Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be143a77-9ed0-3548-bd36-0ca787386608.roa
File:                     be143a77-9ed0-3548-bd36-0ca787386608.roa (raw, json)
Hash identifier:          qpfoapHPkoiKX9JcH1zzH5MJUYdQyE+MOc+jMcBAUME=
Subject key identifier:   7A:74:9C:34:9F:C3:64:4A:22:45:53:7E:10:F5:E1:4B:B2:27:C8:A4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285842E5E65D0E6EEFDE2B6A7B3380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be143a77-9ed0-3548-bd36-0ca787386608.roa
Signing time:             Mon 14 Aug 2023 12:00:00 +0000
ROA not before:           Mon 14 Aug 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.202.0/24 maxlen: 24
                          172.69.203.0/24 maxlen: 24
                          104.29.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e5:e6:5d:0e:6e:ef:de:2b:6a:7b:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 14 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=9a5618b3-c3fb-4c16-8b3e-8eb3434eb995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:8c:ca:0f:0a:88:08:83:61:d2:aa:da:8a:
                    f4:64:0a:f0:1d:2a:29:ba:0e:ca:0e:11:11:78:8f:
                    ad:28:85:9b:16:d6:1a:0a:1c:8d:e9:1a:26:eb:73:
                    6b:29:fa:e1:86:17:b9:29:1a:06:7d:f8:ad:15:b1:
                    b9:a6:b0:1f:c2:17:92:0d:a9:ff:75:bf:4b:fc:66:
                    ed:e3:73:0b:7a:dd:9c:be:32:52:c0:97:cd:e7:c6:
                    89:0d:94:f9:16:01:42:91:44:02:0c:fb:c1:58:96:
                    36:22:e7:75:3d:0e:09:b0:3f:52:ad:7b:61:27:ca:
                    45:96:20:ca:91:7b:43:dd:6e:8b:0b:fa:3c:e6:91:
                    a3:01:8d:22:c5:b7:c0:52:db:89:3d:c4:d7:fc:3a:
                    01:45:95:ec:d3:a5:a1:02:3a:23:13:81:4c:bc:1a:
                    f9:65:cf:86:09:b7:6a:30:49:17:4d:8c:9c:72:c1:
                    e5:26:94:ad:24:78:09:6a:db:dd:5a:72:b3:7d:80:
                    a9:03:5a:a1:7b:93:8c:42:89:b3:08:a6:2c:ec:30:
                    96:3a:4e:ad:d6:8c:0e:a9:95:40:9a:e0:af:b9:81:
                    e8:59:74:1b:06:e8:7c:cb:1b:20:82:44:08:b4:e4:
                    cf:58:59:9d:67:89:07:86:fa:fb:b4:76:74:c1:98:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:9C:34:9F:C3:64:4A:22:45:53:7E:10:F5:E1:4B:B2:27:C8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be143a77-9ed0-3548-bd36-0ca787386608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.119.0/24
                  172.69.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:f7:d7:59:dc:02:2f:ed:e7:23:a0:52:20:14:be:0d:a6:
         e9:fc:8b:da:e6:51:ab:4d:aa:0b:43:e2:ad:d1:6b:8c:d0:cf:
         35:15:f5:c1:23:78:10:45:59:40:d4:6c:39:85:da:62:4a:e8:
         99:77:d8:57:50:fb:fe:40:88:3d:c8:0d:e6:3a:4d:a8:59:3c:
         eb:c2:bf:32:70:f0:bf:68:b0:46:e0:67:66:2d:f5:67:07:7d:
         49:5a:b6:3a:6b:bb:2e:0e:b9:28:0e:85:c3:0a:24:bf:12:e6:
         3d:ca:6a:bc:5f:0b:2b:9c:36:82:a6:66:12:5b:eb:f9:95:90:
         e1:fb:d3:30:cc:f4:8d:0b:8b:a0:e3:ea:30:f1:27:fa:25:e4:
         6a:fa:8b:3d:9c:85:05:58:36:0d:bb:35:1b:5f:bc:f1:5b:a7:
         37:fd:b6:b5:42:24:70:b6:0b:50:d9:e2:78:36:d3:30:f6:81:
         ca:b4:7a:82:02:89:b0:d0:e3:a8:41:44:12:6f:de:aa:9a:1c:
         fb:32:80:b1:d6:9e:32:b6:4c:60:a7:8e:d8:e1:64:58:53:8a:
         a8:50:41:0a:c7:43:9a:bf:98:d8:01:ce:fa:41:36:5a:af:e6:
         58:66:af:66:8e:47:c1:30:9f:1d:ac:0f:ff:1b:e0:72:73:ca:
         1a:78:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:03 2024 by rpki-client on console-fra.rpki-client.org