Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0885602b-b6cf-3b2e-9f19-1554649dafde.roa
File:                     0885602b-b6cf-3b2e-9f19-1554649dafde.roa (raw, json)
Hash identifier:          1ZutoITi6WP4vnbzwpGsjF3pFmUmadySoyztF9Hzc1I=
Subject key identifier:   0E:86:F8:22:F0:ED:98:E5:A9:D5:67:2C:13:0C:3E:2F:67:86:7D:09
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622941EA
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0885602b-b6cf-3b2e-9f19-1554649dafde.roa
Signing time:             Fri 30 Nov 2018 01:08:50 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:41:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5d6fa866-fd82-497b-9675-8bfb0a06af33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:8e:25:2a:b4:ff:e8:86:74:7b:eb:fe:07:
                    ce:3d:58:d9:c2:09:81:99:ab:b5:1f:61:1a:d5:36:
                    bd:c6:e9:12:8d:44:59:bc:d9:c1:ad:9b:21:66:41:
                    06:ed:3e:2e:7a:98:3e:9b:04:0d:05:14:a4:12:4d:
                    51:b7:70:72:12:55:cf:da:cf:1d:0b:7c:96:a2:42:
                    5a:6c:23:f4:6b:dc:dd:8d:f9:a5:f1:bf:d2:7a:49:
                    7e:a0:8c:61:99:29:a2:1a:bf:7a:a0:4a:81:c6:c3:
                    57:54:09:d8:f1:b6:21:3f:c9:cf:fe:cb:7d:ce:f7:
                    4a:95:e8:72:a3:c1:5f:38:47:97:e9:b5:df:09:59:
                    b7:49:4c:e8:ff:1c:f5:4e:4c:f2:c5:1d:ac:de:ae:
                    67:c8:a5:8e:dd:a9:2a:42:ad:56:8d:57:d7:66:83:
                    5b:3e:d9:49:c8:c8:00:51:35:4d:63:32:ca:52:44:
                    96:63:88:ae:71:7f:5e:ca:47:bf:ad:ed:d9:bb:dc:
                    f4:b7:4a:9e:a4:8f:c1:0c:fe:67:ea:de:5d:8a:f3:
                    d6:d4:8c:f9:7f:bf:4e:61:ea:cb:d5:fe:fb:1f:6d:
                    22:44:75:b0:40:d6:d2:5d:a4:d7:f1:19:92:48:6f:
                    f4:60:a6:5d:92:b8:9e:6c:ff:ce:7e:62:a6:62:3b:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:86:F8:22:F0:ED:98:E5:A9:D5:67:2C:13:0C:3E:2F:67:86:7D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0885602b-b6cf-3b2e-9f19-1554649dafde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:0d:81:1f:df:f6:72:0d:4f:ec:99:0d:68:03:af:8d:3f:
         54:df:a7:18:ff:79:94:9c:96:6f:bd:5f:01:4b:32:ae:25:fb:
         70:e3:e8:60:2c:da:9f:4a:3a:fc:e5:13:9b:35:c0:87:ce:72:
         86:ee:c8:34:db:be:0a:90:95:81:81:4c:37:40:fa:73:aa:97:
         df:32:cb:77:e7:50:98:5c:a4:21:c3:0a:06:42:78:31:ce:6b:
         1b:d2:93:8e:18:c7:d4:bf:7c:b4:e3:14:c7:34:48:30:5c:58:
         7d:0e:01:20:a9:e1:d4:3f:4d:cd:d5:86:81:bd:62:b2:6a:34:
         1d:ca:df:65:cd:ea:f6:01:91:72:5f:42:80:6e:9a:12:28:88:
         ae:e6:fb:c4:88:ae:cc:4f:0b:ac:85:07:31:a8:2b:8b:99:97:
         f8:79:a8:a1:a2:22:4d:80:c4:b3:0d:b8:68:61:0b:da:17:35:
         7b:ec:8d:87:5a:a8:6d:9f:f0:7f:25:2e:52:5b:7c:e2:70:6b:
         79:ed:cf:67:66:3a:27:67:0f:3c:3f:9b:68:5c:61:bb:6b:5e:
         de:6d:95:5f:60:0e:a9:c6:30:fe:9c:ae:ad:ac:d8:fe:70:5e:
         a2:70:9b:43:ff:2e:41:f4:d6:90:7f:23:10:8f:73:72:44:d9:
         fc:08:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:25:59 2024 by rpki-client on console-fra.rpki-client.org