Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d09794e7-c8fe-3abd-86db-026017be6c6f.roa
File:                     d09794e7-c8fe-3abd-86db-026017be6c6f.roa (raw, json)
Hash identifier:          XvZeJ4Wuk/e5F88Txm7gNS9N8//laJ7+87mvwyy554c=
Subject key identifier:   9F:E4:0B:AA:A4:BF:BB:E5:FA:AE:EF:C7:8F:18:E9:76:29:A6:BE:2D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A8B03
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d09794e7-c8fe-3abd-86db-026017be6c6f.roa
Signing time:             Fri 30 Nov 2018 01:10:14 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:8b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5047c3a5-d9fd-4c04-a035-6350d2234d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2f:84:cb:08:fc:82:4a:0e:c0:13:e6:bb:36:
                    18:7f:5a:05:07:4b:09:5b:88:1e:04:36:c9:5b:3c:
                    23:a5:9b:5f:f8:96:85:45:c9:d7:4b:c3:f5:ef:6f:
                    d1:49:26:72:fb:34:77:58:b8:4d:de:bb:80:56:d7:
                    4a:71:18:6a:50:ab:3a:f2:c0:b6:3a:2d:d5:4b:89:
                    96:4a:ca:6a:b9:58:ea:ce:02:f2:0b:16:24:2f:e2:
                    ba:23:bb:3c:f7:b7:82:15:ae:c0:20:6c:98:2e:28:
                    44:18:75:cf:72:e9:d7:f4:5f:ad:78:d0:75:28:19:
                    e9:84:32:e2:22:6a:61:b5:7e:8a:7a:61:6a:14:3f:
                    7c:90:d2:47:82:72:87:28:1b:a0:8c:50:26:e5:87:
                    c9:89:7a:89:40:df:71:31:69:ab:66:d2:cc:94:38:
                    7f:29:14:f5:f8:50:1b:79:80:91:ec:4c:36:cb:ed:
                    8f:1d:1f:c5:de:02:6e:da:a4:0a:69:de:79:96:c0:
                    19:c7:91:e5:54:09:42:24:c4:ac:a7:8f:3b:64:2a:
                    fe:1e:40:17:bb:f8:a0:48:4a:14:60:57:84:c1:2a:
                    fd:e0:82:27:7b:78:93:ca:45:ab:d1:ed:ea:98:5d:
                    4d:54:ae:ac:ba:fa:e8:6a:c9:99:e5:3d:41:c9:5e:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E4:0B:AA:A4:BF:BB:E5:FA:AE:EF:C7:8F:18:E9:76:29:A6:BE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d09794e7-c8fe-3abd-86db-026017be6c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:35:05:9a:7d:7f:d0:62:18:0e:07:d8:66:b3:40:a0:ef:
         33:ca:9a:88:d5:e6:18:15:e0:1d:84:48:d7:d3:e4:83:97:d6:
         bd:da:3c:39:08:fb:3e:1e:45:62:59:10:8c:ad:b4:72:f8:43:
         bf:f3:33:17:d6:ed:0c:93:b8:38:a4:ec:6f:5f:2d:37:53:c1:
         24:ea:06:c2:b2:67:4b:96:59:cb:f9:c1:5c:1e:d4:a5:b6:e8:
         77:3d:3a:04:4e:63:38:9f:3b:95:af:37:9c:77:05:8f:01:cf:
         35:d2:e7:99:1f:14:98:f7:5f:1a:be:fa:b5:e8:06:4a:ee:38:
         9d:88:d4:11:7c:d9:99:e2:b9:7f:25:42:58:51:e6:04:6a:84:
         e1:09:ad:06:9f:ca:4f:ee:2b:05:26:d0:75:19:75:a5:17:ca:
         de:93:8a:68:d2:51:cf:d8:f1:9e:62:e2:1a:b8:59:c7:6b:c5:
         86:11:58:07:24:78:58:1f:ef:3f:4b:91:3f:c8:f2:08:7d:0b:
         ca:84:14:c5:8d:8f:54:f0:0d:e0:01:02:61:27:f8:56:9a:a7:
         df:ea:6e:e7:08:c3:90:af:c6:43:46:87:31:95:5b:05:fa:7b:
         6f:78:eb:46:82:93:be:00:d7:9a:c4:7b:eb:c9:5b:3c:93:bd:
         09:a5:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:30:15 2024 by rpki-client on console-ams.rpki-client.org