Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa
File:                     de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa (raw, json)
Hash identifier:          3d70/aCmT1KkC/AhF5xcmQhvu9CNQi49KllEFRwbt4o=
Subject key identifier:   3D:3A:37:59:AC:13:60:A3:1B:81:EA:87:15:50:A3:FF:C8:4E:EC:E2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC17150DE46D6
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa
Signing time:             Mon 06 Apr 2020 19:01:16 +0000
ROA not before:           Mon 06 Apr 2020 04:00:00 +0000
ROA not after:            Tue 09 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:50:de:46:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 04:00:00 2020 GMT
            Not After : Feb  9 05:00:00 2027 GMT
        Subject: CN=c9e31f94-26c8-4b1f-aa14-c6af9969c7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f4:49:a9:c7:ea:38:c4:59:ce:9e:d2:e1:65:
                    a6:5b:7c:5d:bb:58:e0:63:38:73:09:52:85:02:8b:
                    88:c3:81:54:a8:b9:f3:49:14:27:1a:70:66:d8:90:
                    cf:14:b2:4f:64:46:23:f5:dd:5d:fa:63:f1:51:19:
                    5d:5e:1a:9a:3c:5f:6f:dc:d1:78:53:51:de:7f:a1:
                    bd:84:44:13:d7:68:4e:d2:45:32:87:49:d1:71:81:
                    18:ed:cb:92:3e:1f:ac:fd:8d:65:ce:19:ff:8a:a6:
                    38:14:8d:74:fb:db:f8:87:81:13:13:db:93:cf:56:
                    3e:62:c9:17:55:f4:56:c8:74:fe:49:c4:45:6f:c3:
                    90:eb:63:65:d3:50:3f:22:17:8a:b1:37:50:a1:32:
                    0c:51:2b:c0:c1:a4:80:e6:b7:c4:37:92:05:f9:f4:
                    a8:c9:16:7c:05:ee:ca:45:28:01:a8:3a:fb:e9:25:
                    c8:48:b3:c4:e1:29:43:d3:a6:3c:36:4e:40:76:41:
                    a4:cd:6f:98:4f:77:c6:be:70:f8:99:50:f7:57:7b:
                    29:9c:41:b8:de:bc:0b:9c:6d:0c:05:9d:a1:0c:91:
                    54:17:aa:48:8d:fa:fa:87:81:77:58:e6:91:ee:2a:
                    9f:18:d0:ec:79:0c:3a:28:f5:1f:14:c8:60:ff:0d:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3A:37:59:AC:13:60:A3:1B:81:EA:87:15:50:A3:FF:C8:4E:EC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de7dc7ec-37d8-3b69-be6f-9600d1b715a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:66:96:28:33:70:4c:ad:69:5d:01:df:91:9f:25:67:b2:e0:
         39:9c:d8:48:95:09:1c:e8:95:ba:fb:7c:0f:5e:97:00:d3:62:
         52:18:af:4c:6a:33:5b:e0:7c:d8:bd:ce:a1:05:d1:87:29:ee:
         f7:54:c4:70:d4:ba:19:e3:8d:e8:dc:e2:36:12:8c:3c:1f:07:
         3c:84:93:f3:e4:d6:12:6a:49:42:18:06:43:2d:29:8e:38:77:
         11:a8:36:8e:cc:f2:c5:13:12:3f:97:73:a9:fa:07:9b:c8:f1:
         d7:01:a7:44:17:cb:ca:01:15:cb:49:89:f1:ef:6e:2a:d7:c4:
         60:b9:cb:48:a4:22:7f:13:3c:13:d6:bb:eb:22:aa:81:f0:f2:
         dc:84:5a:e8:e9:73:d8:c4:0a:1c:53:57:61:72:ab:45:fe:76:
         0c:e9:ce:f7:b1:99:0d:a5:c9:09:4c:31:0b:8b:58:39:5b:61:
         c8:41:1b:ef:45:4e:56:72:2b:4b:5b:46:02:ca:d6:41:49:a0:
         0c:84:ac:66:bd:63:ee:05:f7:cc:a1:4f:fb:cb:77:a5:9b:5f:
         a2:4b:f3:02:3d:32:74:18:3a:13:69:a4:0f:35:db:04:63:cd:
         ed:83:7e:27:e4:98:88:64:7b:cd:70:d4:87:ea:da:11:54:83:
         47:4d:e7:30
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcVDeRtYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0yMDA0MDYwNDAwMDBaFw0yNzAyMDkwNTAwMDBaMC8xLTArBgNVBAMTJGM5
ZTMxZjk0LTI2YzgtNGIxZi1hYTE0LWM2YWY5OTY5YzdiYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOf0SanH6jjEWc6e0uFlplt8XbtY4GM4cwlShQKL
iMOBVKi580kUJxpwZtiQzxSyT2RGI/XdXfpj8VEZXV4amjxfb9zReFNR3n+hvYRE
E9doTtJFModJ0XGBGO3Lkj4frP2NZc4Z/4qmOBSNdPvb+IeBExPbk89WPmLJF1X0
Vsh0/knERW/DkOtjZdNQPyIXirE3UKEyDFErwMGkgOa3xDeSBfn0qMkWfAXuykUo
Aag6++klyEizxOEpQ9OmPDZOQHZBpM1vmE93xr5w+JlQ91d7KZxBuN68C5xtDAWd
oQyRVBeqSI36+oeBd1jmke4qnxjQ7HkMOij1HxTIYP8N2kUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ9OjdZrBNgoxuB6ocVUKP/yE7s4jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2RlN2RjN2VjLTM3ZDgtM2I2
OS1iZTZmLTk2MDBkMWI3MTVhMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxFEjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAc2aWKDNwTK1pXQHfkZ8lZ7LgOZzYSJUJHOiVuvt8D16XANNiUhivTGozW+B8
2L3OoQXRhynu91TEcNS6GeON6NziNhKMPB8HPIST8+TWEmpJQhgGQy0pjjh3Eag2
jszyxRMSP5dzqfoHm8jx1wGnRBfLygEVy0mJ8e9uKtfEYLnLSKQifxM8E9a76yKq
gfDy3IRa6Olz2MQKHFNXYXKrRf52DOnO97GZDaXJCUwxC4tYOVthyEEb70VOVnIr
S1tGAsrWQUmgDISsZr1j7gX3zKFP+8t3pZtfokvzAj0ydBg6E2mkDzXbBGPN7YN+
J+SYiGR7zXDUh+raEVSDR03nMA==
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:15 2024 by rpki-client on console-ams.rpki-client.org