Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6fb948c4-b7ae-3744-bb6f-69ea048509d8.roa
File:                     6fb948c4-b7ae-3744-bb6f-69ea048509d8.roa (raw, json)
Hash identifier:          MOO/bKWU4WHS6XnZZzowVIYv59SW8ajWYCN0A9SqQ4M=
Subject key identifier:   DE:2E:C4:CB:9F:69:C7:6D:BF:A4:07:7A:24:9B:0C:70:FA:42:CC:2F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16CC363AEA9
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6fb948c4-b7ae-3744-bb6f-69ea048509d8.roa
Signing time:             Sat 24 Aug 2019 11:29:45 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     40136
IP address blocks:        207.156.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:c3:63:ae:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ff59495d-3ffc-4f78-adf5-331b224dc721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:d7:f4:a0:03:8f:38:2b:dd:e3:c2:3c:01:
                    f2:52:1b:61:08:3a:3b:20:a1:73:ff:83:75:e4:13:
                    35:cd:72:e0:c4:b0:17:38:e9:03:9f:34:a6:d1:fa:
                    43:a1:0f:a7:80:be:d2:21:7e:3d:25:4b:7a:9b:d5:
                    6d:5d:5a:a5:9d:a8:e8:0a:f1:ad:81:d9:77:80:17:
                    ff:2c:b6:f7:6f:fb:76:96:68:25:66:6b:f9:c0:31:
                    e3:92:c0:12:1e:90:03:08:2d:ab:5d:e3:97:42:4c:
                    87:49:40:97:cb:77:9c:49:49:47:a2:ee:b6:23:14:
                    a6:96:e6:14:55:ac:b9:44:49:37:d1:32:63:ec:ce:
                    27:39:20:17:76:11:40:0e:a7:43:85:62:53:9e:8e:
                    bc:cd:88:e1:71:d1:b6:74:e3:bc:c0:b2:58:a7:f4:
                    d7:76:0f:63:18:f7:44:e4:80:56:79:05:ab:73:6a:
                    15:95:87:13:be:6c:cd:11:34:c5:72:e4:eb:b5:24:
                    f8:3c:1a:1c:11:70:c8:08:14:86:43:a3:d0:c7:75:
                    64:f5:93:e6:76:e1:8f:bf:58:41:8e:c4:47:70:b2:
                    2f:0a:ff:7d:f0:53:bd:67:5c:6d:92:06:87:b3:11:
                    ef:a6:4d:61:d5:f6:e3:4f:83:c3:a6:b9:a4:40:d6:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:C4:CB:9F:69:C7:6D:BF:A4:07:7A:24:9B:0C:70:FA:42:CC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6fb948c4-b7ae-3744-bb6f-69ea048509d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.156.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:36:a0:d2:17:29:13:ee:ec:1a:94:f8:2d:3a:25:51:25:3a:
         de:96:d9:e4:c6:e5:9d:05:78:7c:98:4d:7a:33:d8:ec:18:19:
         7a:99:73:42:a4:7e:80:23:1a:d4:07:f4:de:2a:fa:68:d0:7f:
         db:41:14:26:df:33:a4:53:e9:8f:94:f0:34:8d:25:1a:af:ab:
         92:cf:a6:ff:9f:1e:2d:43:2f:46:04:06:70:ee:3e:c7:38:b3:
         26:36:09:f3:55:d3:56:83:ee:6d:2a:dc:eb:9e:c9:b3:2f:b0:
         5e:ae:f0:61:28:0f:ca:7f:2f:e1:0b:50:31:43:31:2c:76:bc:
         3b:e2:a6:12:c1:8e:1a:30:01:0c:cf:31:e7:45:97:a6:ed:5b:
         21:32:d4:f3:4a:5c:93:4d:4a:db:4b:bc:20:1a:01:74:f7:ab:
         d6:f0:6f:14:8b:f8:09:9d:e1:92:36:ce:8c:3d:0b:dc:91:22:
         6d:02:bd:91:c0:70:e7:60:02:f6:d5:6b:f5:b0:18:91:88:45:
         c6:01:06:9e:a2:f4:e4:e3:83:3e:cd:ea:56:3f:dd:6b:1e:82:
         a4:0d:f9:3c:71:41:3c:90:57:33:5a:ce:d5:f1:f1:0d:bd:4f:
         7f:9f:d4:db:50:f3:c8:cb:32:0f:67:f5:4b:4f:95:a1:6d:86:
         96:3f:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:03 2024 by rpki-client on console-fra.rpki-client.org