Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e963729c-3b4b-3793-a991-f03ac4a534ab.roa
File:                     e963729c-3b4b-3793-a991-f03ac4a534ab.roa (raw, json)
Hash identifier:          jqlR28NpSUPe+AD6HYDXFRQDzLd/Jnj9ePBYuNbintQ=
Subject key identifier:   6F:AF:F8:37:2F:24:E6:B1:0A:B5:4B:0A:47:27:29:42:3B:48:CA:F5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F55F186
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e963729c-3b4b-3793-a991-f03ac4a534ab.roa
Signing time:             Sun 29 Sep 2019 23:23:21 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     97
IP address blocks:        165.254.163.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:55:f1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=9e8a1486-cc53-43fa-8819-e741b11a05ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:d2:e5:e2:5e:9c:db:9f:1d:0c:7c:6f:83:
                    8e:4f:06:2f:54:82:1c:64:84:f5:6b:ab:d7:71:82:
                    2c:07:78:30:f0:05:d6:51:29:9a:23:8f:4c:5f:f7:
                    0d:d7:da:04:4b:d5:0e:4b:d8:7a:67:19:7a:5a:7d:
                    62:2a:7e:86:ce:36:93:e7:a7:79:bf:ba:0f:9c:b9:
                    4f:52:f7:90:e3:f2:b0:76:1e:13:6d:53:ea:41:a6:
                    f0:bc:a0:15:81:fa:94:c0:49:19:dc:d4:fb:d6:a1:
                    49:94:c4:6b:ad:e6:4b:3a:f3:71:60:6d:f7:e0:48:
                    46:b1:76:2a:bc:1b:75:4f:8e:7a:d4:16:80:8f:36:
                    ac:78:25:37:b8:d6:08:ee:d0:d7:f6:03:7e:63:c8:
                    f0:17:1f:c8:c1:a9:57:dc:c8:b4:82:13:cb:10:2f:
                    76:7c:d6:a6:e3:91:07:0e:e9:3b:75:98:1f:a7:87:
                    7c:49:4d:f2:46:d0:53:00:81:56:a3:cb:ab:bd:89:
                    18:66:d0:f0:30:bb:2f:da:ea:2e:19:e1:a3:84:af:
                    91:69:fb:14:b2:ea:95:bd:e1:4f:d9:05:24:3d:42:
                    d1:dd:23:57:00:9d:92:61:b2:e6:d8:8f:ec:dd:04:
                    ba:64:76:e0:c0:3c:a1:c9:bb:c2:26:94:1a:6e:9b:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:F8:37:2F:24:E6:B1:0A:B5:4B:0A:47:27:29:42:3B:48:CA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e963729c-3b4b-3793-a991-f03ac4a534ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:07:6f:cf:51:0f:72:6a:65:e3:5b:cc:9b:30:f1:e6:50:
         8e:3a:e7:f6:da:c5:b0:7a:d6:53:ae:93:96:d8:42:aa:d5:3f:
         ef:76:bc:0c:64:36:c1:83:a6:ff:6a:16:f1:b4:63:10:50:00:
         da:91:01:3d:84:77:03:03:92:35:9d:4a:2c:91:ba:b9:84:d3:
         b1:0c:07:9d:bc:4f:9b:15:cd:4a:ef:b9:b6:d0:7d:1f:70:d9:
         cb:28:b4:5c:6e:26:ab:86:d8:e7:99:84:c7:52:34:b3:ba:1a:
         15:fa:63:21:f2:a8:f0:f0:dc:9a:26:f8:db:bb:f4:fa:74:64:
         cd:41:ce:18:e1:3b:e9:9f:7e:5b:e8:a8:51:71:f9:69:62:21:
         65:b0:b3:f1:e0:5a:66:d3:f9:4d:60:a9:ba:92:ba:6f:7d:e1:
         44:f6:e7:d6:30:88:b3:a3:53:b9:fa:93:42:32:ef:c6:10:0b:
         6c:5b:bf:03:30:76:7f:3f:39:e9:54:7a:95:82:a6:01:71:58:
         76:87:7c:df:14:3d:7c:05:fb:e7:32:1d:23:08:7a:d4:35:82:
         2c:40:17:a5:e0:91:6d:c4:4d:0c:d5:3e:47:55:f4:99:af:1a:
         7f:08:c5:67:2c:c9:20:7e:26:b3:e2:6e:c9:1b:2d:fa:44:c2:
         06:7e:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:09 2024 by rpki-client on console-fra.rpki-client.org