Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/475016aa-3666-3301-a961-13c5f3d86be5.roa
File:                     475016aa-3666-3301-a961-13c5f3d86be5.roa (raw, json)
Hash identifier:          UMKM31rgnPuVukLJ7tPc2DnpGvmHWvXFdmAe310UbQo=
Subject key identifier:   55:4B:2C:AC:9C:DB:85:6A:5F:88:AF:B2:DF:F8:8B:30:95:FA:63:5A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F88599733
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/475016aa-3666-3301-a961-13c5f3d86be5.roa
Signing time:             Thu 09 Jan 2020 03:29:30 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     15562
IP address blocks:        165.254.255.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:88:59:97:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=e12ba555-2ed8-4ab9-bb34-0575afba4f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:f8:c0:21:3b:8d:28:b7:ba:2a:2a:c4:82:
                    76:29:71:ba:53:d9:f9:ff:0d:7d:2d:b5:46:fc:fe:
                    7b:6f:98:b3:db:04:7f:88:80:80:e3:62:2a:ec:3b:
                    70:0e:bc:1e:d6:08:e0:56:be:5d:1e:35:43:f4:65:
                    55:69:b2:54:14:fd:90:3d:d7:ce:73:8a:e5:b8:00:
                    3c:08:65:00:86:33:8a:30:90:ad:cd:7f:33:f0:b1:
                    f4:df:24:d3:ca:85:fa:4f:fa:84:4f:48:f5:0d:94:
                    6c:a9:97:8e:e6:d8:91:9d:e1:82:e3:a6:55:4d:99:
                    43:f3:5c:e6:f4:a4:46:50:37:73:28:45:2c:e1:9b:
                    4a:f6:b3:3d:93:af:bf:97:d9:a9:ad:7d:b0:39:75:
                    6e:2b:5c:3a:34:60:34:94:76:57:9b:90:65:c5:be:
                    42:f8:22:1b:b7:e8:89:b1:f6:35:20:2b:a8:fa:3a:
                    6e:8f:83:82:86:70:0a:b9:39:d3:2e:c8:ce:c0:cb:
                    1b:85:46:83:2d:46:54:10:8c:e3:47:e4:cc:47:2a:
                    18:b5:34:22:42:2e:94:46:1e:01:a4:43:ec:d3:82:
                    ca:fc:cf:df:8f:85:99:ad:4b:6a:9b:b3:c1:c3:1d:
                    9b:5f:79:ab:c9:07:5c:bd:6d:34:b4:c6:2a:04:9e:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4B:2C:AC:9C:DB:85:6A:5F:88:AF:B2:DF:F8:8B:30:95:FA:63:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/475016aa-3666-3301-a961-13c5f3d86be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:65:c2:9c:24:ec:00:15:0c:64:7f:bc:40:a2:2e:d0:1c:c9:
         ff:ce:b1:2b:af:7f:3b:97:6a:ce:fb:44:49:a5:1a:15:58:84:
         61:37:78:d1:a6:f5:2c:79:4f:34:1e:95:08:80:25:f5:de:ff:
         53:f5:4b:89:86:b9:9c:1e:4a:d8:f3:3a:fb:ab:06:13:7a:62:
         0f:63:f4:25:da:f0:ae:e8:58:c2:a0:f7:13:a0:e8:41:86:f5:
         b0:0e:3f:6d:2e:0b:91:32:ce:e4:a2:54:be:e7:3d:13:84:73:
         b3:60:09:81:2d:19:80:c0:cc:cb:b9:bc:d2:fb:ec:45:6f:44:
         eb:f5:35:6d:5e:b1:6d:19:66:15:e9:e0:2e:04:06:f7:4c:5c:
         bb:ca:e5:ba:5e:af:96:fe:c7:55:5b:3a:bc:55:c0:cf:b8:d8:
         ec:4b:f9:c9:d5:b6:cc:73:f3:51:05:b8:0b:1c:fc:20:29:3f:
         7d:25:8c:01:01:d2:68:57:b2:73:c5:32:7b:97:7a:f3:91:5c:
         b8:8c:99:17:93:a3:1c:1f:7d:04:db:8a:85:85:8b:ac:9b:04:
         5f:b8:d9:c9:34:81:d2:29:b5:8c:7d:83:e8:d6:76:fe:46:0a:
         6e:4a:88:38:39:2c:6f:04:c2:db:12:9a:f3:1d:75:17:20:54:
         8f:da:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:02:41 2024 by rpki-client on console-fra.rpki-client.org