Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa
File:                     aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa (raw, json)
Hash identifier:          1yndhhpCuxtZ4mdmF/kowCqNJmtuyiLL4XgnynbK1Bc=
Subject key identifier:   57:E0:17:E3:81:AF:28:4C:05:AB:B6:B4:E7:9B:33:F0:F5:6F:8E:D7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A4913
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa
Signing time:             Fri 30 Nov 2018 01:09:57 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:49:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=1f11ac90-e282-49fc-aa87-0303b8090d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:91:13:d2:4f:c1:a2:32:5c:ec:b8:27:95:
                    39:cb:4b:39:43:56:1b:43:8b:fd:df:1a:4e:eb:b6:
                    4b:00:cc:0d:c5:f3:af:a9:cc:83:99:51:6b:88:2b:
                    91:16:ee:8e:b0:79:3f:5f:c2:47:fa:ee:99:9f:6d:
                    7a:48:7a:3a:7c:39:24:2a:cc:21:15:92:d3:7a:df:
                    17:d1:2b:5d:b9:35:25:9d:df:f3:71:62:38:98:23:
                    f4:55:f3:4c:fc:d7:21:50:88:55:0a:6d:c1:9d:73:
                    52:a8:25:2c:5c:50:ef:f3:ef:53:cd:6b:c2:d4:4a:
                    a8:04:d6:c8:8c:95:f3:04:59:c8:57:96:a8:e5:b6:
                    1e:52:d8:2b:c0:61:18:01:0e:b5:64:ac:eb:9e:f6:
                    47:a2:9f:5c:d4:00:f7:b7:09:53:4e:7f:18:06:d7:
                    70:f2:bd:a3:08:89:01:59:43:9d:01:2d:52:6b:77:
                    60:82:17:7f:90:d1:7d:c7:1a:88:60:bc:9a:0c:10:
                    93:26:8e:df:a0:2d:98:e2:4b:2b:af:f2:9c:b9:da:
                    e7:16:d3:c2:dd:f4:64:ff:74:01:40:02:d1:be:02:
                    e7:77:d7:26:95:f3:7a:2f:7b:72:89:7c:81:6f:5e:
                    df:72:25:58:3a:21:6e:c5:d7:6f:da:12:c8:57:5b:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:17:E3:81:AF:28:4C:05:AB:B6:B4:E7:9B:33:F0:F5:6F:8E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:db:97:02:64:c3:36:9c:c5:d6:3e:a5:07:2c:63:f5:47:16:
         2d:3d:41:95:24:40:c8:16:0a:26:5d:a1:18:98:42:67:23:be:
         60:1b:80:3b:11:e2:a3:7b:58:db:f0:71:77:89:f5:84:31:c1:
         6f:88:a0:02:4f:e8:46:ea:a6:f3:8e:16:5b:c4:8f:eb:b3:7c:
         1f:7a:31:f4:fd:19:3a:ec:5b:2d:35:12:12:c3:e9:0f:2b:af:
         96:73:55:34:34:21:59:10:26:d6:7e:9f:e5:88:18:8b:fa:46:
         cf:3b:1d:06:95:ac:2a:1f:b3:ae:87:44:cc:a1:9f:3b:05:30:
         24:9d:d2:84:56:1e:de:98:82:4e:71:03:a3:5a:2e:3d:7c:93:
         f0:27:e7:54:19:8b:26:3f:44:22:26:3e:da:ef:7f:52:ba:0b:
         af:de:df:cf:d3:7f:02:66:0d:7f:7d:55:b2:e3:7b:32:82:b5:
         cc:ac:dc:ef:21:22:32:34:eb:df:9e:76:2f:40:d4:28:d8:b4:
         12:56:40:85:8e:95:8a:bb:b9:9a:e1:97:49:f9:f7:3e:11:62:
         ff:8f:39:c7:2d:de:44:e4:90:c1:c2:31:2d:77:fb:cc:fd:d1:
         2e:4c:64:9f:52:42:c1:bf:f7:77:8d:d2:8f:11:2c:f4:56:75:
         b0:8b:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:10 2024 by rpki-client on console-ams.rpki-client.org