Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e060b6-0596-3b05-bdf7-9318e789c7ad.roa
File:                     e4e060b6-0596-3b05-bdf7-9318e789c7ad.roa (raw, json)
Hash identifier:          lK9r3NTcPuyC7pcMgs84oSSFHIWd1CNKUOIO+Huaz4Q=
Subject key identifier:   EF:60:6E:27:E5:AF:25:8F:A1:1C:66:9D:9D:74:A0:3B:2B:B2:44:80
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858413FB232966E2A7355FE6DA000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e060b6-0596-3b05-bdf7-9318e789c7ad.roa
Signing time:             Thu 16 Mar 2023 12:00:00 +0000
ROA not before:           Thu 16 Mar 2023 12:00:00 +0000
ROA not after:            Sun 11 Jun 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3f:b2:32:96:6e:2a:73:55:fe:6d:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar 16 12:00:00 2023 GMT
            Not After : Jun 11 04:00:00 2028 GMT
        Subject: CN=31447440-ac85-4edc-b327-49ab0ae3fff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:35:6a:01:e7:0f:28:79:9b:57:2b:89:af:
                    e9:f9:aa:13:fe:77:fb:f1:41:9b:45:d1:eb:7e:8a:
                    28:11:99:e8:5e:31:19:e7:91:9f:6c:1a:9f:33:03:
                    19:ca:92:17:c5:d2:cc:5d:17:60:3e:2e:1f:e0:e5:
                    b7:48:b3:49:41:fa:29:c6:9a:0d:40:5f:e8:68:9b:
                    bb:c3:05:5e:a1:64:28:d2:49:32:a0:2e:64:b5:75:
                    e8:60:3b:08:e8:c9:d5:fc:40:85:2b:27:db:60:21:
                    76:8b:26:56:a1:3e:b5:2a:6d:72:46:e3:a5:7c:57:
                    d0:68:6b:d3:03:3a:87:a3:8e:d6:bb:c2:6b:b7:45:
                    d0:5a:07:0f:15:56:a3:ff:1b:ff:28:6c:b2:d8:13:
                    64:80:1c:e0:02:0e:20:15:e7:23:6e:f6:b2:37:af:
                    8d:38:d7:f1:bf:60:c7:d3:d3:4c:f8:e5:d9:08:cd:
                    b2:13:dc:3e:67:ba:c4:fb:db:ce:e3:9b:aa:20:ee:
                    77:5b:77:78:ee:42:30:99:f9:e7:57:7f:30:28:5a:
                    b6:d9:fd:f1:66:e6:68:4b:57:c5:5b:af:ed:17:7c:
                    a9:ba:d3:98:45:20:95:34:f9:3d:e7:6e:9a:bb:dc:
                    3b:78:e6:cd:db:cb:8a:4e:0f:ef:c3:50:42:f3:41:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:6E:27:E5:AF:25:8F:A1:1C:66:9D:9D:74:A0:3B:2B:B2:44:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e060b6-0596-3b05-bdf7-9318e789c7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:51:56:02:ab:8d:db:69:f2:9c:e3:af:58:d0:94:3e:5e:
         e4:55:b5:3f:22:ae:16:21:32:d6:66:65:a4:55:89:6d:90:22:
         ac:b5:63:44:2d:b2:b9:c4:43:a0:b3:1f:55:59:f1:85:ee:aa:
         8e:36:5e:62:8f:a8:e0:61:e3:63:d7:79:03:58:89:6e:24:21:
         1e:4c:42:bc:f2:b2:b2:b1:f6:69:63:aa:e8:73:74:7a:89:be:
         4e:1e:91:14:8f:0a:12:8d:15:4b:7e:65:70:be:94:43:a9:14:
         4a:f0:8f:7f:6b:44:21:7a:24:3b:f8:8d:ab:10:45:26:be:54:
         52:fb:57:b6:6b:af:29:73:98:4c:cc:46:21:2e:67:3c:c1:d6:
         13:6e:16:43:7e:79:46:ea:54:d5:4b:e1:a0:74:59:16:72:15:
         0e:06:8c:4a:bb:ff:e0:35:a0:0a:fa:b7:7f:dd:5b:22:5f:24:
         f8:4d:10:ba:e1:00:7b:1c:77:3a:30:21:e9:db:d2:80:87:06:
         ce:d5:00:5f:79:ee:44:ca:11:8a:b5:7b:53:0a:64:b7:5b:25:
         e0:17:94:f0:2f:50:b4:01:3b:0c:b3:4d:68:9c:8c:35:91:28:
         65:f2:45:28:fb:99:da:c3:ec:1d:e9:1a:6e:25:a8:38:c6:86:
         7d:66:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:45 2024 by rpki-client on console-fra.rpki-client.org