Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f59abc42-73a3-3c1f-91aa-9547c0392769.roa
File:                     f59abc42-73a3-3c1f-91aa-9547c0392769.roa (raw, json)
Hash identifier:          DtXFKXl3/iA5i2194urpDxPZd/tkcz8TPjlB+k4c0gs=
Subject key identifier:   51:A9:15:D1:4E:D9:7A:05:43:93:EE:EF:CA:E2:38:CB:B8:B7:B6:6D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DEF1F3207
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f59abc42-73a3-3c1f-91aa-9547c0392769.roa
Signing time:             Mon 21 Oct 2019 16:21:02 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        165.254.58.208/29 maxlen: 29
                          2001:418:1401:1::/64 maxlen: 64
                          2001:418:1401:98::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:ef:1f:32:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=dcd4905e-53a2-4fa5-84d4-30429a07f785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:9b:0e:d8:dd:ba:37:1e:e4:f5:82:99:88:
                    32:b7:17:36:19:fc:2e:58:cf:81:99:b3:c5:1b:8f:
                    af:47:89:75:dd:99:09:b0:45:00:63:03:f1:18:96:
                    b7:d0:b4:76:77:88:04:bc:cc:ff:c1:d0:e2:13:c9:
                    f6:1f:6c:f3:f3:93:2e:0a:70:01:5e:91:9b:5a:fd:
                    d2:1e:1b:90:30:83:f4:d5:26:e9:52:8a:2e:e3:43:
                    7a:a3:0a:8c:19:0b:70:bc:ce:28:ca:e5:07:ad:12:
                    a3:6d:c5:2e:82:1d:e6:5d:8b:d4:06:15:e8:6c:35:
                    a8:b4:b5:53:d0:8d:0d:7d:44:f7:da:18:54:b2:6f:
                    e2:d6:70:8f:e7:89:26:d7:54:2e:2f:c2:a8:ff:5d:
                    b2:37:d0:d6:0e:fd:66:b2:29:af:71:12:43:00:39:
                    ba:30:42:e9:69:83:2d:a4:45:7b:e3:e5:5c:fe:cf:
                    52:7b:c0:80:ae:f8:74:cd:a5:35:fe:f2:76:17:ec:
                    75:31:80:b0:a1:21:b5:c6:e6:b9:60:65:ea:9a:6b:
                    83:70:e6:e8:4a:9f:20:a6:ad:38:99:6e:2a:cd:65:
                    2d:20:38:3c:96:c9:dc:c3:8c:81:45:75:da:62:e8:
                    c9:a6:69:74:a5:40:9b:0b:18:ad:57:57:32:67:a7:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:15:D1:4E:D9:7A:05:43:93:EE:EF:CA:E2:38:CB:B8:B7:B6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f59abc42-73a3-3c1f-91aa-9547c0392769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.58.208/29
                IPv6:
                  2001:418:1401:1::/64
                  2001:418:1401:98::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:27:60:74:89:47:75:02:ea:17:cf:92:9c:c1:d4:4b:bb:a3:
         58:79:81:6e:7c:e9:c1:ad:3d:85:83:f0:e8:5f:b9:d4:11:2e:
         0f:0c:c5:e9:85:34:30:38:9a:83:3a:d9:2a:bc:0d:e7:3c:e5:
         63:b4:d3:54:a0:de:b4:7c:1e:6a:9e:dd:62:15:48:5d:02:13:
         0a:9c:c1:a7:f7:ff:42:78:7b:47:16:86:a0:e9:0a:83:c8:78:
         ae:dd:8f:d1:38:49:e2:e1:4a:48:f2:93:c5:70:56:92:c5:a8:
         77:52:a0:7f:37:00:f4:8a:56:2f:f4:d9:f3:4f:7c:ae:27:d7:
         e0:63:32:d4:3c:5d:1f:a0:1b:09:a0:16:0d:5e:ba:0f:ae:b1:
         c6:e9:c9:11:3a:a3:5c:61:04:1d:6c:43:ad:20:52:3d:8c:76:
         2b:44:0f:e3:4b:22:fe:7c:0b:b5:c4:07:5f:8d:d7:67:43:fb:
         91:8c:14:b6:db:c8:8e:2b:52:3e:2a:55:80:b9:6f:4b:2f:63:
         0a:74:ed:fb:cc:a4:a4:03:d4:74:b9:41:7b:f4:a0:d5:19:83:
         14:cb:f3:ea:a0:31:7b:2f:13:16:53:29:70:4d:54:c0:eb:4e:
         07:8a:50:0d:2e:55:c8:ab:19:7b:bf:f1:f4:c6:11:e3:b0:53:
         aa:dc:f2:54
-----BEGIN CERTIFICATE-----
MIIGXjCCBUigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbe8fMgcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGRj
ZDQ5MDVlLTUzYTItNGZhNS04NGQ0LTMwNDI5YTA3Zjc4NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK3rmw7Y3bo3HuT1gpmIMrcXNhn8LljPgZmzxRuP
r0eJdd2ZCbBFAGMD8RiWt9C0dneIBLzM/8HQ4hPJ9h9s8/OTLgpwAV6Rm1r90h4b
kDCD9NUm6VKKLuNDeqMKjBkLcLzOKMrlB60So23FLoId5l2L1AYV6Gw1qLS1U9CN
DX1E99oYVLJv4tZwj+eJJtdULi/CqP9dsjfQ1g79ZrIpr3ESQwA5ujBC6WmDLaRF
e+PlXP7PUnvAgK74dM2lNf7ydhfsdTGAsKEhtcbmuWBl6pprg3Dm6EqfIKatOJlu
Ks1lLSA4PJbJ3MOMgUV12mLoyaZpdKVAmwsYrVdXMmenbfcCAwEAAaOCA3QwggNw
MB0GA1UdDgQWBBRRqRXRTtl6BUOT7u/K4jjLuLe2bTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2Y1OWFiYzQyLTczYTMtM2Mx
Zi05MWFhLTk1NDdjMDM5Mjc2OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjA+BggrBgEFBQcBBwEB/wQvMC0wDQQCAAEwBwMFA6X+OtAwHAQC
AAIwFgMJACABBBgUAQABAwkAIAEEGBQBAJgwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsDggEBAL0nYHSJR3UC6hfPkpzB
1Eu7o1h5gW586cGtPYWD8OhfudQRLg8MxemFNDA4moM62Sq8Dec85WO001Sg3rR8
Hmqe3WIVSF0CEwqcwaf3/0J4e0cWhqDpCoPIeK7dj9E4SeLhSkjyk8VwVpLFqHdS
oH83APSKVi/02fNPfK4n1+BjMtQ8XR+gGwmgFg1eug+uscbpyRE6o1xhBB1sQ60g
Uj2MditED+NLIv58C7XEB1+N12dD+5GMFLbbyI4rUj4qVYC5b0svYwp07fvMpKQD
1HS5QXv0oNUZgxTL8+qgMXsvExZTKXBNVMDrTgeKUA0uVcirGXu/8fTGEeOwU6rc
8lQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:10 2024 by rpki-client on console-fra.rpki-client.org