Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa
File:                     8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa (raw, json)
Hash identifier:          ml8u/D7mQzbxUaEUqisLkMinsmm4zHB/zn5ekdctHPE=
Subject key identifier:   9F:6B:62:72:31:64:42:EF:05:65:D4:DD:A7:51:33:A3:FB:66:68:F4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E038F178A
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa
Signing time:             Fri 25 Oct 2019 15:35:39 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        198.173.172.124/30 maxlen: 30
                          198.173.14.0/24 maxlen: 24
                          198.173.13.0/24 maxlen: 24
                          198.173.11.0/28 maxlen: 28
                          198.173.8.224/27 maxlen: 27
                          198.172.138.0/24 maxlen: 24
                          198.173.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:03:8f:17:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=314aaa83-7838-4fae-85e1-bf8801226237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:de:93:f8:8c:79:4d:66:8d:79:97:fa:54:
                    51:e9:eb:53:70:cb:3a:bb:d3:3d:94:4c:d8:7f:87:
                    4f:2d:05:7b:a8:ce:2b:82:61:df:ec:a7:3f:17:e3:
                    8a:94:ce:27:6b:f0:4c:7d:8f:a6:43:d8:75:ae:ef:
                    d6:5a:30:c9:43:c1:fc:5b:cc:ad:03:53:e9:76:5f:
                    c2:4a:20:c7:cf:45:c8:5a:49:ba:b1:50:6b:b7:11:
                    9d:56:bd:7b:5a:15:81:77:06:c7:8a:e3:57:df:72:
                    da:e4:ea:ca:92:d3:a7:e5:02:8a:11:6b:a9:25:8b:
                    76:75:93:4a:99:98:92:cd:13:26:66:03:2f:46:5f:
                    f3:ca:06:7c:dc:45:0d:08:07:92:ad:ab:70:1e:ff:
                    d8:5d:0e:f2:04:d5:68:21:34:ce:11:99:87:ea:09:
                    64:b9:44:30:bb:53:f2:39:bf:ce:c4:e0:1e:85:13:
                    03:9a:b7:22:c0:99:3e:91:d9:d4:27:be:23:b1:2b:
                    e1:82:52:ba:1a:2f:30:bf:b4:38:c1:82:d8:b6:d4:
                    b8:ca:ea:d6:f1:23:49:ee:a0:7c:fc:54:df:d8:00:
                    cc:6b:16:01:1d:91:70:a6:70:6d:d7:b0:46:2d:8d:
                    53:f2:f9:98:d1:44:eb:e0:a0:e6:2f:59:23:96:14:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6B:62:72:31:64:42:EF:05:65:D4:DD:A7:51:33:A3:FB:66:68:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e6c2ff9-08d6-34db-b8c6-aefc92b9a96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.172.138.0/24
                  198.173.8.224/27
                  198.173.11.0/28
                  198.173.13.0-198.173.14.255
                  198.173.172.124/30
                  198.173.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:d1:04:29:f1:5c:aa:a4:34:65:02:16:e1:52:a7:8e:b6:
         c2:8a:8b:3e:a4:5f:26:24:f5:fc:dc:0f:ec:4a:a7:eb:83:81:
         0a:d3:d1:c0:a4:d2:03:f8:1d:f7:12:b9:b6:94:ac:7f:77:25:
         73:f0:53:be:66:68:dd:d3:01:93:e0:a0:37:d3:91:33:ff:06:
         3e:56:28:f4:cf:61:81:c5:32:ad:c6:ba:6d:6e:17:0b:b2:83:
         61:d8:b7:35:2c:88:eb:66:ab:8d:69:0a:41:52:4a:57:1e:5f:
         5a:03:f3:66:4d:c5:39:a0:dd:17:15:df:a0:b0:11:11:26:74:
         af:0d:84:2d:5e:97:b4:c0:1f:7f:fb:59:28:04:a2:29:98:0e:
         fb:5a:61:5d:ac:a1:b7:3e:42:3a:d5:9f:fd:9b:6b:de:7b:36:
         89:78:ca:60:4f:0c:1a:75:02:03:b5:2d:cc:21:46:9f:b4:f6:
         a3:c4:2f:6d:d9:aa:0b:f1:09:a7:33:b0:21:b4:fe:aa:3c:70:
         6a:8a:7e:40:10:82:b1:d7:80:03:41:a1:29:cc:d3:ce:45:62:
         a7:eb:c1:e0:0d:f0:9a:1f:65:7b:9a:57:89:16:eb:8e:17:25:
         86:26:a9:11:61:e7:12:ca:c0:91:66:1c:64:04:6f:38:9d:17:
         44:e8:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:04 2024 by rpki-client on console-fra.rpki-client.org