Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa
File:                     ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa (raw, json)
Hash identifier:          1AUAq0iaLaSNRWW+X+aexABnrfnrM3hgec61OjJdikI=
Subject key identifier:   0D:5A:D9:01:22:C3:20:FF:38:9E:CF:25:0F:22:1C:0F:FE:40:A6:18
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583CA78868445CFF09A225C4A8C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa
Signing time:             Thu 20 Jan 2022 05:00:00 +0000
ROA not before:           Thu 20 Jan 2022 05:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a7:88:68:44:5c:ff:09:a2:25:c4:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 20 05:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=33cbe89b-6b84-4bb4-91f7-e43bc8c7672b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:3e:a7:3b:03:4b:2d:39:42:f1:65:d9:da:
                    95:5c:b6:11:86:57:ad:21:2d:a4:d2:7f:75:0d:27:
                    a4:21:ff:44:fe:c6:88:25:5d:bb:c6:84:3f:14:8e:
                    82:69:eb:39:13:e2:d5:c8:30:72:8d:0f:86:d1:fb:
                    12:31:34:a8:62:b2:6a:43:a8:ae:ed:03:c4:ee:4a:
                    2d:68:86:56:b6:8e:88:0c:a2:e0:ca:bc:0b:a7:e5:
                    df:d6:69:74:2b:a2:82:fd:c0:60:99:ef:7f:2e:74:
                    3f:ff:33:f4:e4:e9:5c:ee:16:75:e7:d6:84:90:01:
                    c0:cc:58:31:69:8e:80:21:63:d4:63:0c:d5:78:a7:
                    f2:c9:4e:3c:69:ac:ed:6d:af:5d:04:61:46:a0:0f:
                    8d:f9:c0:61:3d:87:a2:92:7a:c6:22:70:ae:e9:9e:
                    0b:f3:8d:ed:bb:7d:3c:2f:74:e2:eb:2d:04:3e:67:
                    8e:6a:64:83:b7:66:9a:09:ef:34:8a:76:20:f5:d6:
                    9e:cd:b4:33:83:26:87:9e:78:77:a6:47:05:db:eb:
                    67:8d:b7:ad:f8:ab:17:e6:ff:f7:09:79:5b:35:aa:
                    b8:9a:20:cb:b7:4e:2c:b4:36:e4:01:83:23:0c:5f:
                    bd:2a:e9:31:23:6e:af:1b:e6:96:2f:ae:70:ac:35:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:D9:01:22:C3:20:FF:38:9E:CF:25:0F:22:1C:0F:FE:40:A6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:56:18:c1:a6:35:3e:fb:8d:90:17:12:71:57:0e:68:bc:
         2b:fb:56:e3:6e:5d:ab:4f:99:e0:1c:3e:19:30:05:23:a9:1e:
         74:bb:8d:9a:d8:57:b2:d9:6d:ce:e8:6c:7c:0d:d0:95:66:d7:
         57:0a:89:e0:82:bc:63:eb:11:7e:dd:48:7f:ed:76:f8:7f:41:
         82:be:f4:4d:4d:4b:bd:e8:66:13:18:19:21:fc:77:8f:c0:34:
         1b:76:d0:ee:6f:9f:6f:2e:da:c4:01:5f:db:cc:64:90:80:73:
         b8:3f:ac:1f:30:48:9d:2f:7d:be:27:b1:70:90:56:eb:17:ad:
         e3:30:95:fc:fb:fe:07:c4:5f:2c:d7:28:14:85:fb:9e:c2:15:
         fe:fa:18:4d:b3:a6:b7:dc:56:c0:b1:7c:79:90:bf:7b:d9:d5:
         39:9b:ab:c4:f8:48:8f:30:3d:94:19:b8:ab:92:80:f1:a4:a1:
         c3:63:eb:a5:ea:df:5b:09:33:a1:2d:48:fb:f4:3b:d4:44:f5:
         be:b4:4d:3d:62:20:f1:85:60:a0:3f:98:65:70:3d:36:36:f6:
         2b:84:b5:90:18:e7:da:f4:b5:a1:c6:cd:0a:8a:9f:48:ed:87:
         e1:aa:da:ae:a0:ff:14:a2:e4:f8:87:d3:0f:9c:8d:fc:ed:b1:
         e1:34:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:30:15 2024 by rpki-client on console-ams.rpki-client.org