Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37f6277a-fa09-3f67-9423-5e38803dea58.roa
File:                     37f6277a-fa09-3f67-9423-5e38803dea58.roa (raw, json)
Hash identifier:          KYwy5DAxlJR2G0l0x51j5Y4+8rpeXEMdk3g2u5RUWys=
Subject key identifier:   83:93:EF:20:14:B3:B1:28:D6:FD:93:92:1A:79:D1:B5:0B:C1:E7:93
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16497178CE6
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37f6277a-fa09-3f67-9423-5e38803dea58.roa
Signing time:             Sat 14 Jul 2018 04:41:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        198.252.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:97:17:8c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=87ad8c03-f73a-4f62-a4c9-0a49d4863f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:b4:74:1c:18:ca:ca:9b:f9:6a:9a:96:27:
                    6a:f5:07:22:18:9c:14:e6:84:6c:98:c6:63:d7:93:
                    27:d4:d8:d6:d2:d9:17:35:a4:f9:b7:fe:23:87:83:
                    a1:37:36:77:af:7e:93:9e:bd:3d:90:a6:ea:75:61:
                    f2:24:44:80:41:8a:6c:53:ce:e4:f9:6a:44:15:01:
                    ba:aa:12:b9:cd:94:58:69:6f:88:be:c8:dd:ae:ae:
                    e8:50:71:0c:ee:88:0f:27:9a:70:71:30:c0:4d:04:
                    6e:a6:55:4b:eb:f6:4d:c0:ea:8d:12:f5:35:3c:50:
                    30:d0:37:32:87:82:f1:f3:cd:1f:89:89:6a:51:6a:
                    b9:36:f2:cf:fa:04:f2:34:98:df:2d:ad:b5:f3:be:
                    61:60:a0:ed:5a:92:47:ee:fc:45:de:27:ca:67:f9:
                    41:02:e4:13:19:b6:13:88:d4:6c:6d:d6:85:f5:01:
                    c9:e3:00:b5:47:81:30:a4:ab:c8:7c:59:0e:c8:b2:
                    fd:5a:73:6c:c7:17:0f:2a:dd:27:87:39:d0:33:bf:
                    fd:b1:43:27:9e:e1:ee:34:29:4e:9e:41:46:28:d9:
                    38:8e:8e:b3:f5:bf:77:0d:91:9b:5e:52:3d:1f:9a:
                    cf:6d:2d:45:33:87:21:15:1a:62:fa:e9:12:24:05:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:93:EF:20:14:B3:B1:28:D6:FD:93:92:1A:79:D1:B5:0B:C1:E7:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37f6277a-fa09-3f67-9423-5e38803dea58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:10:76:97:79:57:aa:14:4f:b7:5d:ec:28:3d:e3:3e:65:86:
         55:2c:bd:c3:02:6f:55:d0:27:f6:24:5d:a8:e1:18:c0:81:af:
         04:d8:cc:fb:d7:f8:78:8d:98:2e:31:75:6c:01:2a:59:91:5a:
         9c:d0:a4:f9:a6:f1:44:4e:cb:51:9f:54:18:3f:3f:f1:37:ee:
         f6:2d:53:1a:1c:96:c0:e0:96:64:94:0a:6f:6c:0a:80:58:f6:
         cc:f7:dd:63:e7:0b:de:61:44:29:03:08:84:50:34:e8:47:30:
         4e:16:7b:df:9e:7f:b2:8e:c4:41:77:5b:5c:8a:64:6e:60:09:
         5c:79:ef:34:ac:34:e7:8f:b6:01:04:c5:f0:b1:07:f3:53:64:
         2a:7a:a8:e7:74:4c:23:62:55:99:8c:a7:c9:1f:ee:26:8b:74:
         09:d3:92:dc:9f:5e:22:22:4a:64:6b:c1:3f:7e:7b:ef:3a:66:
         cb:bb:86:72:65:df:d9:c4:f0:51:5b:6a:6f:92:d5:76:30:bd:
         36:9c:17:bd:bf:3a:5c:46:2e:31:fa:a8:2f:6e:a8:4d:ac:75:
         e6:72:0a:a3:3d:8f:b3:98:e1:41:83:aa:f7:f1:2a:0d:63:ab:
         26:80:8b:29:80:ab:aa:84:d0:d4:6f:76:6f:2d:8d:12:ed:61:
         32:ad:59:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:10 2024 by rpki-client on console-ams.rpki-client.org