Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbfdf0d-745b-3c38-9f18-722ed8e78dd5.roa
File:                     edbfdf0d-745b-3c38-9f18-722ed8e78dd5.roa (raw, json)
Hash identifier:          4jOu7ZFkA88yf/09byAfjWXs515VjfGXTvCXnxC8+z4=
Subject key identifier:   D3:24:0B:80:CD:DD:31:3E:C3:31:58:E6:E7:31:F8:DD:7D:EE:50:AF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5AD887EFF1A7E062EC80E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbfdf0d-745b-3c38-9f18-722ed8e78dd5.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:5a:d8:87:ef:f1:a7:e0:62:ec:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=41345cc5-11a8-40e7-8485-e0e494d75d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:01:5e:38:29:6c:89:0b:41:b8:19:a4:02:
                    98:00:0d:77:53:52:8f:a9:3c:b2:2e:b4:44:bb:dc:
                    15:23:8f:05:90:0b:9e:6a:ba:5e:1e:ab:3c:14:ec:
                    b2:0d:e5:8e:9c:cb:41:d2:a9:82:9d:d1:94:ab:1b:
                    c5:25:4f:12:05:f7:71:14:dd:e4:cb:13:9a:6d:33:
                    84:82:b6:12:0f:c3:ca:78:36:37:7d:1d:b3:f8:56:
                    85:4f:65:94:33:09:18:8c:da:3f:29:36:51:35:22:
                    e1:3f:73:58:2b:e8:83:79:91:18:ec:0e:67:72:b2:
                    48:d1:4f:0e:17:93:bb:d7:ae:6b:01:34:52:74:42:
                    ea:fc:f0:9b:1e:c1:b3:71:84:85:43:c9:a1:7a:37:
                    c1:55:2f:f8:c8:8b:1a:fd:c3:89:ed:47:dd:19:de:
                    02:17:ad:29:f1:d6:de:58:b8:9f:ff:17:f0:70:12:
                    a9:fc:04:6f:ff:8f:bd:2a:55:34:d1:ec:f2:63:09:
                    42:fb:f3:22:b6:de:2c:b8:6c:17:e1:e5:8a:d1:a3:
                    00:0b:29:cf:93:fc:80:7e:3f:ec:c1:b6:72:2e:6b:
                    49:ad:2b:98:57:2b:96:bc:c2:7a:31:a1:b6:f5:eb:
                    1f:03:02:82:68:ce:2b:d8:34:3b:33:b0:63:69:9f:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:0B:80:CD:DD:31:3E:C3:31:58:E6:E7:31:F8:DD:7D:EE:50:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbfdf0d-745b-3c38-9f18-722ed8e78dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:eb:fd:57:35:b0:ad:04:ab:e6:bf:f6:4e:9c:2f:a2:27:
         72:db:d7:1f:8a:bf:74:16:7e:b5:88:19:a7:9e:dc:47:71:09:
         42:85:5c:ee:e6:b0:c2:e6:56:ca:6c:ba:23:22:6d:7f:a0:49:
         01:f3:a6:14:23:8b:f7:2e:cf:8a:5e:b0:0b:59:63:9b:22:25:
         a4:1c:7b:db:8a:ce:27:4e:8d:c9:a4:94:88:cf:d8:85:74:ed:
         32:69:99:23:20:2d:e6:e5:9d:e9:b1:aa:8d:83:0e:ec:8b:ff:
         a0:7b:1b:a0:cc:e3:35:b9:a3:26:6b:87:57:d0:5b:60:ab:12:
         33:8d:a8:80:d5:45:59:a8:40:78:c9:5b:09:a1:41:fd:61:35:
         d3:e3:01:02:8e:56:7f:44:7b:b6:67:94:67:5e:9a:bd:b0:d4:
         8e:ad:a7:f1:0c:c2:7f:17:3a:bb:d9:31:5f:b5:7e:b1:ce:e1:
         be:4e:c2:66:e0:26:53:1b:13:64:e1:20:8e:28:ff:f2:ee:25:
         6b:d4:40:fb:67:53:c7:76:8f:9c:02:e0:ed:1f:37:d8:04:c1:
         4c:7f:a9:1b:8b:ce:c0:ff:f2:d0:2b:df:53:04:00:3d:0c:48:
         80:bd:68:e1:1f:64:5a:0a:7f:5a:e9:ea:81:6b:a7:d5:08:3c:
         05:fc:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:16 2024 by rpki-client on console-ams.rpki-client.org