Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7fab4b40-96cf-37b8-b471-4e3dac5d2488.roa
File:                     7fab4b40-96cf-37b8-b471-4e3dac5d2488.roa (raw, json)
Hash identifier:          lK8MGTjBej30763PPv92SqkpMTNx6rmcpLMn8qaQbII=
Subject key identifier:   F9:64:26:27:1A:AF:D9:BB:57:F5:89:57:DB:79:D7:AF:7D:60:D9:48
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F94BF03
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7fab4b40-96cf-37b8-b471-4e3dac5d2488.roa
Signing time:             Mon 30 Sep 2019 00:31:57 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     395371
IP address blocks:        165.254.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:94:bf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=8852db34-a48b-4b57-be6e-5ced84e416ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:47:dd:4a:2c:20:4b:32:3d:23:b6:76:51:
                    a9:ea:04:03:c4:6a:92:79:b2:48:81:0b:5d:ab:e7:
                    fc:82:b4:b7:d6:bc:d1:6a:ad:00:8d:df:b5:82:71:
                    c9:32:8e:54:ef:2a:b6:03:82:a0:b2:27:df:e4:f0:
                    bf:a1:92:c0:92:f0:86:32:6f:6a:1e:47:90:d7:d3:
                    b1:37:63:12:ed:60:49:6c:05:79:92:19:02:83:76:
                    16:ad:cd:17:55:29:31:6c:aa:24:9d:3b:e6:ac:70:
                    9a:bc:0c:06:02:84:d7:07:42:b4:f9:c2:8a:ef:55:
                    53:1e:6d:81:33:25:46:54:dd:c2:43:80:85:8a:22:
                    cd:db:dc:85:0e:c2:c9:14:e1:88:ab:e2:c3:8c:cc:
                    93:f6:4d:74:f9:07:a2:17:d6:19:14:1c:9e:1b:98:
                    b0:24:ac:f3:50:26:3d:01:85:7f:79:74:b9:2e:ae:
                    39:ab:43:14:56:d0:5a:76:79:91:46:f8:a9:6e:50:
                    ab:33:5a:a2:f8:eb:1e:49:40:03:93:f0:67:cb:c6:
                    57:b3:58:a2:42:da:5f:b3:eb:80:9b:32:8b:1a:60:
                    aa:8e:48:da:bb:7d:b9:90:f8:5b:3e:4b:4d:64:19:
                    9d:ae:a1:36:bd:88:dd:72:97:a8:a2:a8:f1:78:ff:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:64:26:27:1A:AF:D9:BB:57:F5:89:57:DB:79:D7:AF:7D:60:D9:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7fab4b40-96cf-37b8-b471-4e3dac5d2488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:d5:d0:92:8e:26:06:fa:bb:da:73:36:28:83:10:e3:cd:96:
         50:69:17:13:56:60:d5:50:44:e1:93:1b:f7:67:93:a3:90:2a:
         d3:c3:33:15:67:eb:05:d1:84:89:0f:2f:6b:a6:88:16:2d:ce:
         dd:bb:34:62:51:85:fd:0a:63:7e:b9:db:c6:af:bb:5f:30:76:
         2f:cf:eb:30:a5:b1:ac:c0:0c:e6:85:9a:54:69:bf:33:c1:90:
         de:f2:78:0f:7f:ec:5b:66:af:6d:f0:44:0f:17:33:c3:20:d7:
         e1:92:e3:97:71:24:f2:b9:c9:c1:fe:1b:da:b9:d2:56:48:58:
         2e:c7:bb:8c:15:78:9d:b0:01:73:23:f4:9b:ef:c7:21:a8:d5:
         a0:c3:a3:64:03:6f:f7:f8:53:7f:fb:65:b7:38:71:d3:4a:43:
         7b:2f:b6:00:1f:6e:b9:2c:9a:93:e4:21:e1:55:da:5d:db:64:
         a1:7b:25:5e:c8:31:c9:d4:b0:42:1e:5f:ea:ee:c1:05:1e:3b:
         48:e8:b4:17:2b:b7:3b:4b:6a:16:cd:31:f2:56:90:bd:82:7c:
         eb:82:4c:48:d1:61:5e:c0:93:78:c7:66:73:a5:78:f8:c2:b6:
         eb:d3:e0:45:49:1e:69:0d:b2:7d:a8:cd:e3:d5:b3:30:d3:76:
         3c:63:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:14 2024 by rpki-client on console-ams.rpki-client.org