Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5ff6d721-2d74-3fd9-8d21-f31526ce7a48.roa
File:                     5ff6d721-2d74-3fd9-8d21-f31526ce7a48.roa (raw, json)
Hash identifier:          N59HQ0WvkWnxiCRms3fOKyC3oT0+FZa+M22I/4uXokU=
Subject key identifier:   E2:54:E8:3A:6B:E2:00:14:C0:5C:38:4A:4B:A3:2B:70:25:17:E5:DB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E4B7F74FE
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5ff6d721-2d74-3fd9-8d21-f31526ce7a48.roa
Signing time:             Fri 08 Nov 2019 14:51:14 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        199.4.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:4b:7f:74:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=7caedcc9-a3fa-4de4-8295-92dfb83a9c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:92:93:6e:21:25:eb:bb:1b:a8:e1:f7:6d:
                    c9:18:43:4f:c8:97:cc:a6:cb:3d:97:3f:c7:40:e3:
                    54:3c:ca:f1:3e:c1:da:dc:76:f8:00:ca:b5:b3:ba:
                    af:ae:f3:c8:62:fe:af:fb:2a:89:44:70:fa:37:bc:
                    ba:2c:76:33:63:89:f4:b8:20:5f:7d:e0:92:a7:bd:
                    cd:ee:a0:ae:1f:4f:c6:31:1b:64:60:ba:1e:79:83:
                    dc:ff:dd:47:d4:19:4a:d1:b3:3e:ec:98:f4:33:1f:
                    0b:30:6c:e8:31:b4:3b:e4:76:30:77:a5:d3:37:b4:
                    c9:df:b0:ad:d2:ba:40:cf:e7:d0:32:58:a6:8a:21:
                    a2:83:71:b8:00:d5:6f:38:08:27:82:91:88:7e:54:
                    e3:2c:ad:29:39:8b:90:7b:e3:fa:58:be:8c:da:7c:
                    90:67:2e:53:9c:99:ac:7c:01:cd:33:a9:fb:b9:a6:
                    74:64:0e:2c:8a:35:94:83:d1:d5:fb:69:a9:48:a0:
                    1e:2a:da:95:ca:9b:71:f6:c0:fe:3c:dd:ff:aa:3f:
                    d4:be:85:64:a8:d7:7c:86:87:b1:0c:b4:62:20:9f:
                    1a:26:d3:57:5e:74:31:e0:25:08:1d:1d:40:f1:06:
                    47:2c:fe:e0:6b:67:07:e2:82:51:ec:a4:3b:24:4a:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:54:E8:3A:6B:E2:00:14:C0:5C:38:4A:4B:A3:2B:70:25:17:E5:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5ff6d721-2d74-3fd9-8d21-f31526ce7a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:99:dc:55:de:82:f5:29:9e:73:c5:03:f8:bb:06:84:2f:
         9d:25:f6:66:d3:48:df:2d:1f:7a:5d:a4:fb:f8:4a:78:73:f6:
         50:36:1e:68:a3:a1:14:ef:e1:6d:78:89:03:ea:d2:47:8f:92:
         06:71:24:e6:67:0d:6d:3f:9c:83:74:75:e4:75:a1:27:18:ca:
         35:78:54:2b:6a:2d:db:ed:f1:3c:29:3e:16:71:d5:40:4b:d2:
         30:87:73:8b:0d:bb:ff:d8:ff:f0:00:43:cb:1e:f2:7c:5a:e3:
         53:21:1e:74:53:54:0c:9b:0d:9e:72:b7:d5:66:25:2c:0e:8f:
         9d:fe:55:60:57:b6:a4:d0:c1:76:1a:00:63:0c:95:e1:fb:7a:
         ac:ae:09:fc:be:9b:f4:13:9d:5e:3f:53:db:b0:b4:c5:16:0f:
         a8:a9:c7:dc:22:ba:0d:d0:f0:71:9c:83:61:6f:52:d3:19:d1:
         5f:da:47:15:ff:37:c2:89:cd:0c:66:8d:7e:d3:b0:f1:eb:cf:
         c3:05:df:88:66:cd:a4:f9:96:70:55:85:bc:0a:78:9b:ab:1d:
         cc:a7:bf:47:4c:83:3b:85:0b:eb:ac:f2:9e:64:37:d5:cb:2f:
         cb:77:53:f6:b2:aa:74:04:0a:dc:ac:4b:0b:4c:1b:55:77:38:
         0e:d3:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:57:12 2024 by rpki-client on console-fra.rpki-client.org