Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/123a3ab2-22eb-3e65-bda1-08ee6f6a8818.roa
File:                     123a3ab2-22eb-3e65-bda1-08ee6f6a8818.roa (raw, json)
Hash identifier:          HHgt8axW2/ncq049EfgfnBBVdbXjh9kdat1TQdaWPlg=
Subject key identifier:   55:78:25:F1:01:80:85:C8:17:5E:C9:35:32:B3:AD:47:FB:2F:A6:54
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166425C9C9C
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/123a3ab2-22eb-3e65-bda1-08ee6f6a8818.roa
Signing time:             Fri 05 Oct 2018 03:54:17 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        131.103.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:5c:9c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=1fb3369e-88b9-46b6-8984-0fe4a14dfa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:16:2a:17:92:86:8d:5e:bb:10:a3:09:79:
                    6d:5b:d3:d9:9d:8f:2c:29:0a:7b:3a:ff:1b:f6:fd:
                    a0:fb:48:2e:8b:6e:46:0c:a4:03:3e:fd:68:0c:d0:
                    05:88:b2:54:23:17:e8:29:a9:79:c6:7c:5e:a8:6d:
                    cf:94:7e:7a:ad:ba:d9:f3:ba:25:b7:49:0f:31:77:
                    02:64:ee:3b:89:e1:74:90:1e:64:80:bd:a8:3e:fb:
                    1c:25:01:e6:af:e4:db:71:b3:0f:03:b0:cb:86:bd:
                    a9:a3:ec:49:15:ee:c0:2a:ff:db:e3:a5:bf:ff:0f:
                    a4:a4:4a:c7:f8:ee:55:73:97:75:e7:6e:6d:a0:c0:
                    6d:0f:e7:f1:93:84:25:df:be:17:cf:2a:6b:cc:76:
                    c6:34:ca:d9:10:85:ac:82:aa:51:82:a6:af:cd:da:
                    a6:3e:c0:8e:84:ad:d6:30:be:1a:ca:95:89:10:10:
                    21:bf:07:a5:4f:01:1d:a7:4e:1b:9f:15:42:b1:99:
                    e6:d7:d5:ae:1a:33:34:aa:60:1a:81:99:25:f2:0d:
                    47:a9:f3:8a:0e:4a:da:4c:33:ab:a9:36:da:59:6f:
                    f8:cf:12:57:01:54:64:67:ba:d8:33:75:39:15:01:
                    fe:a2:e2:18:55:d2:ee:d4:74:16:76:bd:1c:86:77:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:78:25:F1:01:80:85:C8:17:5E:C9:35:32:B3:AD:47:FB:2F:A6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/123a3ab2-22eb-3e65-bda1-08ee6f6a8818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.103.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e0:84:bf:e2:54:79:21:28:b8:90:8f:bd:95:ae:ec:6c:06:
         e2:03:8a:47:14:fa:59:92:e4:7e:ae:19:38:69:1c:70:44:f7:
         ef:63:78:9c:bc:c0:0f:52:3a:5f:e7:75:b4:93:aa:ab:bd:01:
         c0:96:d5:65:95:6e:02:2b:74:51:8b:1a:15:95:a7:98:85:9c:
         d8:29:0a:29:77:39:36:c8:fd:e6:be:e8:d6:ba:50:54:71:55:
         0c:6e:52:3f:73:77:42:ad:20:98:23:47:12:a3:3b:35:b0:4c:
         2f:fb:08:cd:e6:50:99:d0:db:2e:d2:f1:2d:01:d3:cc:6c:2e:
         71:51:4d:7b:24:54:27:0c:c7:f6:5d:f5:6e:0d:6c:5f:a9:9e:
         45:9b:fb:e6:c4:d8:02:b7:45:63:1c:7a:f8:40:3a:9f:9a:08:
         8f:e0:c9:a5:1d:25:ab:0b:ef:43:1a:fd:0c:49:bd:64:6d:be:
         f9:c2:90:a2:f1:a6:ab:1e:8b:b2:ec:cd:4c:6d:ba:6e:ee:69:
         f1:1e:30:7b:1c:9f:87:cc:56:64:3f:e4:70:82:11:fd:c7:a3:
         a9:10:18:4a:d7:b0:ff:42:7b:51:eb:f1:1b:85:f3:9d:3f:d5:
         23:60:2c:65:9e:43:8c:5c:61:6d:9e:74:69:fe:33:07:07:76:
         d8:6c:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:58 2024 by rpki-client on console-fra.rpki-client.org