Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d049721-974f-339d-b8e5-473f7981aab4.roa
File:                     0d049721-974f-339d-b8e5-473f7981aab4.roa (raw, json)
Hash identifier:          Yxracg5MXDW40jBxwa1sMFT9Xeh0MVpsZQ29C6k4uZ0=
Subject key identifier:   48:04:0C:98:F7:2B:36:73:90:3A:C3:01:7D:F2:83:0B:45:0D:D0:90
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762299915
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d049721-974f-339d-b8e5-473f7981aab4.roa
Signing time:             Fri 30 Nov 2018 01:09:12 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:99:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=68f95b45-030e-4515-a4ef-456d70e6b239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:6d:98:14:bc:24:3f:6e:50:1d:27:03:8b:
                    e5:a2:49:0c:c4:25:96:57:b1:41:94:90:06:f0:59:
                    6a:d2:0e:b7:33:fb:87:1a:6f:01:04:94:b7:97:ff:
                    2d:a0:00:24:4a:a2:d7:02:d8:80:21:52:1f:07:08:
                    30:c2:72:e7:4a:9b:5c:b1:97:27:e6:52:ee:da:17:
                    dc:c8:3f:9b:cf:10:ea:69:a9:a3:17:57:8f:0c:eb:
                    8b:ba:e9:da:3f:1c:7e:ff:2c:35:b7:01:04:0b:3d:
                    5e:4d:8a:22:f5:d2:43:67:2d:01:60:22:ae:e2:15:
                    34:82:a1:7b:d3:f6:f9:a4:64:a6:89:d6:77:4e:a9:
                    42:79:e4:45:ff:13:35:c5:81:78:c4:07:37:8f:54:
                    2b:05:16:33:dd:17:9b:74:c0:c4:52:33:8f:3f:de:
                    0d:97:01:46:53:46:4f:37:a6:49:cf:86:a6:07:0b:
                    cf:fd:44:48:f7:7b:02:4a:c5:04:42:8e:0d:f3:aa:
                    15:37:a7:cd:5c:2f:0e:f7:61:80:2e:e4:ab:86:be:
                    4a:52:28:56:8a:51:24:26:45:24:28:d8:2a:b5:eb:
                    98:28:ef:c5:4f:6a:ed:5a:10:3c:03:47:aa:67:8a:
                    c7:20:03:e1:16:3b:5d:fc:03:35:c2:43:dd:df:ef:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:04:0C:98:F7:2B:36:73:90:3A:C3:01:7D:F2:83:0B:45:0D:D0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d049721-974f-339d-b8e5-473f7981aab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:43:38:cf:47:a1:e6:5e:6c:59:05:24:db:88:c4:07:ef:cf:
         4a:d0:59:e7:fe:2a:ae:cc:56:89:af:2c:3b:e1:6c:1b:67:c1:
         1f:2b:54:ed:27:34:d5:b9:36:61:47:3c:29:64:20:14:eb:4f:
         6b:49:6b:51:34:2a:cf:3d:08:72:e2:50:15:a0:ea:ea:22:28:
         b8:de:54:eb:0e:49:fb:ed:f8:c1:a9:0f:81:09:a4:5d:2e:3a:
         c0:ba:83:03:2d:00:15:fa:e9:2c:85:5d:de:eb:40:7e:f0:f3:
         d9:42:3e:bc:f6:80:b2:56:ce:26:c4:c4:98:e1:f9:5f:c3:99:
         ff:98:29:40:ce:59:d3:84:9f:58:36:c3:d9:dc:10:77:79:33:
         ae:d2:0e:d5:37:9b:01:f3:12:86:f8:d7:c2:17:e6:f0:57:14:
         31:c6:42:c0:f3:93:43:ad:10:15:ca:88:4e:58:f2:67:1c:3b:
         e1:90:56:74:a9:0a:1e:78:90:93:fa:7c:2c:03:56:9f:5e:ad:
         bf:41:05:70:d7:82:61:60:c0:5d:f2:2e:69:41:28:23:28:11:
         b8:b6:94:cb:3c:6d:dd:d0:97:80:4d:5a:c4:7e:29:2d:13:4c:
         f6:ee:7d:9d:40:ef:21:07:25:fd:80:46:de:80:26:02:de:57:
         90:d0:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:03 2024 by rpki-client on console-ams.rpki-client.org