Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54da046d-294a-3367-981a-ea2621347809.roa
File:                     54da046d-294a-3367-981a-ea2621347809.roa (raw, json)
Hash identifier:          NrTvdtm9T/hWrPQpuG5NiH18SzMRDckPckf3htuWV34=
Subject key identifier:   53:D2:F4:41:74:E6:F6:BC:68:19:1F:2F:6D:6A:AB:D9:12:FB:E2:5E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642CAFEB2
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54da046d-294a-3367-981a-ea2621347809.roa
Signing time:             Fri 05 Oct 2018 05:54:51 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        157.238.195.160/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:ca:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=49e6e403-14bc-4925-b8d6-84dead836f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:6d:99:fd:45:a4:32:f1:8f:c6:38:91:b2:
                    2c:55:56:74:b3:a9:8d:a7:4d:53:c1:37:af:23:ae:
                    e4:fc:28:23:34:b7:4c:93:26:ee:04:b7:26:4d:17:
                    12:5a:dc:a8:c6:c4:34:21:e3:1a:6d:e9:e2:93:f8:
                    ff:84:ae:fb:60:b8:02:f0:d2:d9:ca:40:b9:fd:ce:
                    25:9d:7b:d9:93:41:7b:07:16:d9:7e:5f:72:04:4d:
                    4e:59:8f:a6:ac:69:4f:95:a8:3e:75:dc:e2:ca:40:
                    e0:e1:24:98:94:b0:c0:2b:92:e8:49:9d:0f:d9:89:
                    b4:d8:1c:05:81:65:b4:7d:7a:f4:43:e3:b4:38:54:
                    f4:78:0b:9c:0f:66:a9:fb:5e:8b:cd:2e:0d:5a:09:
                    18:be:a0:20:40:17:8d:92:fe:04:be:14:99:ec:cc:
                    f5:34:ce:1c:4e:6f:fc:53:da:50:f3:80:46:ca:7e:
                    5b:ff:dc:0c:95:ca:5e:b7:63:67:ca:8f:71:73:44:
                    1a:21:38:d6:85:48:df:c4:d2:b6:eb:f7:f4:de:9b:
                    41:0f:43:27:2b:11:8e:fe:e5:38:b5:97:e4:66:59:
                    f9:77:76:5a:ae:38:7a:e1:0b:60:42:a6:92:dc:a3:
                    d2:fe:f0:90:e7:03:2c:b8:62:27:fe:ca:7c:f5:97:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:F4:41:74:E6:F6:BC:68:19:1F:2F:6D:6A:AB:D9:12:FB:E2:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/54da046d-294a-3367-981a-ea2621347809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.238.195.160/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:da:3f:51:9b:6a:9f:2f:84:8c:d9:bf:a2:a9:28:d9:68:
         bd:56:38:45:e1:22:f2:ec:ce:ad:22:e9:7e:69:46:7b:c5:59:
         8c:d6:de:8f:07:56:ce:f7:50:1b:e8:71:ca:f5:7a:99:8f:80:
         30:30:64:c7:57:bd:e8:9c:bd:49:da:fb:94:80:48:c5:73:ff:
         1d:cd:3a:b2:48:e9:31:93:16:25:fe:0d:4f:a6:0b:22:58:be:
         6e:02:e1:0a:28:03:50:ad:f6:d3:b9:8e:7d:c4:74:1f:2a:5e:
         aa:ec:61:25:f5:0c:eb:86:d9:d0:38:cc:4c:b9:c8:85:ff:ac:
         cc:bf:b2:f8:ce:df:fc:cf:f3:2e:33:96:5f:0e:de:ef:cd:02:
         d6:a5:3b:22:92:db:17:22:4b:40:a9:f1:0b:24:fd:23:89:4b:
         ae:9e:1c:5c:af:85:ad:46:8d:3e:0b:0a:9d:a8:8b:db:5e:f7:
         e7:49:1e:bd:4e:05:73:43:0f:66:b3:80:5e:d2:7f:b4:7e:86:
         ad:64:10:ca:0d:fa:62:38:87:c2:da:1b:51:7e:13:ce:f3:0f:
         c1:62:20:0f:11:a6:44:2a:f7:4f:bc:05:a1:a3:af:26:59:c8:
         e3:9f:96:11:01:67:9f:a9:01:97:bc:30:8c:79:b8:cd:42:48:
         b5:9a:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:16:24 2024 by rpki-client on console-ams.rpki-client.org