Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa
File:                     fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa (raw, json)
Hash identifier:          qGBbsDBe5I8VJTwv1/t2DDjefCE9AirRdtZjmjQHY1o=
Subject key identifier:   CF:EF:FD:5B:EF:7E:7F:45:AD:6C:38:9C:77:EA:05:D3:90:33:56:82
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858434DEAEDE786DF487820381C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa
Signing time:             Thu 21 Sep 2023 12:00:00 +0000
ROA not before:           Thu 21 Sep 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.143.0/24 maxlen: 24
                          172.69.193.0/24 maxlen: 24
                          172.69.194.0/24 maxlen: 24
                          172.69.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4d:ea:ed:e7:86:df:48:78:20:38:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 21 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=9b0b37f7-a433-4c62-a260-93df75b315ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:71:e8:2b:1b:6a:f2:76:4a:ac:20:d0:a1:
                    dd:07:52:b3:78:13:7b:00:70:cf:26:ae:1a:cb:90:
                    c9:d7:6c:b4:2e:9a:4b:45:2d:af:31:40:e7:5c:67:
                    0b:29:5f:c7:fb:8e:5b:6a:58:54:13:22:f3:34:46:
                    60:c8:79:01:ad:b1:33:76:db:12:73:03:07:9a:c5:
                    cf:2b:75:1e:a0:f0:b8:52:ff:a0:3d:d2:8f:59:06:
                    b7:30:a2:e5:cb:17:92:77:eb:fa:f8:42:3c:7b:58:
                    5d:d4:d2:0a:ff:e5:7a:68:33:e5:be:01:17:d7:ce:
                    61:bc:d7:e7:74:c7:df:04:db:62:89:11:16:1b:89:
                    63:8c:db:15:d7:53:67:90:33:f3:da:29:bf:ef:fc:
                    99:6a:53:34:df:26:52:3a:ef:86:54:7c:1e:08:17:
                    66:c6:e9:1c:23:0a:53:5c:cb:6b:24:be:e5:e7:0a:
                    de:b7:95:0a:59:75:e0:39:e1:9b:cd:9c:63:d4:8d:
                    30:03:c2:05:e8:f5:37:8c:32:a3:61:1a:2e:5f:c2:
                    c9:63:46:7e:9e:72:19:2c:b9:2d:58:0f:32:b9:72:
                    94:6d:f1:61:ff:70:fc:c3:9c:49:f3:70:c5:d3:1e:
                    fc:6b:32:51:98:e3:2e:e7:5c:6b:9f:1d:d0:40:58:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:FD:5B:EF:7E:7F:45:AD:6C:38:9C:77:EA:05:D3:90:33:56:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd8dfc70-826a-3de7-a9f0-0a6eb0fe430b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.143.0/24
                  172.69.193.0-172.69.195.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e1:7a:bb:72:e5:0b:64:9c:b5:77:f0:bd:27:db:34:e6:dc:
         0d:37:ad:e1:8e:55:63:ef:4b:2e:c4:9b:22:47:40:02:f6:20:
         fc:b4:c1:07:db:82:01:ee:8d:e5:10:f0:2d:cb:38:3c:2f:0a:
         2f:d8:a5:ae:f9:14:8a:05:9c:37:68:3b:d6:6f:fb:90:50:66:
         37:6d:22:bd:c6:9d:89:a8:bd:68:1a:94:77:61:46:41:78:fc:
         78:bd:43:90:71:2f:b7:67:76:00:36:b9:09:47:1e:38:03:56:
         df:30:14:74:76:6e:7d:c0:c2:06:45:74:49:17:c2:a1:7c:e9:
         a7:4b:0b:ba:82:16:b5:6c:5a:fc:3f:32:a4:64:b9:74:92:66:
         d2:ed:74:bb:33:13:65:76:20:47:3f:0f:24:e2:c6:86:5e:59:
         97:f7:d1:48:ac:5a:28:f0:15:5f:06:4a:60:29:6f:98:0b:7d:
         f7:a0:2a:fc:67:f7:2a:29:ca:2f:f8:f3:3a:ad:ac:ed:ea:01:
         0d:71:3f:7d:39:d1:9e:c6:5a:35:b1:2d:93:ae:07:1a:84:ee:
         2a:7c:18:7d:1e:56:ed:48:f1:69:b0:d5:8e:08:b6:b2:fe:62:
         f2:bf:6f:54:70:8a:bf:2d:77:50:c8:f6:b8:d7:e6:c7:ab:49:
         ff:0b:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:04 2024 by rpki-client on console-fra.rpki-client.org