Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2bf5ff37-18ff-3653-96e5-c6194cec608e.roa
File:                     2bf5ff37-18ff-3653-96e5-c6194cec608e.roa (raw, json)
Hash identifier:          +hAA+SJ/RghKRGdk+JVU9hF74DHHar5wwDHAoIvEJR4=
Subject key identifier:   C4:1D:E3:E4:C3:B6:03:CD:FE:7C:B6:F7:D2:9E:68:8B:EE:D1:C4:48
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FA16E6FF0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2bf5ff37-18ff-3653-96e5-c6194cec608e.roa
Signing time:             Tue 14 Jan 2020 00:22:47 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        198.84.16.0/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:a1:6e:6f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=622b7d05-6acc-4130-ad5e-11fa3b9be654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:36:7a:25:c8:6e:e9:5e:0f:7c:7c:a2:e0:
                    d3:b2:b4:7c:3e:aa:df:cb:66:c9:0c:42:34:7a:45:
                    49:5e:a2:14:b2:e5:20:2e:61:53:38:cf:5c:31:99:
                    13:43:96:e0:c3:d7:b8:6f:86:43:1a:b3:a7:4c:13:
                    0f:22:45:ee:9a:ca:40:38:25:a4:73:bd:c9:a4:3b:
                    8b:b3:28:83:a3:de:6f:da:c2:ab:49:ae:36:aa:f7:
                    85:12:f0:27:06:24:4d:ba:a8:d1:b0:00:e7:46:17:
                    5b:70:5c:e6:87:26:7c:6b:da:4f:89:6e:94:e6:4c:
                    56:51:ad:75:96:29:9f:88:f6:2a:07:db:f7:17:f1:
                    ef:d7:8a:fa:bf:4d:57:4f:6d:88:3d:08:88:62:6e:
                    a2:55:66:d4:62:3a:bd:6d:5d:62:52:e6:12:67:32:
                    62:5f:89:58:a5:d4:85:aa:3e:94:80:74:5f:67:81:
                    66:4a:f5:af:a5:92:c0:57:bb:8b:c3:82:54:69:95:
                    8b:0c:fd:30:00:e4:98:72:63:1e:85:67:04:3c:d9:
                    27:26:a1:05:46:0c:86:a4:4f:27:27:69:00:ee:aa:
                    b8:98:89:ff:66:7c:cd:19:79:65:ef:e8:c6:e0:94:
                    d8:59:14:88:f1:2f:21:d4:15:00:da:24:29:73:fd:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1D:E3:E4:C3:B6:03:CD:FE:7C:B6:F7:D2:9E:68:8B:EE:D1:C4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2bf5ff37-18ff-3653-96e5-c6194cec608e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.84.16.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:34:6d:d2:1c:7b:23:19:e3:4f:3c:ab:00:1b:15:a6:e0:49:
         a2:b8:df:f8:b5:29:00:8b:d5:e6:2d:d3:ae:d1:b6:01:d7:af:
         94:db:af:cb:56:bb:36:9c:81:5a:27:a4:77:0f:71:64:c8:8f:
         33:e2:f7:2d:f7:aa:8d:68:17:6a:af:e2:44:5f:85:5e:71:6e:
         f4:6f:ac:cb:44:e3:9a:37:22:81:cd:e1:98:0e:4c:22:6b:d9:
         c0:77:db:3e:5a:44:ed:93:38:08:e3:5e:bb:e1:5c:3d:73:6c:
         03:5a:f7:1a:77:f9:3f:ae:cb:5f:59:3b:12:9c:98:9d:13:a4:
         30:b9:1d:04:02:4a:df:3a:f5:4c:a6:04:80:cd:97:1e:86:90:
         54:9a:27:6f:26:f2:8c:e4:d6:c6:f7:13:54:d8:43:1d:8d:dd:
         13:b9:1b:24:aa:5f:45:70:0c:16:72:d2:d7:d7:54:e9:c6:3e:
         2d:76:06:26:d5:40:fd:ce:6b:a4:b4:7a:d2:0c:bc:e4:17:16:
         3c:98:62:c8:c1:fa:8f:90:c5:c1:d5:27:c8:bb:4e:24:9a:3c:
         d5:0d:be:8d:1f:85:7c:8e:38:f6:6e:c4:32:74:1b:4e:70:5e:
         e2:a1:1c:28:56:de:a6:96:5e:7e:e7:ed:18:5e:d8:03:04:02:
         32:e6:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:09 2024 by rpki-client on console-ams.rpki-client.org