Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f0c1a7fc-a481-3675-8ed3-3ffc5a74aea0.roa
File:                     f0c1a7fc-a481-3675-8ed3-3ffc5a74aea0.roa (raw, json)
Hash identifier:          YeJFww8UG2CmMC7k1t9x/dQFMgnQ29WE5I7TLDhoEo8=
Subject key identifier:   44:84:4D:E4:6B:67:13:C9:49:9B:73:CF:3C:A5:A2:EA:2A:56:70:3D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AEAE2885F53D023745ADFA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f0c1a7fc-a481-3675-8ed3-3ffc5a74aea0.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:ea:e2:88:5f:53:d0:23:74:5a:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=1b699030-1f5b-4aa8-86ab-2b40c27fc3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:ed:ef:48:d0:e0:8b:4e:8f:5e:0e:bf:e8:
                    d1:69:7d:31:e8:5f:ee:65:f8:0e:61:21:ad:68:8a:
                    60:2e:61:6b:f7:08:e8:97:d5:74:f6:92:3d:95:b2:
                    23:27:5b:00:8f:92:fe:96:9b:63:50:09:b5:a9:ba:
                    49:14:5a:d4:0b:d3:df:05:91:04:4d:be:aa:cd:30:
                    e5:cf:d9:9a:70:3b:75:04:2a:f5:2a:4d:98:46:f9:
                    03:df:9a:6e:6c:6f:49:ee:78:f7:74:69:3d:1c:64:
                    ae:b1:9e:e0:ed:d2:64:15:bd:c4:5d:6a:03:68:0b:
                    bc:f6:e7:6c:13:d3:bd:57:0c:f4:72:1d:c1:8b:b3:
                    a9:20:a4:8d:a9:b3:91:9f:34:43:ec:a4:52:3b:9e:
                    53:b8:b2:95:95:e2:93:ff:36:44:9d:8e:12:c5:ab:
                    d5:39:82:7c:1a:05:cd:b4:45:38:40:85:53:97:ab:
                    cd:a9:b0:f5:3e:c2:61:a6:8d:ab:1b:f9:12:1e:22:
                    73:0a:33:d4:eb:76:87:7c:59:1e:59:ea:88:88:9b:
                    c0:18:ae:de:08:b2:ef:7b:9c:6f:c3:a8:41:d4:a9:
                    9f:31:b6:e4:f4:db:fd:99:e4:86:06:44:57:4e:76:
                    70:7f:0e:84:2b:43:cd:b3:dc:d5:08:9e:3b:0f:0d:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:84:4D:E4:6B:67:13:C9:49:9B:73:CF:3C:A5:A2:EA:2A:56:70:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f0c1a7fc-a481-3675-8ed3-3ffc5a74aea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:51:b4:45:d0:55:a4:b3:02:89:ff:ae:08:d2:a7:07:ee:
         2e:0d:84:bd:6a:7d:3a:28:e2:7b:42:cf:ff:d2:d2:50:64:f2:
         67:cf:cc:99:64:f3:69:4a:c2:f7:80:6f:5d:68:14:56:51:f4:
         87:06:19:b2:0f:56:6b:5b:ab:85:0d:45:c7:b4:ef:8c:ec:b6:
         dd:b1:4d:1a:70:a7:08:82:f1:1e:cd:66:8f:2f:ff:87:4e:5e:
         7b:e9:8b:1c:05:8c:81:a6:84:00:03:66:fa:d4:46:42:50:fb:
         80:e5:42:96:69:99:33:f9:a3:14:8a:99:26:69:7c:dc:bb:cd:
         b3:ba:e8:b4:11:46:54:df:ad:a3:4d:1f:2a:d9:04:a3:4e:06:
         ef:3f:d9:41:1d:69:5c:05:0d:0e:98:f2:dc:67:a0:61:52:6f:
         c6:05:b9:1c:72:fa:71:d6:58:59:fc:fc:e9:66:2c:cc:e1:bd:
         5f:81:73:f0:34:21:b6:8f:2c:86:4b:07:04:a7:9f:a9:2a:a1:
         43:40:be:cf:f6:7e:2d:7e:52:d8:1e:24:7c:6f:ae:2f:c6:a7:
         7d:01:69:42:57:97:53:71:27:35:13:8a:1d:19:a3:c0:bd:cc:
         01:62:e3:f0:9a:8d:32:11:23:ec:53:db:4c:4c:3c:ec:67:b5:
         77:04:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:36 2024 by rpki-client on console-fra.rpki-client.org