Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fa6623ff-d028-38ae-99b2-943119e5a6e3.roa
File:                     fa6623ff-d028-38ae-99b2-943119e5a6e3.roa (raw, json)
Hash identifier:          lDQwwHp62b/5Qd5y68DH3YSjF/9hLPx4AetMhnvGZc4=
Subject key identifier:   73:89:57:B3:FA:98:3F:5A:46:91:4E:E1:15:A3:EA:34:78:4E:BB:82
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642C824B8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fa6623ff-d028-38ae-99b2-943119e5a6e3.roa
Signing time:             Fri 05 Oct 2018 05:51:44 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        157.238.155.96/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:c8:24:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=3c916644-5ceb-4003-93c5-b61e77514687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:d2:0e:14:c7:45:e2:62:b1:54:7f:f3:0a:
                    4b:12:b6:e4:e0:5d:12:89:4b:07:1b:6f:18:65:a6:
                    51:d9:52:60:61:ea:3e:2a:fa:a7:47:b6:da:62:e9:
                    54:05:18:b9:ec:d0:5f:29:05:57:fb:44:96:2b:64:
                    28:49:15:9f:34:16:9e:16:9a:e1:95:09:2a:ee:be:
                    4c:19:9e:bd:15:63:8e:16:f3:fe:74:10:29:91:8a:
                    88:8c:ce:66:97:b4:94:55:6e:63:c7:3e:d4:2d:74:
                    76:e7:34:c8:58:ef:1e:63:6c:19:43:dc:14:75:01:
                    24:4d:c1:54:92:0d:ee:78:d8:28:80:fb:fc:b3:e1:
                    cf:54:c6:e7:22:98:5b:0d:2c:4c:38:0c:ba:97:8e:
                    63:58:e0:e7:9a:88:f4:32:23:d6:1f:b0:39:ee:79:
                    47:0b:d4:52:de:47:ce:0b:1f:f8:da:7d:f0:65:0b:
                    13:eb:e7:c3:b0:f6:25:6c:a5:bb:0d:b8:fa:3f:0c:
                    97:6b:50:56:35:24:38:49:b3:b3:d2:98:c9:eb:7f:
                    0c:91:c7:f2:e4:5a:02:04:c7:9d:f7:21:8d:2d:fc:
                    02:68:37:4d:8b:eb:27:83:2e:ac:b5:b0:92:c2:78:
                    ee:be:cd:aa:f5:41:66:f2:6c:d8:8d:ac:65:34:1b:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:89:57:B3:FA:98:3F:5A:46:91:4E:E1:15:A3:EA:34:78:4E:BB:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fa6623ff-d028-38ae-99b2-943119e5a6e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.238.155.96/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:40:d7:bf:16:b1:aa:91:12:e8:be:83:22:d0:f2:43:ea:90:
         a4:5e:8f:e6:b2:4d:84:91:d1:81:c8:42:d0:f9:87:70:10:1e:
         f4:46:fc:7a:39:95:4b:59:63:6e:07:e4:e7:8d:42:9e:9e:42:
         66:be:24:08:3b:2d:09:97:56:73:7d:8d:f2:fd:6b:57:85:3f:
         51:7f:57:d7:9f:a6:f5:02:08:2c:03:b9:0d:b4:84:97:39:fe:
         e5:6a:7b:d8:4b:a1:df:42:58:20:2d:59:25:ba:3e:3c:31:3e:
         26:2a:cc:c7:23:74:88:d9:1f:cc:7c:98:01:45:06:98:10:41:
         83:5d:af:44:fb:f2:dd:c0:41:77:d4:2b:b2:08:b6:3a:d0:28:
         40:17:af:6e:7e:81:36:e2:a3:29:e3:cf:a0:2c:f3:07:ea:7a:
         33:7a:07:95:d8:8d:27:fd:f0:bf:a3:3c:0f:10:47:6e:ad:ca:
         46:01:30:f0:a0:44:cc:65:a2:cf:4d:b7:c1:fc:2a:f4:7a:41:
         54:95:11:20:c5:4f:c6:6b:69:d9:c8:bd:64:26:de:09:18:5a:
         ac:e7:69:e2:62:96:b9:9a:3a:a2:25:14:2f:82:ad:ff:b5:51:
         8f:2d:57:82:1c:54:a0:3b:46:b8:27:8c:84:5d:c2:8a:cb:59:
         a0:7c:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:20 2024 by rpki-client on console-ams.rpki-client.org