Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1622f90b-52dd-32b1-905a-882ffa625ce2.roa
File:                     1622f90b-52dd-32b1-905a-882ffa625ce2.roa (raw, json)
Hash identifier:          B3qK/TVxFnDqjSx5PszOX6gjDo1s/g0lKrTqsjDI650=
Subject key identifier:   CE:72:E4:0B:09:5F:E0:8C:CB:F7:A6:43:B9:C0:4D:77:D0:F3:8C:51
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1649733DF71
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1622f90b-52dd-32b1-905a-882ffa625ce2.roa
Signing time:             Sat 14 Jul 2018 05:11:56 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        207.159.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:97:33:df:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=bc37e197-b23f-4bb4-982d-dc0886080036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:5a:c0:04:11:75:3b:85:9e:24:62:8a:d5:
                    8c:30:ab:3a:07:92:dc:76:73:12:81:2a:2c:0f:83:
                    cc:d1:c1:92:25:35:cb:0b:57:24:12:08:62:1f:9d:
                    81:13:2b:9a:3d:bf:f6:ba:64:71:be:8c:4c:57:7a:
                    df:d0:ae:75:b1:8e:50:cd:e9:f1:40:67:2a:69:9d:
                    80:ba:b8:52:40:6e:3d:bf:68:21:89:9b:ed:fe:cb:
                    bb:bd:4e:b4:55:af:d3:dd:37:70:de:eb:9a:2d:d4:
                    06:ec:22:5f:ad:87:95:d2:15:88:ac:8a:16:8b:78:
                    4d:70:2f:20:f4:d6:32:5d:fc:57:b8:c9:4e:7e:ca:
                    f3:61:2e:1f:82:b1:7b:4b:89:96:55:10:60:37:d5:
                    55:3f:90:3c:8f:d4:6e:24:a4:1c:79:a2:84:29:04:
                    d7:12:b8:18:a8:8a:3b:a0:4a:b6:65:f2:77:8f:a5:
                    15:51:65:35:cc:fa:31:2c:b7:8b:8c:7a:56:c5:8f:
                    9f:1c:a6:1a:01:57:d7:b5:f8:64:27:3d:1f:fc:f5:
                    4c:10:fd:f3:2b:5f:b4:2c:56:3a:73:5c:44:ba:45:
                    93:a0:89:e1:8f:ea:c1:8f:20:4c:9e:9d:42:3f:38:
                    e5:07:15:f1:d5:48:f2:7d:27:5b:a9:cd:b0:c5:85:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:72:E4:0B:09:5F:E0:8C:CB:F7:A6:43:B9:C0:4D:77:D0:F3:8C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1622f90b-52dd-32b1-905a-882ffa625ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.159.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:43:2e:59:50:84:52:75:8d:89:54:6c:6e:b8:d3:83:81:
         17:31:a1:d2:6b:dd:38:02:8c:cd:b1:c5:56:79:9f:cb:1b:1a:
         5b:57:68:d4:37:3c:90:66:7a:d0:a1:60:b4:07:5e:d7:f9:61:
         f9:c1:74:65:67:62:c4:a8:f5:26:eb:f3:29:da:30:76:c1:ec:
         b6:0a:d6:f6:8d:05:46:b0:c6:21:d8:c2:14:7e:9b:bc:7d:5d:
         48:38:39:72:42:fa:f8:8e:3c:68:74:d9:0c:ac:96:21:46:e6:
         58:34:f4:38:1d:fa:b0:da:2a:de:a4:56:36:19:5a:8e:9f:0a:
         d6:da:d1:a4:0f:e8:7e:13:26:68:a7:86:ff:a3:40:1b:74:e0:
         ff:6e:b1:f6:57:1b:e9:70:1e:38:4e:17:51:e1:2f:92:ee:e8:
         ad:b8:d9:b4:20:a2:a2:0b:c1:95:50:62:d2:7c:f0:b7:83:af:
         5d:3b:14:1f:00:67:d6:0d:47:b5:7b:a5:cc:e6:f1:d5:22:59:
         50:93:ff:92:6c:0a:d0:52:1a:95:f1:5a:9d:fe:75:1d:6e:72:
         9d:c5:88:96:e3:22:cd:aa:20:10:6b:59:80:f8:68:ef:41:81:
         e7:35:1d:5f:0d:c1:a3:ed:ca:91:50:30:a7:45:58:18:ce:46:
         cc:5c:c4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:58 2024 by rpki-client on console-fra.rpki-client.org