Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac42034f-9bc4-3f4f-8bb0-cda1313d6364.roa
File:                     ac42034f-9bc4-3f4f-8bb0-cda1313d6364.roa (raw, json)
Hash identifier:          qm/mZCTAfHhxAjQzIxinVeg1KuHgBUQR3kYGKK8Hr8I=
Subject key identifier:   5D:EB:A7:DE:12:43:97:00:BC:E9:D5:44:D2:B8:23:D4:8C:DC:E6:FD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583BA04D636E0CD60760381B5700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac42034f-9bc4-3f4f-8bb0-cda1313d6364.roa
Signing time:             Mon 18 Oct 2021 04:00:00 +0000
ROA not before:           Mon 18 Oct 2021 04:00:00 +0000
ROA not after:            Sat 10 Apr 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:a0:4d:63:6e:0c:d6:07:60:38:1b:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 18 04:00:00 2021 GMT
            Not After : Apr 10 04:00:00 2027 GMT
        Subject: CN=fd4a6f11-95fa-4189-b568-63c0a64246c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:16:92:25:d3:2e:49:dd:f6:6d:63:ed:07:
                    27:93:a6:87:b1:16:bd:8d:46:24:6a:97:2d:3d:af:
                    86:24:6b:a8:c3:5a:f5:be:dd:7d:59:8e:da:62:5f:
                    68:94:11:b9:55:5a:28:4d:46:4c:29:00:53:35:8a:
                    f7:25:2f:8f:1c:78:b1:f7:a1:02:98:51:3f:dc:17:
                    ea:ba:4e:bb:90:15:8a:17:02:92:9c:a3:c9:59:11:
                    9a:b0:06:30:85:c9:68:db:b0:46:b5:bc:76:4d:5e:
                    05:95:24:e3:ac:0f:07:80:7c:d9:90:b8:3d:98:4d:
                    08:2e:0b:76:5a:de:85:b8:4e:02:9c:c2:97:b8:1b:
                    bc:01:0e:b6:22:05:4e:ec:cb:5a:e7:bf:cd:35:e1:
                    04:d9:4e:1b:d5:c1:89:ed:7d:0a:f8:20:b1:8f:f6:
                    61:84:aa:a9:b0:bd:fb:a8:40:d8:6a:f8:e7:91:7e:
                    d2:e9:31:d9:90:c6:86:f6:fe:c4:00:3f:70:77:dd:
                    fc:b6:f5:3f:55:40:92:2d:47:dc:93:5c:f5:0c:8b:
                    57:7e:f5:0f:09:8c:7f:cf:dd:a3:42:78:be:f3:44:
                    d1:b0:e2:ef:f2:eb:c2:59:61:f1:56:4b:9b:7b:9e:
                    eb:ec:e9:11:fc:09:b6:70:04:ef:4d:02:fc:3c:ce:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EB:A7:DE:12:43:97:00:BC:E9:D5:44:D2:B8:23:D4:8C:DC:E6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac42034f-9bc4-3f4f-8bb0-cda1313d6364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8c:a4:d1:79:8b:4f:cb:e2:62:25:f5:67:28:af:6f:dc:21:
         69:2a:e7:64:1b:ba:e5:f0:70:14:35:7e:fa:31:65:37:30:eb:
         2a:1d:92:28:c0:20:1d:65:9b:b7:24:ce:58:b7:85:2a:b8:9c:
         23:55:5e:69:7c:01:66:e4:59:58:45:1e:99:78:94:99:bd:7b:
         2e:d1:0d:58:7e:db:64:89:e7:77:58:9e:99:9b:b0:d2:02:1c:
         10:76:ac:08:03:19:c3:27:cf:98:c6:87:0c:e3:dd:f7:0f:69:
         3d:b4:a7:39:d4:85:8a:79:bd:f8:0a:ca:a5:a6:99:0e:2d:1d:
         56:5e:0b:82:a3:66:a0:1f:6d:d9:40:9f:21:77:a2:0a:db:5d:
         91:a7:25:76:ab:d3:5a:59:67:2e:09:a6:0f:55:5e:b5:07:76:
         9d:6e:0f:18:52:98:2c:e5:38:c8:3b:52:a9:0d:16:de:d7:aa:
         26:43:54:c5:c8:e1:45:aa:a9:fb:5e:df:20:90:60:1a:e1:9d:
         7a:7b:10:9b:53:b9:55:55:c5:51:76:01:8b:d2:45:51:91:87:
         57:c2:05:26:07:7a:58:72:fc:88:7f:9f:24:c0:dd:e3:1e:76:
         65:54:ac:fb:31:40:1e:65:9b:a1:69:7b:4f:4d:c9:a5:e0:bd:
         a6:5f:27:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:02 2024 by rpki-client on console-fra.rpki-client.org