Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04e8ab11-4d1c-3671-8b13-f768813e6f88.roa
File:                     04e8ab11-4d1c-3671-8b13-f768813e6f88.roa (raw, json)
Hash identifier:          QoQ6S0IAWOUk6C0LzUc0YAZmJbYteIIlpmhtcERKcdg=
Subject key identifier:   17:4F:5C:E7:72:0C:43:45:1C:E0:BF:8F:0A:EA:B8:10:51:55:06:92
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A97E8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04e8ab11-4d1c-3671-8b13-f768813e6f88.roa
Signing time:             Fri 30 Nov 2018 01:10:17 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        198.41.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=72b9cffe-74ee-4078-b8ff-0136c0e4c969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:2b:0f:8b:4d:be:cb:4e:df:e1:01:e1:5a:
                    33:66:a1:51:81:7b:7c:86:19:3e:d6:04:7e:94:5e:
                    c8:36:8e:e3:e4:b5:b2:15:75:e6:ac:8a:69:46:46:
                    09:bf:9b:48:59:8e:b5:34:8b:2a:25:99:9b:dd:1e:
                    ee:dc:31:72:78:10:68:a5:b1:b9:50:b2:e1:0f:a7:
                    7c:49:33:12:89:0b:6b:3d:78:72:71:07:7f:ad:da:
                    69:18:9a:c3:40:20:5c:70:04:99:06:65:41:b5:59:
                    80:ad:0a:82:97:05:12:7c:70:ec:db:17:95:cc:d8:
                    f3:9f:75:d3:96:73:01:25:e2:14:07:33:12:ed:25:
                    98:7f:a4:4c:3d:b4:12:02:69:40:92:a2:b3:4d:fe:
                    1d:e8:09:79:f5:4b:3e:e1:7a:8d:d1:be:7e:76:53:
                    95:d3:b4:c3:be:2c:11:82:a5:f6:5a:38:70:d9:46:
                    2d:15:34:88:c0:6f:c0:23:a1:91:0a:85:69:70:c8:
                    59:30:95:97:fd:d7:3a:67:a2:58:36:e8:2e:99:39:
                    3a:cd:42:09:43:44:61:2a:51:6f:95:37:b9:39:1b:
                    f3:3e:90:29:ec:62:8f:af:1b:1c:2e:c7:f1:77:c2:
                    d9:dd:0c:a5:48:15:90:75:65:19:ad:0a:da:92:fd:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4F:5C:E7:72:0C:43:45:1C:E0:BF:8F:0A:EA:B8:10:51:55:06:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04e8ab11-4d1c-3671-8b13-f768813e6f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:53:22:fb:d4:83:d4:8b:13:89:8a:09:30:54:f1:5c:7d:b1:
         22:77:99:7f:77:c9:b4:c7:41:60:57:59:1d:58:38:cf:1d:1e:
         f5:c3:94:e4:0a:9a:7f:d0:99:74:83:25:7d:95:25:6a:05:32:
         5d:30:16:ec:95:0e:3b:85:63:89:32:08:85:a4:d1:57:ad:90:
         4f:25:6f:85:18:d2:bd:d0:56:c2:7a:50:8e:20:7b:02:29:de:
         4f:84:1d:17:e0:25:df:e2:36:6a:e5:ec:ac:0c:33:ea:7e:8e:
         8a:ef:8f:10:e1:43:c1:20:0e:c5:aa:d3:3b:b6:17:b1:86:5d:
         14:0f:8c:cd:5c:48:f1:c6:d6:8f:6b:b1:46:be:8a:31:b8:8e:
         80:d4:94:9b:b4:22:ce:33:8b:7a:e9:aa:3a:0f:2c:65:0c:09:
         d6:25:00:8e:d9:03:45:a8:8b:f8:c7:29:58:b8:21:f3:4e:c0:
         22:1d:34:27:f3:43:d8:ac:e3:c4:92:9c:b1:41:0b:f6:ec:f0:
         d6:3c:c3:95:eb:c1:68:b6:ce:3c:5d:f3:bd:df:7c:c4:f7:23:
         8e:33:80:23:cd:40:69:63:7d:aa:ac:cc:d7:2f:cf:4a:82:67:
         71:35:66:71:ca:51:0a:22:2b:be:c8:99:e3:be:ac:73:22:3a:
         9a:18:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:25:59 2024 by rpki-client on console-fra.rpki-client.org