Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd798d35-4fb2-3d5f-bdba-0dd4312ebb49.roa
File:                     fd798d35-4fb2-3d5f-bdba-0dd4312ebb49.roa (raw, json)
Hash identifier:          hgFy5718uA7nZWdYkxVhluiIL3uHwTs2HHitBBiWRlQ=
Subject key identifier:   27:43:FE:AB:B8:06:E1:76:9F:64:45:FD:60:E2:4B:9D:78:A9:EE:6F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AE6320CCF5B755BFB0B6C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd798d35-4fb2-3d5f-bdba-0dd4312ebb49.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:e6:32:0c:cf:5b:75:5b:fb:0b:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=f734ff83-0d93-4889-ad8c-0bbabad3735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b8:e3:42:ac:d5:6b:09:cf:60:e1:90:69:97:
                    b5:28:08:22:fb:8f:40:57:a4:02:ad:ba:82:8e:e8:
                    8c:90:ab:74:21:35:c8:ad:a7:09:26:ff:79:09:82:
                    24:03:f6:9e:7d:6e:0d:55:7e:cd:7a:6b:0d:55:02:
                    af:75:2d:0e:55:c2:e7:18:03:d3:a7:f3:9e:be:14:
                    d0:68:d8:d6:16:6e:8f:09:ba:e5:5a:4f:2b:1a:ba:
                    22:a0:61:f3:45:32:94:74:88:00:7d:4f:d6:4a:97:
                    af:ae:28:00:25:b7:db:aa:c3:96:0f:50:c3:d4:5d:
                    3d:8c:08:bb:ed:bc:33:93:99:36:51:fa:bd:7e:c9:
                    fe:42:be:de:29:11:c8:0d:b4:1a:e8:82:d9:5d:40:
                    80:19:0f:2d:53:31:73:8d:ed:78:fb:51:77:4c:84:
                    a0:17:7e:99:03:0b:b4:3e:b6:c7:b6:54:2b:2f:b5:
                    a9:4f:e9:32:61:20:2c:4b:32:02:90:00:f6:d1:1e:
                    9e:ec:c9:56:1f:f7:2d:2c:cb:64:42:84:7e:d4:52:
                    f3:a3:ab:84:12:3d:ee:e5:95:c1:c9:59:b1:96:91:
                    94:1d:b3:5f:74:15:54:6c:bc:60:60:71:d0:57:65:
                    14:e1:d7:9d:ca:e5:e1:38:2b:8a:97:ed:6e:b5:87:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:FE:AB:B8:06:E1:76:9F:64:45:FD:60:E2:4B:9D:78:A9:EE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd798d35-4fb2-3d5f-bdba-0dd4312ebb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:44:48:61:59:a5:c3:28:79:f1:74:ec:0e:59:2f:9a:d4:4b:
         d1:ea:fa:67:5a:10:33:ec:57:07:9f:f2:cf:58:b2:5c:c5:cb:
         34:3f:24:15:b6:22:9e:1e:f5:bc:1a:d6:c3:8c:ff:ee:55:bc:
         3d:1b:18:08:b0:58:c8:b5:38:5d:b1:f3:d8:a2:9f:bd:07:32:
         0c:c2:ae:31:ca:52:b4:03:27:ec:75:7f:b0:cc:9f:c9:a2:70:
         e9:02:3b:07:27:9f:21:e0:3e:40:af:31:a7:c6:ab:5d:cd:f3:
         e7:a5:59:9d:b7:c4:1d:4a:f0:5a:33:4f:55:37:e0:b8:3e:e7:
         22:7d:1f:90:28:d2:65:7a:01:6b:e7:5f:1d:4d:ff:9e:ea:4d:
         21:94:6a:a8:56:17:b3:a7:33:1b:31:85:c3:1b:84:f6:70:91:
         aa:14:ff:e4:d3:8e:22:b2:98:5c:fe:45:41:1e:51:ee:7b:d6:
         28:c7:bd:03:2c:20:fd:80:08:15:c1:ac:d1:73:6b:2a:8f:78:
         7a:55:59:0a:ad:5a:61:b2:25:82:4e:f0:d9:33:96:ff:45:ba:
         f0:a7:f0:8d:87:19:42:c4:de:5d:41:87:90:26:d2:7c:bc:8c:
         ea:92:08:fd:43:ba:92:ed:0c:e0:d4:3e:d5:99:a7:87:b2:77:
         0c:b5:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:17 2024 by rpki-client on console-ams.rpki-client.org