Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48ac565-1bca-3d34-ace4-92f48e5f3707.roa
File:                     f48ac565-1bca-3d34-ace4-92f48e5f3707.roa (raw, json)
Hash identifier:          YYCOOzu65jNYSUc4Gi7N189zuw9ieAmrTaCxpBaw9fI=
Subject key identifier:   1D:85:B5:13:14:15:86:3D:F1:6F:59:54:EB:70:7A:C4:65:2D:D9:F4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715D532AE2
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48ac565-1bca-3d34-ace4-92f48e5f3707.roa
Signing time:             Thu 09 Apr 2020 05:04:23 +0000
ROA not before:           Thu 09 Apr 2020 04:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.64.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5d:53:2a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=66ec0767-57e9-4050-8604-038f6575965c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:c3:6e:7c:b0:fd:e3:f9:fa:84:e2:ee:8d:
                    f2:db:05:82:1f:e2:42:5c:54:82:75:c8:e0:d1:2c:
                    62:de:20:ed:29:9d:6b:24:a4:2d:e4:c3:33:7e:91:
                    1c:f1:0f:3f:b8:ca:2c:5d:a9:9d:a1:6a:e3:87:ea:
                    85:11:7a:f3:19:7f:86:42:b5:8b:51:f8:c3:61:0a:
                    30:b7:f4:1b:93:b9:38:06:ed:ce:96:27:30:3e:42:
                    32:33:8b:db:2f:a6:30:2b:21:30:ea:d7:17:a7:7c:
                    9b:db:33:70:7e:04:56:2e:33:25:7d:98:89:ac:de:
                    61:92:02:a1:b0:18:a8:02:c0:98:32:7e:60:4b:df:
                    68:1d:a0:73:b8:a3:7f:5c:de:46:37:45:42:58:0b:
                    54:f4:ac:f6:1f:24:62:e0:84:3a:7e:01:ff:07:ab:
                    b3:a4:b4:f9:ae:1f:2d:7f:51:ab:2e:40:c9:7e:ef:
                    2e:30:03:16:d1:05:5e:df:f1:64:bb:e7:23:fe:31:
                    34:91:b7:40:84:17:26:32:11:b4:5b:62:50:34:d1:
                    48:9e:a3:70:74:bc:a0:32:d3:c0:4a:68:78:ea:33:
                    ed:36:da:d0:a7:87:8e:46:ac:28:99:ba:fe:ce:2f:
                    01:86:0a:58:19:c5:99:72:4d:fc:42:d0:dc:92:b3:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:B5:13:14:15:86:3D:F1:6F:59:54:EB:70:7A:C4:65:2D:D9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48ac565-1bca-3d34-ace4-92f48e5f3707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:e2:0b:dd:3b:a8:cf:73:89:c4:b5:dd:73:79:5f:40:bf:
         b9:1d:12:c6:12:4e:9f:e6:be:ff:be:c6:45:46:3e:9e:2a:27:
         3f:98:5f:ba:ba:aa:1c:aa:a5:97:e7:40:4c:1d:be:ed:03:67:
         9b:bd:14:5e:49:b5:97:35:ac:f9:18:66:5c:25:32:71:31:18:
         fb:b2:3d:9d:bd:f9:42:e1:c3:13:c1:47:f0:e8:c5:6d:bb:8d:
         02:59:16:aa:e8:8b:5b:45:56:e0:65:ea:5d:56:c9:77:a6:11:
         6b:47:7c:b1:93:c3:36:28:1a:bb:cf:8a:12:04:a4:fb:ca:43:
         d9:ed:ec:3f:82:0b:2d:b6:9c:c7:d8:09:24:f9:5a:d9:b5:b4:
         6c:34:0c:df:38:86:71:26:13:88:39:e9:71:00:7b:29:67:64:
         4b:4b:8b:75:04:c6:42:03:1e:00:27:a3:56:7a:bf:a1:52:f2:
         2b:f4:5e:e4:29:ce:13:cc:30:fd:b5:1c:76:1a:0a:0a:66:77:
         43:ae:75:79:b0:f7:c2:07:f9:16:0a:97:1d:11:55:d4:eb:c2:
         bb:2d:d6:e6:34:a8:5a:fb:ba:29:ff:52:89:38:e9:49:58:c9:
         9f:01:e0:c7:e2:7f:b0:a8:ff:a7:47:b0:dd:e1:5e:02:f1:70:
         28:1b:77:b6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcV1TKuIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0yMDA0MDkwNDAwMDBaFw0yNzAyMTIwNTAwMDBaMC8xLTArBgNVBAMTJDY2
ZWMwNzY3LTU3ZTktNDA1MC04NjA0LTAzOGY2NTc1OTY1YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANSCw258sP3j+fqE4u6N8tsFgh/iQlxUgnXI4NEs
Yt4g7SmdaySkLeTDM36RHPEPP7jKLF2pnaFq44fqhRF68xl/hkK1i1H4w2EKMLf0
G5O5OAbtzpYnMD5CMjOL2y+mMCshMOrXF6d8m9szcH4EVi4zJX2YiazeYZICobAY
qALAmDJ+YEvfaB2gc7ijf1zeRjdFQlgLVPSs9h8kYuCEOn4B/wers6S0+a4fLX9R
qy5AyX7vLjADFtEFXt/xZLvnI/4xNJG3QIQXJjIRtFtiUDTRSJ6jcHS8oDLTwEpo
eOoz7Tba0KeHjkasKJm6/s4vAYYKWBnFmXJN/ELQ3JKzf8MCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQdhbUTFBWGPfFvWVTrcHrEZS3Z9DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2Y0OGFjNTY1LTFiY2EtM2Qz
NC1hY2U0LTkyZjQ4ZTVmMzcwNy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxAIDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAnLviC907qM9zicS13XN5X0C/uR0SxhJOn+a+/77GRUY+nionP5hfurqqHKql
l+dATB2+7QNnm70UXkm1lzWs+RhmXCUycTEY+7I9nb35QuHDE8FH8OjFbbuNAlkW
quiLW0VW4GXqXVbJd6YRa0d8sZPDNigau8+KEgSk+8pD2e3sP4ILLbacx9gJJPla
2bW0bDQM3ziGcSYTiDnpcQB7KWdkS0uLdQTGQgMeACejVnq/oVLyK/Re5CnOE8ww
/bUcdhoKCmZ3Q651ebD3wgf5FgqXHRFV1OvCuy3W5jSoWvu6Kf9SiTjpSVjJnwHg
x+J/sKj/p0ew3eFeAvFwKBt3tg==
-----END CERTIFICATE-----
Generated at Sun May 12 01:32:06 2024 by rpki-client on console-fra.rpki-client.org