Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69e01574-d93e-39a6-97c0-f2edb8f73bea.roa
File:                     69e01574-d93e-39a6-97c0-f2edb8f73bea.roa (raw, json)
Hash identifier:          T/ieRzfHcD2sgwx0HWUiIWQSS3oNq0i7uY5FMIwQs80=
Subject key identifier:   B5:78:76:30:26:2B:8B:D6:9C:C0:5B:A5:FF:FE:B8:21:8F:41:85:69
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DB7F8EAC6
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69e01574-d93e-39a6-97c0-f2edb8f73bea.roa
Signing time:             Thu 10 Oct 2019 23:20:06 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     53577
IP address blocks:        198.138.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:b7:f8:ea:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=e9ccbd42-033f-429f-bd42-7f57a61cbf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:6c:87:fa:12:20:92:77:2b:a7:ac:da:bc:
                    8e:8c:3b:76:50:eb:e4:98:36:fa:da:f5:e3:db:c5:
                    5b:0a:2c:cf:31:ea:c9:49:69:3f:b0:90:e4:d4:e1:
                    9e:8c:30:3d:62:9b:73:76:39:20:e6:4b:67:ad:66:
                    db:91:fc:e1:57:c4:91:54:9b:ee:56:30:c9:d8:83:
                    82:60:02:f5:bd:da:15:e5:c8:62:0d:a3:d2:4d:6b:
                    34:32:18:12:0e:68:0b:55:65:0c:30:38:77:bb:62:
                    b8:5f:ba:66:e1:45:db:00:85:08:f6:8c:d7:34:9b:
                    f4:7e:b0:0e:48:c5:e8:ad:f6:59:23:0c:f5:bf:7d:
                    53:de:ec:41:1f:9b:c7:72:18:e8:c5:c0:ac:a1:a1:
                    4d:61:96:59:ae:53:24:16:40:1d:ed:8f:a0:92:03:
                    45:e1:2a:a6:d9:bc:6b:e4:e5:18:20:a7:02:fd:d9:
                    a3:fd:de:43:73:71:6d:a9:d2:5f:8d:b1:82:32:fc:
                    39:5a:5d:8d:af:2b:e6:af:3d:a9:22:55:a0:ac:ab:
                    d4:d6:02:eb:4b:c1:5d:c6:34:0a:70:d3:5a:e9:2f:
                    bc:9a:63:35:98:85:6c:78:16:b6:46:b8:3e:9e:02:
                    5d:85:ff:cd:27:5e:32:e6:05:7b:ae:ef:fd:80:db:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:76:30:26:2B:8B:D6:9C:C0:5B:A5:FF:FE:B8:21:8F:41:85:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69e01574-d93e-39a6-97c0-f2edb8f73bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.138.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:d9:c6:e2:d8:ca:ea:75:2a:68:bc:a4:36:fd:4b:88:25:
         ad:75:59:8b:21:1d:33:97:3c:a7:9a:5b:e2:50:c2:c8:27:91:
         a1:cd:96:25:08:b8:fb:88:21:69:ff:3c:4f:29:79:46:21:14:
         54:6e:67:48:ad:a0:a6:7c:98:9b:ce:75:7d:30:02:5d:19:54:
         14:86:26:6e:28:ca:b0:9c:bb:44:4f:fe:f5:20:37:2f:e2:32:
         3b:05:ce:c6:fc:b2:91:6d:f2:99:0d:5d:8a:9e:44:11:91:3d:
         79:d5:db:20:34:9c:bc:66:b7:62:63:ca:42:98:d1:4b:b3:b6:
         e1:f9:45:02:e2:9b:92:ee:b3:58:0f:c2:be:12:7e:ba:a9:96:
         78:65:15:b5:d8:cf:af:f0:99:08:6d:c6:d1:54:0d:53:87:d7:
         7b:b0:9e:49:20:e5:69:c9:f7:b5:c8:ea:a2:d3:52:d8:01:5c:
         7f:b0:91:37:7a:89:56:9d:ae:cb:e1:9f:d0:1f:de:12:e9:1f:
         da:7d:c8:b3:fc:26:bd:25:a3:f2:74:17:d9:6e:9e:fc:cb:f7:
         02:75:93:e8:a7:ab:c8:09:05:17:09:44:6d:dc:07:e5:5c:c1:
         92:40:88:81:96:b7:ff:12:03:d8:c0:fd:ef:d1:21:6c:a5:38:
         94:a7:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:02 2024 by rpki-client on console-fra.rpki-client.org