Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bef9ba14-149b-365f-a738-ad85459ac6c8.roa
File:                     bef9ba14-149b-365f-a738-ad85459ac6c8.roa (raw, json)
Hash identifier:          kh+mZKyxVTTjnbf4UThgZ/Vxd/IHH5e9dwfpaTkbvpw=
Subject key identifier:   42:04:3C:44:0B:33:81:5E:6B:C2:3C:2F:90:DA:58:20:35:11:E7:55
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715B2FD134
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bef9ba14-149b-365f-a738-ad85459ac6c8.roa
Signing time:             Wed 08 Apr 2020 19:06:32 +0000
ROA not before:           Wed 08 Apr 2020 04:00:00 +0000
ROA not after:            Thu 11 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5b:2f:d1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  8 04:00:00 2020 GMT
            Not After : Feb 11 05:00:00 2027 GMT
        Subject: CN=608f6991-73a8-427a-9192-56650b4de9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fb:c7:60:f6:03:b8:ae:e2:03:07:e3:4e:11:
                    5f:9d:d4:c8:35:50:ea:e3:a0:2a:3a:e8:32:06:10:
                    f3:ae:60:af:52:64:a0:5a:ce:fa:36:f1:e8:49:89:
                    e6:a1:2d:37:f7:b2:af:b3:fd:88:71:c8:8a:e8:65:
                    89:ec:14:96:a7:d1:73:99:55:f1:07:b8:52:0e:60:
                    cc:6d:d5:a0:6e:2d:b6:29:a8:84:d0:e0:4a:a5:19:
                    54:72:07:ea:d4:9e:9a:d8:78:ef:bd:9c:54:a2:80:
                    62:9e:8b:3a:ad:c9:06:7d:65:cb:e4:cf:65:eb:e9:
                    8b:e5:69:c6:ef:98:75:14:53:f3:e2:01:27:97:a7:
                    15:da:3b:aa:4a:90:93:7b:9b:c0:0b:2c:6e:d2:1c:
                    3e:9d:ae:d3:05:07:88:a8:f3:2d:1a:ed:ff:d0:44:
                    cc:f7:1f:14:48:59:0c:13:93:96:3e:98:42:2b:90:
                    21:06:52:58:c0:ef:3c:45:18:66:e4:95:48:92:c9:
                    ce:c3:4d:f9:b6:02:24:6e:41:4d:2a:30:5c:06:fa:
                    05:3a:15:09:98:b6:26:b9:f7:4b:98:23:e8:45:b8:
                    41:97:22:cb:3c:51:34:56:a8:a9:60:7e:ef:6d:84:
                    85:d0:a2:58:39:77:3b:13:21:9d:ae:35:56:be:ae:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:3C:44:0B:33:81:5E:6B:C2:3C:2F:90:DA:58:20:35:11:E7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bef9ba14-149b-365f-a738-ad85459ac6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:20:12:a6:dc:16:a4:f8:26:82:79:d6:aa:0b:13:85:b2:18:
         6a:43:45:a7:16:16:ab:e9:a7:92:10:9c:f3:5a:4c:87:c4:2c:
         71:dc:2b:53:a7:e9:83:63:ed:8f:00:5e:4d:f5:c0:f9:07:e4:
         41:4e:cb:dd:d7:1f:fd:df:c9:2a:ae:50:d2:c0:26:ec:4f:9d:
         95:a4:32:f2:5b:a0:3f:99:cf:f5:8a:11:77:16:32:c6:8f:9c:
         9a:0f:72:37:51:7e:6e:4a:0c:33:4b:e7:61:71:0a:0b:9e:aa:
         35:b4:90:5e:01:60:b2:66:af:12:f0:fd:ba:39:53:f4:22:58:
         1b:8b:82:cd:cd:54:44:8c:4b:e9:ef:8b:77:68:4c:a0:d7:43:
         c5:4f:6d:be:20:bd:2b:86:a4:5c:ed:9f:9c:1b:83:dc:39:a6:
         39:97:a7:03:44:2f:ff:41:8c:86:5b:24:54:22:d1:3b:cd:db:
         4d:f7:8e:9e:7e:c7:06:e3:06:9a:ff:ed:24:a9:53:1e:d7:3f:
         f5:4e:6f:00:9d:b3:a1:d2:d0:48:c4:48:0c:10:23:5a:4a:c8:
         6f:1b:5f:77:21:ab:66:df:8b:5b:f5:1c:eb:bf:00:9d:6b:a1:
         b3:1c:9a:7b:d4:ce:75:67:cf:cc:af:00:6d:ec:7e:46:a2:41:
         46:d9:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:11 2024 by rpki-client on console-fra.rpki-client.org