Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8cd5de6-99f8-3d86-9419-ed219b93bdcc.roa
File:                     e8cd5de6-99f8-3d86-9419-ed219b93bdcc.roa (raw, json)
Hash identifier:          xkHVa6imsblhQbFswfvCgF0U43X1nnijnfjVJuUxYc0=
Subject key identifier:   1E:5A:20:73:EC:CF:11:6B:9F:F8:AF:7D:70:CD:AB:95:FE:93:EB:9D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285842937A186A653E4338370C9C34
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8cd5de6-99f8-3d86-9419-ed219b93bdcc.roa
Signing time:             Sun 16 Jul 2023 12:00:00 +0000
ROA not before:           Sun 16 Jul 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:93:7a:18:6a:65:3e:43:38:37:0c:9c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 16 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=216ea1a1-225e-42c5-83de-95ce0bc46a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:45:c5:e7:d8:02:96:ec:15:02:17:66:c1:
                    c3:70:49:ae:90:d8:9d:b7:89:4b:09:38:56:d7:4a:
                    90:4a:ee:55:d4:c2:2d:bf:67:e5:9d:68:93:fc:3f:
                    29:d0:79:6b:e6:ec:a1:ee:4d:f8:af:95:7f:02:be:
                    7a:91:a0:f2:69:ec:fc:aa:5e:23:07:0a:84:38:81:
                    2f:03:c6:b7:7e:5d:29:25:1d:7d:81:ad:ae:4f:fa:
                    65:3c:3d:3c:79:be:c7:4d:e2:11:f9:26:ce:12:cc:
                    b5:3e:68:da:18:b3:59:1a:0f:8b:ad:17:6d:bd:f5:
                    04:6d:79:20:c4:19:d0:1a:a2:f6:f9:fd:81:b0:ac:
                    00:09:a6:16:80:f6:ee:a0:98:88:68:e3:de:16:03:
                    d7:ac:85:6f:19:14:07:e8:1e:d1:e5:ce:82:ab:f0:
                    de:2e:a6:16:58:8e:14:e4:b6:2b:ae:da:f7:08:e4:
                    67:fb:14:3a:52:c2:f3:78:88:d0:a5:15:7d:68:0c:
                    e8:57:23:3c:4e:28:1f:96:24:66:a3:cc:71:40:c5:
                    e4:99:4b:0e:3f:03:47:71:60:db:a8:e8:95:cc:4f:
                    23:79:5c:0e:52:08:62:ac:64:9a:00:fd:47:89:b7:
                    a2:6b:82:d2:18:aa:ba:d1:b7:f6:2f:4d:b4:d0:98:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5A:20:73:EC:CF:11:6B:9F:F8:AF:7D:70:CD:AB:95:FE:93:EB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8cd5de6-99f8-3d86-9419-ed219b93bdcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:60:d7:30:31:b4:09:72:af:09:b3:2f:85:88:f0:60:a7:71:
         24:8f:95:38:1f:d9:84:2e:8d:6c:f5:85:cd:f0:de:ad:c3:0a:
         4f:19:d4:58:f1:1c:19:ed:03:f8:f6:50:f7:11:8e:e5:02:ba:
         db:90:fb:7b:91:70:63:2b:de:80:3a:7b:39:b4:4f:e7:9a:99:
         84:e7:9a:5d:66:5d:26:af:8c:64:10:e5:a4:5f:73:06:c2:a5:
         6d:37:5e:e7:d9:23:c1:66:13:37:4d:b2:a1:e6:20:bc:5a:78:
         95:e7:26:b2:39:30:a2:4b:8e:26:37:0c:99:82:41:31:3f:f4:
         eb:47:24:c9:24:a3:3a:f0:10:c9:0e:46:0d:8e:f3:55:d5:06:
         da:3e:88:9a:cc:57:11:ed:3f:a0:4e:c0:ab:9b:90:bc:fa:41:
         bb:7d:c1:92:63:e4:19:1f:32:3a:92:f5:81:a6:3c:c3:0a:13:
         50:1a:79:cb:49:27:b0:84:86:ad:b8:90:88:e9:3f:82:a2:30:
         5c:12:c7:4d:4a:56:4a:98:06:12:82:07:b9:61:d2:26:75:3b:
         28:5d:cf:66:c5:59:09:c6:d7:21:47:f7:be:ba:a7:2e:83:28:
         59:3b:fe:ee:de:d8:9c:3a:00:05:61:22:2b:84:31:38:fa:bf:
         5b:7c:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:13 2024 by rpki-client on console-fra.rpki-client.org