Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa
File:                     fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa (raw, json)
Hash identifier:          VFTv+CRKo0a8r/5dTWu+aR9NpO7gs76vK42M1bjtQeE=
Subject key identifier:   50:33:24:6A:43:39:0A:A7:65:14:38:B9:91:A1:64:46:D2:D6:AE:8C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583BFBCB00B9C6D5FB95A9CC4D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 05:00:00 +0000
ROA not after:            Mon 20 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.70.216.0/24 maxlen: 24
                          172.70.217.0/24 maxlen: 24
                          172.70.218.0/24 maxlen: 24
                          172.70.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fb:cb:00:b9:c6:d5:fb:95:a9:cc:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 19 05:00:00 2021 GMT
            Not After : Sep 20 04:00:00 2027 GMT
        Subject: CN=fec67803-946f-4b16-a48f-c70514521274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:2b:66:10:f3:7a:f6:51:88:47:85:e2:e3:
                    ee:5f:0a:b4:05:62:ce:53:c8:22:10:4a:f6:8d:92:
                    32:05:d0:2a:61:13:8c:d3:7b:d8:91:db:7f:e7:8d:
                    a6:19:18:60:4e:69:01:7b:e7:c9:1f:46:d8:c5:9b:
                    39:37:3e:7e:95:8e:da:90:09:9e:fa:27:91:ac:19:
                    6b:a4:62:c3:85:ef:45:d2:9d:b5:14:61:c2:4f:f2:
                    2d:87:94:93:05:3f:42:da:cd:88:9c:91:ac:19:b5:
                    d7:de:97:64:86:90:53:d2:cc:5c:fc:b2:d5:01:cf:
                    c2:32:c0:d5:45:59:0d:d8:a2:08:22:0c:3f:4b:1e:
                    2e:41:c3:2d:c6:3f:90:04:67:0a:bd:b6:2c:32:f4:
                    48:47:40:49:10:fb:cc:96:8b:f7:d8:65:89:9f:ce:
                    37:cc:f9:e3:64:a9:bd:b6:f5:88:2e:78:8f:46:65:
                    5e:15:79:7b:5c:3b:c6:77:40:78:d9:31:f1:7c:31:
                    0b:4b:81:2f:d0:13:8c:20:a8:8e:ca:43:6b:af:84:
                    6d:7b:b1:bd:c1:ec:cb:c7:bd:d8:aa:c9:f5:d1:4f:
                    ba:42:c3:4c:89:be:2c:39:1f:65:ec:44:66:27:e2:
                    81:9d:23:7e:b2:cf:04:e9:fb:95:0a:1f:3d:05:66:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:33:24:6A:43:39:0A:A7:65:14:38:B9:91:A1:64:46:D2:D6:AE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:56:bf:ad:e3:9e:93:4b:e6:ce:ee:23:aa:aa:a3:58:73:b7:
         31:da:29:39:25:e9:12:09:43:c3:e8:90:c8:22:ea:7a:3e:f6:
         a1:c7:68:93:d8:e3:8d:21:77:ef:5d:75:d1:39:c5:9a:68:f1:
         aa:4f:63:71:7d:8e:88:29:75:d9:e9:e6:4a:7c:c4:87:85:5c:
         0d:2f:5f:99:8c:87:3c:b8:04:d6:1c:03:b9:76:8e:b5:30:81:
         b4:90:aa:e2:17:00:03:6d:81:09:61:24:4d:6e:67:fe:68:da:
         57:7f:10:82:70:03:67:77:0f:b3:9d:fc:ea:9f:af:fd:b9:69:
         3a:ed:20:2c:db:c3:65:40:f7:b9:6e:7f:9f:08:68:76:70:a0:
         8e:9f:54:ce:02:b3:39:d4:23:4e:74:74:af:bc:b7:0f:d0:e7:
         e5:d4:64:6e:70:5a:2e:b9:d9:c7:2d:c0:91:43:0c:93:10:d9:
         20:a4:ce:68:6a:26:7e:a8:3b:ef:d1:28:dd:4d:0f:37:fc:2e:
         4c:58:4f:eb:d3:9a:bb:05:25:6c:4a:4c:4b:b1:5e:00:b2:76:
         38:2b:f1:94:d6:7b:e0:5d:93:64:d0:b0:49:65:0c:97:3a:53:
         03:63:9b:4e:80:bf:55:3a:9b:fd:35:70:71:89:e4:91:80:bb:
         f4:1b:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:16 2024 by rpki-client on console-ams.rpki-client.org