36:15:97:73:4a:ff:68:99:57:6d:73:c3:4d:b1:
         36:8f:66:4a:34:51:45:11:d1:24:d9:84:83:3f:cf:70:c1:17:
         32:26:81:80:8d:fe:44:55:26:f6:d9:01:ca:88:bf:97:f3:1f:
         6b:ef:4f:19:4f:db:2d:8a:f4:1d:ff:ea:d3:ee:c4:60:2f:78:
         a5:b5:b6:8a:d2:74:a5:76:7a:a5:90:1e:af:f6:02:24:5d:1c:
         1f:e2:44:fd:6b:b6:36:b9:5d:92:f9:12:a0:f9:3b:37:d0:a6:
         0f:83:e2:be:e7:f5:e6:e7:fd:97:56:f1:06:3f:de:fe:39:c4:
         2d:e7:ad:af:21:4c:38:ae:2f:02:ec:07:dc:43:e1:c2:a1:70:
         fc:80:97:fe:23:c6:c9:e0:d7:09:ae:f9:d9:5c:b4:ad:da:73:
         ed:04:a7:85:b2:e9:50:a2:64:e4:aa:a2:74:71:8b:45:25:84:
         fb:25:6b:28:f7:02:7e:c8:8b:eb:63:5f:c7:b7:8f:44:06:c7:
         82:dd:b5:d7:42:ca:c2:01:5e:be:5d:27:59:a1:4b:5b:c4:e9:
         a5:da:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:09 2024 by rpki-client on console-ams.rpki-client.org