Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9b03f5b8-e557-32de-9302-145157d73f4b.roa
File:                     9b03f5b8-e557-32de-9302-145157d73f4b.roa (raw, json)
Hash identifier:          wlg2c+3mSXzbLUn3V2Gfm6nWEfFB7jDW1L/fRkeHZeo=
Subject key identifier:   71:AE:75:18:53:9A:70:2D:FE:54:10:5E:3A:F8:60:23:E1:4F:DB:B0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16C4BD7F0F3
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9b03f5b8-e557-32de-9302-145157d73f4b.roa
Signing time:             Thu 01 Aug 2019 06:22:18 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     22512
IP address blocks:        198.58.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:4b:d7:f0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=1b5b2e51-2075-4032-b722-97924210b719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:f3:99:26:52:0f:1a:15:8d:f0:79:04:fe:
                    4e:b0:4c:e4:04:ce:60:e0:0b:ec:81:19:58:02:35:
                    96:8e:b7:2e:44:99:02:ed:a8:3e:33:a1:cd:19:86:
                    84:9f:50:50:c6:d3:64:98:42:01:a9:4d:19:05:fd:
                    89:34:57:5a:ed:67:7c:05:35:60:22:46:1b:42:69:
                    85:6e:9f:b1:bd:a7:b7:2b:61:d4:4a:0b:c6:19:ac:
                    00:69:a1:b5:14:f4:a7:28:ec:c5:0a:0f:2c:8e:c2:
                    f7:e1:2e:a1:80:06:23:27:d2:08:0a:2d:8d:94:88:
                    98:b0:aa:83:34:6b:bd:6f:0e:16:3e:e4:e4:e2:30:
                    dc:56:b0:ad:5a:b3:17:5f:9c:5e:a8:df:de:8c:5d:
                    23:04:97:18:6a:67:32:f2:ef:34:2d:7e:69:da:c5:
                    62:b5:63:35:b6:15:de:42:33:0a:62:c4:c7:8b:3e:
                    19:1e:f3:47:23:9a:55:65:a9:f2:3e:35:90:39:e4:
                    c1:44:83:8a:da:a5:2d:5c:8c:74:7c:55:dd:3d:c2:
                    80:8a:d4:b2:bc:b4:9b:71:84:39:b4:68:8f:86:08:
                    74:a1:fd:fe:14:09:7e:b6:8b:a0:b5:cd:9d:7b:88:
                    d8:61:68:e4:4d:08:9f:e8:35:95:b5:f8:f4:c0:19:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:75:18:53:9A:70:2D:FE:54:10:5E:3A:F8:60:23:E1:4F:DB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9b03f5b8-e557-32de-9302-145157d73f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:5b:ef:db:01:42:21:4a:36:0b:ca:4c:72:da:57:a7:49:
         9e:21:28:6a:7b:34:df:4f:e2:2f:83:bc:c5:75:71:04:ac:f6:
         c4:e3:3f:af:91:c5:bd:33:a6:db:8b:0d:d5:8f:5b:5d:7b:58:
         59:dc:c1:a2:ec:f2:ac:4a:8a:17:61:ac:b1:0b:48:b2:4b:a7:
         a0:fe:1a:b0:75:c5:ed:4e:a2:eb:c5:ff:10:4d:4b:c8:4b:a5:
         d1:b0:97:fe:5a:e9:8d:d4:3c:3e:ca:3e:9a:9f:78:82:69:2b:
         a8:ca:3b:2a:5e:a3:10:6f:09:17:4d:33:5a:ec:37:00:5c:2e:
         09:d5:68:7e:81:ce:60:9d:9c:61:f1:97:a2:f4:e8:24:da:9e:
         58:16:67:ab:93:fd:fa:12:b3:5b:1f:d4:9e:21:31:d2:65:de:
         9e:23:84:4f:af:a4:da:e1:07:2d:98:d3:fb:68:a5:5f:be:f4:
         83:36:47:7a:d9:fb:1b:2f:7e:9d:52:d8:81:d6:cb:11:32:7d:
         55:af:52:fa:f6:60:ba:38:fc:e3:f2:11:1a:f3:12:2f:9d:4b:
         60:67:63:46:2d:8d:95:81:f3:7a:72:7c:66:e3:2b:80:fb:5a:
         81:86:a0:22:d2:b6:82:d2:68:63:08:d9:9e:7b:b1:b3:15:56:
         16:89:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:34:32 2024 by rpki-client on console-ams.rpki-client.org