Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd68a172-4044-3c66-b362-22407eec5562.roa
File:                     fd68a172-4044-3c66-b362-22407eec5562.roa (raw, json)
Hash identifier:          q3d8U9FBKlGOp8FbCNQ/QlMHDVr5mPqABUzv7rHeKzk=
Subject key identifier:   3B:AC:C7:5A:DE:A0:E2:00:51:5E:76:D0:43:92:D8:4B:36:79:4C:10
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC170A2402E49
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd68a172-4044-3c66-b362-22407eec5562.roa
Signing time:             Tue 03 Mar 2020 21:14:40 +0000
ROA not before:           Tue 03 Mar 2020 05:00:00 +0000
ROA not after:            Sat 20 May 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:a2:40:2e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 05:00:00 2020 GMT
            Not After : May 20 04:00:00 2028 GMT
        Subject: CN=ed1ae820-5b52-4a28-817b-43a559e9d98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:97:8a:3c:80:15:5c:3b:7a:80:23:07:43:
                    21:e5:ef:f3:05:08:91:19:9f:75:2e:1c:96:b6:17:
                    c8:30:f0:5c:d0:e6:3d:b3:c4:51:76:b1:e5:eb:da:
                    ff:43:6e:97:54:05:06:e6:9d:da:f0:3a:7a:49:82:
                    eb:41:75:15:2b:93:d6:6c:a0:05:bb:b4:b6:b9:d8:
                    79:88:f6:a7:cb:45:33:50:c2:c1:df:fe:7e:6c:9c:
                    b7:f6:3c:f9:48:aa:6e:f2:9d:b8:7b:ff:5b:a5:59:
                    f3:f8:f5:84:af:89:37:3b:56:15:3d:ce:31:ce:2e:
                    17:99:64:ba:9d:b7:00:0a:27:46:e8:17:b3:a3:77:
                    a9:06:77:e0:c4:34:c3:66:5e:3a:50:20:1c:bc:69:
                    67:4d:6b:4f:22:7c:90:3e:ab:3f:49:6b:68:80:8e:
                    73:4b:25:ef:e9:0d:51:36:32:69:10:8e:ea:da:2b:
                    2d:32:0c:1c:d8:45:8c:bf:a9:bc:df:6e:37:d7:84:
                    7b:71:02:4b:31:88:6e:b0:65:24:ef:0a:8a:1a:fe:
                    10:d6:01:8e:b9:61:79:89:cd:47:f9:a1:c1:a9:b4:
                    b1:f8:e5:a8:82:94:88:c6:3e:cb:ac:1c:a1:a6:ce:
                    20:53:73:2a:e1:2c:50:11:02:ea:21:76:b8:87:36:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:C7:5A:DE:A0:E2:00:51:5E:76:D0:43:92:D8:4B:36:79:4C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd68a172-4044-3c66-b362-22407eec5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:83:eb:d1:84:c3:ba:e4:40:ed:2c:16:df:85:6e:cb:3b:9f:
         59:a5:30:d4:bf:92:45:b4:02:ed:d8:dc:a5:29:15:c6:26:48:
         01:fa:42:6d:4d:24:64:78:04:17:84:78:5f:91:0d:0f:00:5f:
         12:94:3f:41:e9:c7:85:1f:9e:e6:35:41:31:22:18:c4:ef:ea:
         6f:e4:5a:08:2d:d0:63:be:65:ca:6f:2f:ac:02:7a:50:4b:20:
         ba:31:d4:f5:a0:36:8d:17:e5:82:07:66:0a:6d:40:99:94:66:
         d7:ef:44:1b:91:1c:44:5f:01:66:18:79:88:5b:48:42:7c:fe:
         f2:2a:77:34:62:fd:5a:cd:df:37:8e:fd:33:16:89:0c:72:13:
         81:ef:9f:fb:dd:96:99:04:0c:ed:64:ec:a7:5b:63:17:1e:07:
         9f:51:7b:4c:bf:9b:fe:c9:4d:f9:22:86:37:e9:e7:2a:4c:4d:
         c9:08:51:14:9b:26:17:14:7f:d6:c2:da:0c:77:a5:24:90:99:
         8b:66:8a:3e:db:51:cd:c2:cb:8d:67:96:15:84:f9:9b:fa:18:
         f3:05:8f:50:09:c0:88:a9:27:d2:27:8e:33:4c:23:fc:34:61:
         c8:20:3c:e0:5e:cc:b5:66:87:ae:41:03:61:9e:2b:e8:29:54:
         8f:29:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:46 2024 by rpki-client on console-fra.rpki-client.org