Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa
File:                     0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa (raw, json)
Hash identifier:          fv9IPy9aYVxBDatT3/pSbU675yKKr4cjHN3rXcB1pBM=
Subject key identifier:   5A:96:06:76:7A:70:4A:3B:48:DF:DA:EE:B1:9D:46:F5:EC:CA:0A:8B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228F4B4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa
Signing time:             Fri 30 Nov 2018 01:08:30 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.65.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:f4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=f5674217-9d13-457a-ab49-486e9c3566ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:9d:ca:6a:01:1d:70:e9:96:f7:87:0b:f1:
                    52:cc:de:66:a1:4b:ee:75:e6:3d:cf:39:24:89:6b:
                    8e:ac:d7:ee:87:ef:c3:f5:39:e6:5a:84:18:dd:2e:
                    80:48:e5:08:20:89:64:4a:58:06:76:e9:c7:91:d2:
                    58:20:34:13:b7:65:63:04:2b:cf:ab:fa:f7:8b:ff:
                    51:e2:72:87:92:77:b9:33:81:22:d9:25:e1:d5:29:
                    36:47:c5:91:ff:d8:4a:a8:5d:45:52:1d:4c:c1:a3:
                    ef:2c:80:84:c3:2a:3e:c5:15:ac:cd:95:03:ed:9d:
                    21:67:72:eb:2d:9f:ca:0b:4c:bb:9a:97:78:57:e5:
                    44:80:ff:1e:17:cc:a4:52:db:e9:50:29:2e:8d:e4:
                    78:b5:94:9c:ac:b0:d5:52:6a:08:0d:f8:c0:d0:80:
                    ab:cc:19:15:18:57:8d:49:5d:5f:f2:39:fb:7c:a9:
                    45:4e:48:7e:39:a9:66:9a:2f:73:8c:3d:a1:f0:0b:
                    8c:6e:28:9e:4f:96:74:f7:ef:0c:0a:bf:82:ce:ec:
                    56:98:09:53:06:38:44:e4:4c:9a:0f:e4:2e:9c:28:
                    7a:fb:95:23:ac:a3:5c:32:e4:b1:67:da:81:b9:82:
                    02:b3:04:85:e4:c4:45:e9:8c:c6:0b:80:11:39:a0:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:96:06:76:7A:70:4A:3B:48:DF:DA:EE:B1:9D:46:F5:EC:CA:0A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad3d610-d0da-36f4-aa76-65d7de6dc345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:98:0b:d9:d8:71:ae:db:32:78:fb:b1:87:1b:28:39:33:f1:
         a4:0d:59:8a:9a:c4:b0:17:56:86:84:b7:a5:a8:f5:21:81:5f:
         86:d1:80:f9:6e:96:16:e4:b6:16:98:3d:38:9f:cd:7d:a6:b3:
         3d:d5:8e:15:72:ae:a0:bf:39:d6:7b:8b:22:3a:b0:17:08:bc:
         d0:1c:71:e7:07:cc:b7:f7:fe:c8:ee:ed:94:25:2a:6c:bd:6d:
         d9:bf:ce:76:b6:c4:9c:fa:a1:14:76:65:c2:d1:15:3e:09:20:
         76:48:0b:62:fd:1b:02:fa:bc:c1:97:2e:57:32:0c:bd:59:fd:
         12:83:27:35:19:ad:9a:9b:c8:b7:05:ec:6a:11:8b:aa:19:92:
         d0:c0:de:1c:b6:55:ae:68:53:8c:df:c0:9a:1f:c1:5a:fe:d5:
         7a:01:ba:f1:f2:57:0d:13:9e:bc:4d:49:1e:22:bf:10:59:59:
         fa:aa:49:70:26:a6:ad:13:73:4f:f4:e1:f3:56:20:b0:52:2b:
         7b:b9:ab:8e:e7:65:8b:10:80:5e:d0:fd:93:be:92:0d:a5:be:
         fe:fd:75:2e:28:a0:46:be:3e:b4:ab:42:e4:60:11:7b:c8:66:
         88:5e:4d:c0:c6:06:fc:27:6c:b2:a1:bb:34:55:a0:a7:e0:27:
         9c:2b:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:12 2024 by rpki-client on console-fra.rpki-client.org