Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b458b8a2-18dc-3ff5-b493-7ae3358f1b65.roa
File:                     b458b8a2-18dc-3ff5-b493-7ae3358f1b65.roa (raw, json)
Hash identifier:          BiHIQ0VIlkMWHI0Ly8dfLrMOTwz9DroKl9sA+wjQ+1o=
Subject key identifier:   2D:06:44:F0:10:BB:35:17:44:EE:37:A7:6F:7F:6E:3F:A2:FB:C3:7F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583E29B9B489F86602B512955340
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b458b8a2-18dc-3ff5-b493-7ae3358f1b65.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sat 08 Apr 2028 04:00:00 +0000
asID:                     685
IP address blocks:        165.254.28.0/24 maxlen: 24
                          2001:418:149f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:29:b9:b4:89:f8:66:02:b5:12:95:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Apr  8 04:00:00 2028 GMT
        Subject: CN=c6ef8871-b019-472a-8184-de6b5350257f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:9b:c0:97:f8:78:a9:d3:cd:8a:29:60:74:
                    a8:96:79:4b:ef:9f:9f:b8:a1:71:a9:71:82:5f:3b:
                    f8:aa:f7:e7:54:12:65:57:7a:c0:c2:3c:dc:82:7a:
                    6c:e4:98:ff:b6:f9:2f:b2:9f:39:c5:8c:66:69:51:
                    41:75:03:8a:83:3f:6a:42:94:e0:3a:c3:16:4b:67:
                    e5:f9:10:3a:d2:32:4a:6c:90:e6:32:5b:ab:89:2b:
                    f5:8f:d2:a1:55:2b:2b:2b:de:6f:8a:5d:d1:be:f3:
                    2a:8d:88:35:6d:5e:36:f9:85:63:b5:88:eb:b7:fb:
                    08:03:e2:3a:f9:78:13:48:25:a9:85:0c:6f:43:34:
                    0c:6d:c2:5b:5d:d2:6d:81:90:05:c0:f0:38:c7:69:
                    29:ad:f0:53:5d:34:8c:79:52:43:c7:d9:e4:83:e8:
                    32:40:97:0b:8c:a8:70:1f:9c:c4:3a:b1:55:a5:26:
                    f0:86:e2:d9:a7:e0:78:d2:46:1a:e6:10:71:cf:42:
                    52:63:56:21:17:96:b1:ca:71:42:41:0d:ef:6a:86:
                    66:51:b4:9f:22:e6:e1:45:40:08:c0:ec:0a:e2:13:
                    26:31:45:6e:bc:5d:88:f2:9d:83:97:8a:96:e6:ce:
                    15:0d:7a:44:0c:a0:42:19:6c:c8:c0:53:85:3d:72:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:44:F0:10:BB:35:17:44:EE:37:A7:6F:7F:6E:3F:A2:FB:C3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b458b8a2-18dc-3ff5-b493-7ae3358f1b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.28.0/24
                IPv6:
                  2001:418:149f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:90:30:50:14:04:d9:26:6b:41:bc:b0:11:17:11:19:42:4d:
         2b:22:81:e6:81:db:43:7e:2a:7a:d6:5e:8a:65:ff:03:4d:46:
         69:5e:2d:6f:10:29:2b:8a:25:47:80:fe:58:65:3d:a1:f6:c3:
         62:89:15:10:9d:24:57:0e:b0:36:b8:5c:e0:9f:53:6a:3f:c5:
         99:3e:17:9d:cb:7e:df:22:54:52:a5:f8:af:20:b3:94:09:2f:
         0e:9f:23:1c:f8:7b:37:a9:bb:70:cf:07:01:cc:a9:eb:ac:5a:
         62:6a:a1:2c:e2:f2:49:a1:b3:11:0f:da:5f:f8:08:c3:7e:5a:
         4f:12:e4:9b:b4:af:19:e8:60:be:71:97:6c:c0:8b:8c:22:80:
         12:3a:b8:18:64:f4:48:7e:3b:f8:45:c5:c2:97:6f:d0:a4:43:
         8b:81:ee:6b:ca:e3:5f:c2:85:00:2f:61:e1:aa:74:9d:d8:d2:
         59:0c:de:18:b8:58:e4:b4:f9:74:f9:a3:64:13:0e:d1:c5:02:
         58:82:aa:01:35:c7:10:82:c7:f7:e5:a8:f4:bf:ca:62:3d:13:
         fa:c8:36:de:38:ff:5b:df:ae:c6:95:0d:68:08:bd:7c:14:38:
         f9:f7:21:b8:dd:c4:7a:07:5d:21:0d:9a:08:25:95:11:d5:34:
         bb:9c:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:16 2024 by rpki-client on console-ams.rpki-client.org