Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e636b40d-aeda-3659-8546-cf25c460f2b4.roa
File:                     e636b40d-aeda-3659-8546-cf25c460f2b4.roa (raw, json)
Hash identifier:          qap3sJatYAX0A30A+rI3yLOX3C4V/LAQbB+OIzvnhy0=
Subject key identifier:   0B:46:D6:A9:B2:5B:87:1F:AD:39:BF:55:10:F3:D0:B8:3F:A3:BB:47
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285844A5E1FAB17BBA08A0442E9D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e636b40d-aeda-3659-8546-cf25c460f2b4.roa
Signing time:             Mon 22 Jan 2024 12:00:00 +0000
ROA not before:           Mon 22 Jan 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a5:e1:fa:b1:7b:ba:08:a0:44:2e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 22 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=80c75e0b-a8da-4c0b-a5df-a3cd4066c125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:1c:1e:f9:0c:92:3d:57:aa:78:82:84:bb:
                    1a:cf:c6:29:f5:22:d0:2e:57:95:f1:20:ad:c7:80:
                    71:6a:3b:20:ed:5c:ac:fe:ed:5b:53:3f:35:46:ac:
                    05:17:61:d2:85:00:c1:f0:c1:cc:90:a6:0f:13:1c:
                    16:a6:42:e5:47:21:8a:85:70:ee:a6:c8:c0:a2:ab:
                    b0:14:39:62:c3:9e:05:1b:e4:3e:c1:ff:3e:9c:44:
                    9d:8d:8f:44:01:92:5e:d0:60:5f:d4:41:1b:38:a3:
                    b6:28:20:b4:0e:6b:da:af:3a:c0:ed:d2:16:e4:5b:
                    fd:cf:62:15:12:5f:b4:0c:11:51:73:ab:98:f2:9d:
                    1e:3b:30:1a:d3:fa:9a:19:b6:be:c0:2c:8a:98:55:
                    cf:d5:ff:fc:0b:a7:51:b4:a2:e9:1e:d9:7f:e8:e8:
                    98:2c:fa:f4:51:53:57:91:c2:73:31:cc:d4:03:d3:
                    50:ee:09:13:37:f6:64:4a:9b:9d:6e:6d:b4:8e:77:
                    09:38:cc:72:0a:73:7c:25:f9:8b:d4:9e:ef:10:b2:
                    5c:35:b3:39:fe:50:81:19:88:eb:db:c2:50:4b:c0:
                    b5:a8:31:b3:dd:68:08:53:62:2c:e5:8b:55:48:fd:
                    e6:19:0c:77:25:2d:bb:cd:ab:fa:2b:9c:62:65:85:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:D6:A9:B2:5B:87:1F:AD:39:BF:55:10:F3:D0:B8:3F:A3:BB:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e636b40d-aeda-3659-8546-cf25c460f2b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:55:c7:11:1f:b2:6d:ea:a1:2b:d0:c4:84:08:0d:8a:22:d6:
         6e:60:1d:1e:ea:85:13:c1:97:ee:23:1d:ba:78:71:d8:a2:5e:
         79:90:b2:4f:f1:66:0c:14:41:21:46:e1:09:32:75:8d:e7:66:
         53:c4:dc:94:ef:da:0d:56:6e:cf:83:d1:7f:03:2b:63:29:11:
         99:00:ec:c3:54:1b:bb:a2:9a:c8:e5:09:17:1f:70:e1:82:61:
         fb:63:c4:e0:44:4d:53:77:51:dd:57:3c:82:f6:e9:d8:30:95:
         1f:6f:f8:54:6d:3e:33:de:b1:a5:83:a7:f7:0c:72:3f:64:a5:
         95:75:31:12:5e:c2:81:72:c5:51:1b:dc:8e:41:a8:24:90:b4:
         8a:e5:8c:7c:d0:bc:94:f9:27:9f:a2:3a:ee:db:b7:68:61:e7:
         eb:55:32:6f:0b:53:0d:bf:d8:e9:3d:96:ea:c4:20:d5:f2:c6:
         58:8f:f8:63:30:eb:81:05:e6:9f:36:34:e3:8a:c1:fb:9a:7c:
         07:6c:ce:80:9a:75:cc:98:d3:e1:a8:e8:43:ad:ae:a2:10:cd:
         fb:69:fd:b2:70:c9:75:34:a3:c6:c2:c1:da:9e:5e:70:ed:3c:
         e3:71:5e:f0:5f:27:03:96:8d:50:9b:9e:04:e7:b3:1a:1d:03:
         4c:7d:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:17 2024 by rpki-client on console-ams.rpki-client.org