Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa435caf-fd81-3e4e-b113-255e19966c35.roa
File:                     fa435caf-fd81-3e4e-b113-255e19966c35.roa (raw, json)
Hash identifier:          mK7FciJR1DoSusrBPz247A6XsFMZrgpiQM4BzLt9JVw=
Subject key identifier:   A1:2B:68:B9:6C:F9:5C:85:BF:07:08:FF:68:69:84:74:78:67:64:7F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A0F431A79
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa435caf-fd81-3e4e-b113-255e19966c35.roa
Signing time:             Fri 12 Apr 2019 01:56:57 +0000
ROA not before:           Fri 12 Apr 2019 04:00:00 +0000
ROA not after:            Tue 29 Jun 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:0f:43:1a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 12 04:00:00 2019 GMT
            Not After : Jun 29 04:00:00 2027 GMT
        Subject: CN=a938f71a-cb09-4910-85fb-d8c78dc098d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:93:92:0e:11:0a:67:a1:8d:56:9b:c5:e9:
                    f0:fb:68:b7:f5:de:52:37:38:8e:87:9d:4e:e7:a8:
                    a4:7e:b8:45:9a:68:5d:2c:57:f7:0b:8b:60:93:a1:
                    ad:37:31:c9:24:d3:dd:11:4a:49:d1:12:52:dc:a2:
                    86:76:ed:5a:db:2e:9e:ce:81:24:a0:f9:03:a0:c3:
                    23:1d:6c:f3:c4:56:d0:c7:62:55:ba:e8:df:26:02:
                    b9:dd:fc:69:80:ac:54:4f:bb:65:1e:56:98:63:c7:
                    16:6f:0c:fe:b3:cf:36:35:e0:10:3b:e3:10:33:0a:
                    ee:6e:52:18:18:ad:fd:90:32:e5:15:56:c3:b5:f1:
                    6a:f6:35:5a:c6:29:f9:6b:f8:fc:00:a4:b7:21:96:
                    70:9b:38:88:be:67:4e:16:96:fd:3f:82:58:1c:26:
                    0f:34:ae:97:76:36:94:1e:e4:d5:9b:92:69:c5:43:
                    b2:f7:76:34:a3:85:c8:be:e1:32:80:52:d7:81:ec:
                    51:91:fd:40:d1:d4:ba:09:5b:1b:5d:0f:a2:9b:97:
                    fb:af:0e:5e:7d:85:20:59:6f:cc:f1:f4:3a:6b:e6:
                    8f:39:b7:92:f9:f3:c7:3f:62:fb:b7:b9:2c:24:4d:
                    7d:69:ef:a1:ca:71:8e:ac:45:30:b8:45:d7:a1:9e:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2B:68:B9:6C:F9:5C:85:BF:07:08:FF:68:69:84:74:78:67:64:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa435caf-fd81-3e4e-b113-255e19966c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:d8:79:0a:8e:95:13:6c:7d:8a:99:dc:27:0a:73:ff:20:
         70:43:9f:45:31:df:ff:5c:5b:46:43:e4:40:e3:c5:2a:4f:62:
         a5:c7:98:a7:b4:8f:0d:ce:92:48:0f:88:0a:0f:62:e1:e4:3d:
         1c:c0:9a:f2:2b:12:4a:3a:b1:8e:67:55:5d:5a:75:86:75:7c:
         51:d9:8d:6d:c5:46:83:3e:e0:c8:c3:a2:fd:6d:35:5c:d2:c2:
         d3:e5:64:d5:ff:c5:85:1e:3d:fb:60:87:4c:89:4c:25:04:6b:
         e7:ec:c8:a7:c3:ee:f9:fe:b7:86:8c:65:0e:52:c1:2d:a9:83:
         3b:05:a2:3d:e4:fa:25:d7:d6:7d:72:34:1c:2f:e9:f1:8f:64:
         0a:da:79:32:da:38:e7:ca:2c:6b:c7:d8:e0:52:24:b5:3d:98:
         20:da:1a:e4:59:d7:b4:36:30:1c:5d:7a:e5:c5:1e:73:69:eb:
         cc:77:e8:33:06:e6:40:2a:d0:f0:45:43:c4:6c:3a:47:67:78:
         c2:8f:83:be:01:b5:4a:c3:15:7e:7a:a8:97:00:86:70:5f:4a:
         83:45:67:bf:5a:b8:fd:02:f6:33:7e:59:dd:a6:27:13:9c:82:
         bd:c7:52:59:e6:de:48:d2:dd:69:32:4a:c6:67:d7:79:a8:85:
         51:d4:95:56
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bag9DGnkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xOTA0MTIwNDAwMDBaFw0yNzA2MjkwNDAwMDBaMC8xLTArBgNVBAMTJGE5
MzhmNzFhLWNiMDktNDkxMC04NWZiLWQ4Yzc4ZGMwOThkMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM2hk5IOEQpnoY1Wm8Xp8Ptot/XeUjc4joedTueo
pH64RZpoXSxX9wuLYJOhrTcxySTT3RFKSdESUtyihnbtWtsuns6BJKD5A6DDIx1s
88RW0MdiVbro3yYCud38aYCsVE+7ZR5WmGPHFm8M/rPPNjXgEDvjEDMK7m5SGBit
/ZAy5RVWw7XxavY1WsYp+Wv4/ACktyGWcJs4iL5nThaW/T+CWBwmDzSul3Y2lB7k
1ZuSacVDsvd2NKOFyL7hMoBS14HsUZH9QNHUuglbG10PopuX+68OXn2FIFlvzPH0
Omvmjzm3kvnzxz9i+7e5LCRNfWnvocpxjqxFMLhF16Geaf0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBShK2i5bPlchb8HCP9oaYR0eGdkfzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2ZhNDM1Y2FmLWZkODEtM2U0
ZS1iMTEzLTI1NWUxOTk2NmMzNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxFLDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAtnvYeQqOlRNsfYqZ3CcKc/8gcEOfRTHf/1xbRkPkQOPFKk9ipceYp7SPDc6S
SA+ICg9i4eQ9HMCa8isSSjqxjmdVXVp1hnV8UdmNbcVGgz7gyMOi/W01XNLC0+Vk
1f/FhR49+2CHTIlMJQRr5+zIp8Pu+f63hoxlDlLBLamDOwWiPeT6JdfWfXI0HC/p
8Y9kCtp5Mto458osa8fY4FIktT2YINoa5FnXtDYwHF165cUec2nrzHfoMwbmQCrQ
8EVDxGw6R2d4wo+DvgG1SsMVfnqolwCGcF9Kg0Vnv1q4/QL2M35Z3aYnE5yCvcdS
WebeSNLdaTJKxmfXeaiFUdSVVg==
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:46 2024 by rpki-client on console-fra.rpki-client.org