Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8633f9f4-3f13-3310-86f9-6a49f5b7f7a3.roa
File:                     8633f9f4-3f13-3310-86f9-6a49f5b7f7a3.roa (raw, json)
Hash identifier:          7+Z1iOZKCKxWzYsiBngm2XfTqSVEScQukxbW7iH1+bs=
Subject key identifier:   36:06:78:70:02:B4:38:E7:00:95:07:7B:48:39:CA:10:F0:40:54:98
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F9011D7
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8633f9f4-3f13-3310-86f9-6a49f5b7f7a3.roa
Signing time:             Mon 30 Sep 2019 00:26:51 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     40731
IP address blocks:        165.254.116.16/28 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:90:11:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=d6fae098-6d47-45d4-a5a1-559a12eb1049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:74:09:37:bb:03:85:b1:4b:0b:cf:90:c9:
                    d3:15:40:70:43:9b:00:3d:dc:18:ec:ff:f2:63:83:
                    10:b8:04:35:7f:eb:cf:f3:21:e3:d8:80:4a:af:fa:
                    ee:32:98:49:45:a9:b1:ca:21:4b:ef:1b:2d:d1:01:
                    58:e8:14:5c:01:1e:c8:1e:ff:9b:21:ab:3a:b2:34:
                    f5:a7:cf:34:a9:a2:f1:65:d4:78:b7:5e:5d:ff:4e:
                    0d:b9:29:f9:05:a4:d1:d4:8c:13:ea:34:6f:7d:06:
                    bd:ad:ac:e4:cd:11:1f:d2:16:b2:82:05:9d:38:a0:
                    eb:b0:3a:02:70:25:19:fb:96:35:c6:94:8b:56:1f:
                    41:90:03:51:1f:92:71:4b:2b:2c:57:3a:fb:c8:de:
                    c3:bf:d4:3a:da:cf:6b:b2:c8:74:04:d5:bc:7d:2d:
                    f3:b9:7f:da:a1:cc:7f:86:87:3e:3a:54:22:75:e7:
                    53:4e:98:d2:46:e6:f2:64:c1:46:29:c1:c8:0c:c8:
                    f8:e8:3a:d5:11:50:21:d4:6c:f6:5d:71:a7:09:0f:
                    68:f0:6a:e3:4f:60:78:9d:40:f3:c6:f4:74:63:61:
                    8f:7d:d4:d3:a7:36:af:9a:61:9b:e8:58:99:ec:9f:
                    f1:59:2f:74:88:8c:5a:db:33:36:96:ab:38:cf:58:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:06:78:70:02:B4:38:E7:00:95:07:7B:48:39:CA:10:F0:40:54:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8633f9f4-3f13-3310-86f9-6a49f5b7f7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.116.16/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:17:3d:19:fd:70:92:cd:f1:71:e3:49:b5:6d:94:ae:cc:e5:
         bb:dc:51:59:e6:54:42:a3:62:e5:97:4c:48:2c:2d:8e:0f:40:
         45:aa:b9:7f:ce:80:e9:f0:c9:f7:dc:67:fa:05:f4:72:7f:5c:
         7f:3c:a5:cd:df:8b:f0:48:f2:52:fd:05:d2:0a:37:b2:4a:2d:
         8d:69:43:bf:fc:b3:d7:d0:d3:5f:9b:99:18:53:75:10:3e:68:
         5a:71:4a:0d:0d:7f:1e:2a:01:39:cc:36:04:e0:4d:73:70:ef:
         fe:9f:79:3a:a6:a7:76:be:12:b2:97:db:9e:f3:7f:0d:59:c9:
         37:07:8a:bb:18:f6:28:ac:fd:c4:19:0c:f9:cf:ab:be:6e:01:
         e4:43:d8:f2:d5:06:4d:49:ec:c5:3e:82:15:0c:44:70:41:b7:
         41:1d:f3:18:1c:0f:8a:33:ca:85:3b:80:32:b7:a6:6b:95:06:
         8b:42:e3:46:b6:89:02:40:32:f9:19:30:80:13:91:ad:fe:42:
         ce:4b:e8:0b:64:07:5f:9c:4f:8c:39:28:bb:5f:37:df:1d:64:
         d5:3b:7b:92:a4:37:a5:61:7e:73:cf:db:9e:a7:cb:b6:c9:0e:
         6d:12:4e:9e:c1:19:d1:3b:eb:09:0b:e2:e1:64:93:3f:a2:0b:
         4c:c5:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:04 2024 by rpki-client on console-fra.rpki-client.org