Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/64f0092f-d27e-306b-b397-6d8509a04127.roa
File:                     64f0092f-d27e-306b-b397-6d8509a04127.roa (raw, json)
Hash identifier:          mnxYK2ZoxsVtrdGn9akO/ST/UkP9ZSF96mwO9YcWF8k=
Subject key identifier:   42:EF:34:3B:E7:CA:90:06:90:B2:05:8D:77:72:7A:3B:06:52:44:99
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E393164EE
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/64f0092f-d27e-306b-b397-6d8509a04127.roa
Signing time:             Tue 05 Nov 2019 01:32:48 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        199.234.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:39:31:64:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=120945c8-6aa5-40cc-8c44-f9a6ebfce9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:d5:43:63:00:b4:f5:48:b1:d8:ab:af:60:
                    7c:c2:5f:32:09:1c:1b:94:0e:21:de:60:6b:62:dd:
                    06:92:5e:0e:bd:c9:42:7a:f4:d3:28:3b:c6:83:15:
                    21:38:63:6d:d2:23:8c:e3:92:f7:d0:f4:48:f1:4f:
                    eb:54:0f:f4:bd:4c:05:ad:98:c2:c3:cb:19:84:ca:
                    97:a5:9e:93:ea:ab:52:a3:75:dd:38:3a:54:e9:14:
                    93:fb:d5:41:d0:c2:86:db:19:bc:e7:33:35:bb:b7:
                    2b:ce:ef:7c:92:9a:b1:3b:2b:21:da:ac:d5:ca:d2:
                    24:c9:dd:80:02:13:81:ab:06:e2:97:7b:cf:d8:ce:
                    37:84:a7:b5:38:0e:ef:f5:7c:3b:a4:8e:3d:21:f6:
                    68:17:41:fd:af:fe:a7:b2:9c:99:b8:60:e2:20:93:
                    6f:e6:50:97:1e:a5:ef:87:d4:55:76:75:63:31:0b:
                    b7:eb:a1:03:64:97:91:0d:ad:64:52:00:88:ec:73:
                    ee:cb:8c:a9:e6:b0:25:db:44:02:f3:60:31:81:22:
                    5b:ec:77:49:a6:8c:cb:f4:1e:8b:34:9d:3b:03:a6:
                    13:d6:b4:3e:d6:85:81:97:c4:79:b4:5b:44:45:d7:
                    40:08:b2:25:2b:fc:4f:dd:31:e7:bd:ac:17:4b:a5:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:34:3B:E7:CA:90:06:90:B2:05:8D:77:72:7A:3B:06:52:44:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/64f0092f-d27e-306b-b397-6d8509a04127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:14:ac:7c:7f:63:37:f7:6d:9d:f2:d8:c8:0f:b6:0b:b1:26:
         57:9a:e4:28:35:76:ab:b9:48:7a:62:32:48:8e:0b:0d:a9:7f:
         7f:c7:1d:c9:a9:b7:2f:8e:a4:72:0f:7c:e7:43:18:36:af:e1:
         eb:12:32:9a:4d:8d:4c:fe:78:69:6e:16:66:89:58:ff:d4:12:
         ba:32:3f:a3:a6:19:d1:05:23:b1:f2:9e:b3:fb:6f:f4:8a:ae:
         fe:8b:50:7f:af:b2:54:b4:dc:cf:7b:c1:06:ad:4a:56:b7:7a:
         50:2a:6b:28:db:b3:0b:b5:f4:08:81:d8:c0:88:a8:44:0d:27:
         a5:59:28:29:63:9d:2e:78:db:35:9a:b5:b7:f5:e5:87:15:bf:
         ad:b2:97:20:0b:e4:fb:09:f8:26:05:89:3c:4f:9e:54:07:e7:
         58:ba:4c:42:aa:d5:fc:0b:44:4c:2f:ab:96:81:94:a2:e8:7f:
         ca:90:56:12:24:63:bc:33:f4:ac:f5:73:d2:05:48:94:b7:e2:
         12:a0:67:00:87:30:b6:eb:04:bb:90:25:79:df:5e:1e:40:27:
         57:da:0a:eb:fb:8b:c6:c1:67:89:97:02:53:21:99:1a:4a:11:
         c4:a0:dc:d3:d8:46:b1:f2:d6:c6:53:bc:de:bd:5e:7a:80:94:
         9d:ab:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:12 2024 by rpki-client on console-ams.rpki-client.org