Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/99715b3c-ba42-34b2-a319-d0c2f731a32c.roa
File:                     99715b3c-ba42-34b2-a319-d0c2f731a32c.roa (raw, json)
Hash identifier:          ir3qxPbJhxdvCyTXqNGcXVZCFuRM0B90AY7hegmq0Hk=
Subject key identifier:   EE:79:6F:68:C8:A8:AE:58:A5:96:4E:50:82:3B:4B:86:74:B6:F2:9C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E6455AE8B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/99715b3c-ba42-34b2-a319-d0c2f731a32c.roa
Signing time:             Wed 13 Nov 2019 10:36:07 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     12044
IP address blocks:        206.58.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:64:55:ae:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=cdefe9a2-7811-49a2-8ae3-814062763c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:ca:fe:2a:fa:c0:95:2f:a9:7b:5f:a3:4f:
                    9b:4c:61:7c:f6:28:5d:04:fe:4d:e8:47:61:51:39:
                    7c:a8:64:b1:19:31:73:c5:d7:08:e9:61:5d:a0:4d:
                    46:ef:28:71:15:13:b4:0e:78:46:8c:18:04:80:43:
                    b2:b2:8e:38:04:15:ad:00:2b:68:3f:7d:c1:96:c0:
                    6c:a0:53:fa:9c:c4:7b:ee:68:de:ed:4c:cd:bf:fe:
                    e2:37:64:bb:9d:a5:ef:14:7b:de:49:8b:8e:db:c0:
                    b6:2c:47:5f:ff:aa:71:45:58:7b:e5:2d:55:80:3a:
                    ac:c5:50:fa:8c:3c:98:35:fa:17:cd:b9:cd:dd:a0:
                    13:1b:02:92:18:63:88:f6:40:be:5c:89:81:0d:5a:
                    b9:c1:e7:da:5e:01:af:e4:90:09:65:85:f7:6b:e5:
                    b2:63:3e:30:a2:f1:aa:31:c3:a9:14:50:4f:c6:a5:
                    88:ac:cd:0a:26:65:46:b2:0f:b1:c6:50:99:1c:ea:
                    22:55:1d:69:e6:88:fa:41:c4:56:d6:ef:17:60:4d:
                    12:b8:bb:64:d2:3e:a5:34:ff:e3:3a:28:0b:fc:0a:
                    6f:f8:a2:9f:51:1b:a5:a4:8b:50:9d:41:f0:17:f7:
                    e8:9e:6b:0b:ec:98:4a:16:a5:ef:ac:9a:a1:87:6a:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:6F:68:C8:A8:AE:58:A5:96:4E:50:82:3B:4B:86:74:B6:F2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/99715b3c-ba42-34b2-a319-d0c2f731a32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.58.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:59:b7:f0:89:4b:2d:8e:0f:a0:87:ee:6a:1f:7c:87:65:4a:
         2a:a5:9a:a7:ec:24:aa:e6:ce:a1:72:a3:60:79:be:66:d8:d3:
         76:e2:da:b1:43:44:94:96:3f:a1:36:00:f3:70:fe:d8:4d:0a:
         1f:cc:71:4f:48:57:0f:f2:63:c1:c8:fd:b2:89:a0:7d:10:7e:
         07:6c:bb:c1:92:44:52:71:db:fd:1f:a2:92:df:8c:56:19:c1:
         0a:39:2c:4b:f2:58:02:6f:b6:97:1e:82:da:b0:4e:e0:5f:96:
         a8:95:49:f4:f9:ae:66:c2:5b:c3:94:99:70:ec:0d:eb:43:84:
         b1:9e:cb:5c:24:fc:10:70:57:e4:06:39:c6:16:88:a8:cb:f3:
         79:1e:00:6a:df:a8:1a:bc:63:08:a1:c2:c5:64:95:72:79:1b:
         b8:de:16:35:8d:54:bc:c4:94:6c:7f:99:85:77:ed:ba:fc:c0:
         d3:90:12:4c:a9:a6:94:a6:de:b5:0c:33:f0:f7:46:f0:f7:e4:
         30:1f:c3:8d:55:55:fe:79:f8:44:5b:67:08:0f:fc:60:08:72:
         97:0c:25:cf:03:cf:58:f5:0c:7a:de:46:c6:d8:8d:a4:ea:09:
         d1:de:32:29:f7:2d:69:f4:18:f0:b8:29:84:3c:ad:10:ef:b4:
         34:de:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:39:04 2024 by rpki-client on console-fra.rpki-client.org