Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f94449ba-c34d-360d-bb79-82d6f9a2dc5d.roa
File:                     f94449ba-c34d-360d-bb79-82d6f9a2dc5d.roa (raw, json)
Hash identifier:          qw258S1I8LTMril5D5vpd6qMVAssPUFJQSG66NcNfs8=
Subject key identifier:   59:05:48:0D:EC:4F:3D:AC:8B:45:2A:28:9B:80:CE:EE:95:E2:65:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285839476ADD3CF8165449F0565C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f94449ba-c34d-360d-bb79-82d6f9a2dc5d.roa
Signing time:             Tue 16 Mar 2021 04:00:00 +0000
ROA not before:           Tue 16 Mar 2021 04:00:00 +0000
ROA not after:            Fri 28 Apr 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:47:6a:dd:3c:f8:16:54:49:f0:56:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar 16 04:00:00 2021 GMT
            Not After : Apr 28 04:00:00 2028 GMT
        Subject: CN=6fc7a582-ee9b-4fb3-add1-e7016cda80b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:64:e1:2e:5a:fa:60:27:f0:14:e5:1c:1a:
                    98:84:f7:74:76:a5:65:cf:1d:fb:b7:96:87:88:e0:
                    f6:a5:5b:af:0e:0f:a1:69:56:e4:d9:4d:f6:79:f6:
                    d1:58:33:c7:7e:02:c5:e8:66:80:ef:a2:83:85:85:
                    5f:4c:8c:2f:a8:c9:49:cf:16:60:7c:69:f4:ca:db:
                    5d:64:a0:d6:bc:a8:1c:a3:ee:47:ac:38:fc:f0:c6:
                    eb:74:f3:d4:65:98:50:bb:d4:78:e8:ab:7d:c6:f9:
                    d6:98:b6:f1:9c:2e:b7:cc:9b:3a:92:81:c9:55:63:
                    1e:b9:79:c2:27:f9:ee:82:96:bf:61:f5:ee:11:88:
                    be:d8:96:7f:0f:cd:04:ef:60:57:f3:5a:a9:26:34:
                    ad:81:26:4c:bf:d9:9c:76:d8:5a:68:a2:80:2d:24:
                    71:76:69:38:03:ff:63:5c:b5:b7:da:85:a7:86:cc:
                    e3:01:ba:49:fc:0f:cc:74:3d:29:7a:3e:dd:21:54:
                    bd:48:e2:6a:cf:96:f5:83:b2:13:a3:a6:0f:59:24:
                    7e:8b:b4:e6:f1:e5:7f:ed:e9:1a:49:5f:25:a9:25:
                    bc:36:a2:f6:65:ba:b5:f0:05:1c:77:42:7c:49:09:
                    b9:d6:2a:09:04:68:56:17:d4:29:d7:ce:78:4e:a4:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:48:0D:EC:4F:3D:AC:8B:45:2A:28:9B:80:CE:EE:95:E2:65:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f94449ba-c34d-360d-bb79-82d6f9a2dc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:58:f3:3d:09:a6:c1:c3:60:a3:78:8b:03:16:7d:6e:9a:80:
         c8:55:51:36:c0:92:9e:90:fb:23:86:de:2d:c6:83:74:da:44:
         c8:e7:a1:16:25:5d:b1:0e:b8:f7:81:fb:c3:c5:99:a8:24:d7:
         be:60:d5:0c:7d:20:bb:9a:9d:37:8d:ff:07:36:3a:3e:52:0a:
         b3:39:56:f6:04:ad:40:03:33:5d:8d:3d:b9:3f:d3:b2:d4:11:
         17:47:6a:09:e5:a3:af:59:22:32:9e:e2:e0:6a:aa:2f:52:49:
         80:ad:9d:bf:a6:eb:85:29:70:74:a0:df:66:51:b4:8b:8e:b5:
         c0:c9:05:ee:65:e6:6e:42:db:a1:b3:fe:4b:1a:ac:f3:47:3c:
         d9:8b:00:be:3e:99:fc:6b:c4:90:28:9b:b0:44:3f:8a:04:00:
         51:ba:26:9f:c5:c0:c4:ff:7e:53:6a:9d:bb:59:4d:82:a6:c1:
         60:6b:70:cf:4b:37:ba:0c:35:12:14:a5:b0:7b:31:48:35:da:
         4d:80:e7:8c:29:68:90:e7:f9:d9:d4:0f:f1:3b:46:08:ee:21:
         4c:0a:ea:26:4f:b8:ca:85:69:bd:d6:aa:bd:ac:9a:7e:11:32:
         eb:7f:36:b1:75:a0:07:28:26:a8:83:77:e5:97:14:0a:3b:e2:
         d7:37:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:13 2024 by rpki-client on console-fra.rpki-client.org