Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/070fe434-9972-3e96-94b5-26dd9c472be5.roa
File:                     070fe434-9972-3e96-94b5-26dd9c472be5.roa (raw, json)
Hash identifier:          pXrQBDrqo0jDig7VXiJZscO0FdCrGqVwRbfBFAhSE8o=
Subject key identifier:   9E:87:1D:98:BB:56:1A:9A:0A:1B:20:7A:22:04:30:B3:CB:E0:85:0D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AB25B
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/070fe434-9972-3e96-94b5-26dd9c472be5.roa
Signing time:             Fri 30 Nov 2018 01:10:24 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     395747
IP address blocks:        198.41.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:b2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=6e34fac7-967d-4f57-aa4d-8a1ba82105b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:d0:1c:08:5c:67:05:dd:6e:17:a3:be:a7:
                    6c:c6:57:0f:16:5e:1c:1b:a5:f4:a8:4a:1d:65:66:
                    81:fb:cd:d3:14:f2:f9:be:4d:1b:7d:46:e6:78:70:
                    a6:2d:1d:6e:02:30:95:0f:1c:6e:58:f7:2e:75:4c:
                    f7:43:02:72:69:da:60:73:fe:b6:8c:1b:6e:d3:38:
                    8c:3f:60:a0:b1:d1:c2:a4:48:c1:7b:4c:70:3a:17:
                    ed:df:de:7f:5c:2d:c2:45:56:48:89:15:66:72:98:
                    ea:8a:be:2d:82:d0:fd:4d:7f:7f:2b:b1:8e:58:99:
                    f9:ea:d6:13:a5:2e:40:45:a6:c5:4b:9d:bc:97:f3:
                    39:af:1b:a9:f8:66:13:05:71:ae:27:a7:21:ce:dd:
                    b1:58:f2:8a:16:bb:c5:6f:d9:79:ea:6a:cb:94:ad:
                    89:bb:1b:40:2b:8c:0f:fd:b9:4b:54:21:1c:bc:8c:
                    00:d8:84:c0:d1:0c:5d:1c:11:f1:f3:cd:11:70:ab:
                    81:87:97:fc:05:5d:c3:58:89:9b:7b:ee:17:b4:9f:
                    ba:f5:61:45:90:31:8f:ec:23:70:a4:99:09:c2:f2:
                    cf:f1:c4:7a:1e:f5:cc:d3:01:06:d1:0b:17:44:09:
                    eb:cf:37:da:e1:9d:cf:67:55:16:82:ef:6c:0b:5c:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:87:1D:98:BB:56:1A:9A:0A:1B:20:7A:22:04:30:B3:CB:E0:85:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/070fe434-9972-3e96-94b5-26dd9c472be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:07:ba:f3:5d:db:a7:3f:8a:68:bf:3f:e1:c8:95:d0:d8:
         d8:00:6e:7e:3e:5f:a4:55:5f:8e:88:e8:83:bc:4c:a8:08:99:
         2b:3b:5f:a0:0c:82:05:87:32:8b:b8:5a:0e:30:28:51:85:dd:
         5a:b5:77:e2:aa:78:b5:c5:18:b9:7f:59:f5:c3:f3:9e:45:0a:
         5f:97:d6:29:97:6c:d6:9c:db:ec:e5:53:69:be:ad:71:9e:26:
         c1:56:f6:9d:be:91:74:0d:d1:f2:f0:4e:e9:1a:e3:34:cd:21:
         e3:40:8a:7f:09:7e:7c:a1:ee:7c:fa:03:8c:2b:ef:f0:09:44:
         7f:aa:1e:ec:ae:5f:d0:95:ef:5a:5c:d0:51:3a:5a:61:68:bc:
         45:5f:12:9f:81:20:62:b8:47:88:d6:52:54:ae:c0:95:07:f3:
         9f:43:6f:4c:0d:d8:b0:4f:9e:42:75:9b:15:92:ca:16:3c:e1:
         6c:06:42:5c:7e:48:97:7d:0a:83:f7:0f:02:df:77:95:92:99:
         c0:aa:e4:48:06:0d:03:02:f4:4a:2d:d5:1f:b8:7f:a4:95:94:
         77:f8:cc:ae:5c:d3:e1:64:4e:2f:65:dd:e3:ad:3f:34:db:c1:
         86:91:da:b0:b9:7c:27:91:0e:e7:76:40:1d:09:c5:4a:54:d3:
         ea:14:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:58 2024 by rpki-client on console-ams.rpki-client.org