Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eedd3665-7b9a-3ac8-9508-524e1b42daee.roa
File:                     eedd3665-7b9a-3ac8-9508-524e1b42daee.roa (raw, json)
Hash identifier:          0Ts5GhEHnOetu/gJ0R98wkXMtfCxuMVpTOK19kAGht4=
Subject key identifier:   FF:E8:B9:26:68:CB:9E:96:FA:EF:19:D0:41:EA:41:9D:89:3F:B3:70
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583BFA8B644245141F18B612EE40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eedd3665-7b9a-3ac8-9508-524e1b42daee.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 05:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fa:8b:64:42:45:14:1f:18:b6:12:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 19 05:00:00 2021 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=cfd5629c-8c00-410a-aebc-5b3b4196e9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:7e:03:44:5e:f5:15:97:f1:f1:fa:25:a5:
                    4c:ca:04:24:4f:22:69:df:b4:a4:79:be:d6:11:d1:
                    45:f9:c9:e2:2e:2f:5b:3f:37:1a:60:b2:74:14:15:
                    dd:0e:5f:ef:bb:03:c9:75:d6:8b:c1:ca:ce:c6:25:
                    be:ab:1b:6e:b9:eb:15:6d:6f:15:d7:f5:1b:8a:0c:
                    dc:44:75:f1:95:20:5e:38:c5:e9:41:e9:57:ae:02:
                    f6:89:3c:8d:f1:73:36:40:95:6d:ba:ce:08:9a:b9:
                    d2:79:17:18:92:b4:3e:2a:97:83:a2:7e:1b:db:6f:
                    cf:75:2a:86:f2:a0:2d:ac:aa:ec:0b:de:02:e7:2b:
                    b1:40:aa:38:23:bd:18:a4:47:c0:2e:ba:65:fd:55:
                    75:1c:e9:b0:34:5f:48:d5:71:12:09:c2:6b:fa:69:
                    c7:f5:44:8b:08:2e:85:20:d4:f5:14:c3:c0:d7:3f:
                    97:96:c2:8c:91:0d:2a:7d:d3:e6:a8:58:f8:d2:ed:
                    f4:76:9d:23:2e:4d:0d:6c:a5:f4:9d:7f:58:52:b4:
                    3f:27:75:94:44:69:69:22:4b:3d:43:b5:34:b9:11:
                    d1:d5:3d:1c:35:86:b1:53:8e:8c:ef:50:49:90:9c:
                    ee:38:57:3f:d0:3b:77:a7:a8:51:2e:b5:bc:b8:fd:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E8:B9:26:68:CB:9E:96:FA:EF:19:D0:41:EA:41:9D:89:3F:B3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eedd3665-7b9a-3ac8-9508-524e1b42daee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:6c:f6:99:da:4a:21:a4:75:c6:f6:17:d6:2b:94:09:13:
         67:2b:8f:2f:cf:a4:53:a8:99:09:63:29:a2:ca:8e:4b:66:71:
         e8:2b:69:6b:4e:47:4c:ee:3d:0a:d2:7b:a2:01:db:13:2f:32:
         28:2d:57:64:22:89:66:a8:97:9a:1d:40:47:a1:d8:88:24:e4:
         47:75:c4:a1:07:3b:3b:6f:97:1a:db:9e:99:da:f4:a0:25:02:
         e8:b4:22:4d:a4:6b:42:cb:77:d5:4f:56:9e:df:4d:d4:43:e7:
         fc:b7:7e:92:78:d5:69:82:49:9b:56:d3:37:da:23:f9:1a:f0:
         8b:68:4a:3e:df:4e:8f:8c:d6:2e:09:48:f3:5c:f8:6c:d8:9a:
         f1:c5:f6:3e:49:ec:39:86:02:e4:55:83:33:f6:40:22:ba:c8:
         bd:59:5f:98:94:a5:5b:1b:4a:fc:68:6e:83:16:aa:22:b1:1b:
         f2:5e:5a:90:d0:a2:65:4b:45:62:96:30:d9:73:c7:6a:68:c9:
         21:47:95:83:c4:5e:b6:cd:31:f8:c7:3b:b2:d7:c4:86:02:03:
         f5:2f:65:76:df:5b:87:bd:a3:07:fe:e8:36:85:74:70:0a:74:
         d8:de:6b:b9:00:a1:38:75:cd:ca:ec:ae:8a:02:b4:5b:3e:54:
         f3:b8:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:04 2024 by rpki-client on console-fra.rpki-client.org