Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1569bd53-3571-3447-844a-0445e2bf99ab.roa
File:                     1569bd53-3571-3447-844a-0445e2bf99ab.roa (raw, json)
Hash identifier:          vO4DU7iK6qXV2cMHhNjpmhbxuAUHlVcaYANjSLlNH3g=
Subject key identifier:   1A:3C:A5:70:B0:1D:06:05:20:DC:82:00:BB:FE:EA:14:17:63:D7:60
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583B99496D4BC8E025476156FFC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1569bd53-3571-3447-844a-0445e2bf99ab.roa
Signing time:             Fri 15 Oct 2021 04:00:00 +0000
ROA not before:           Fri 15 Oct 2021 04:00:00 +0000
ROA not after:            Tue 16 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:99:49:6d:4b:c8:e0:25:47:61:56:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 15 04:00:00 2021 GMT
            Not After : Nov 16 05:00:00 2027 GMT
        Subject: CN=fe50549a-ad27-4c3d-9dca-3e193158bc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:82:45:3a:12:c5:f5:0d:f1:0a:18:8e:d5:
                    8d:85:45:50:b6:61:e4:d3:b5:64:4d:a5:79:2b:77:
                    70:8e:88:59:d3:60:74:11:09:63:90:32:7f:00:16:
                    8d:9c:45:c9:1c:88:00:6b:32:5a:f2:ad:fb:9f:35:
                    a4:02:e8:bc:2f:44:a8:37:bd:27:63:72:0c:8d:ff:
                    9b:8b:c0:56:61:8a:a3:9d:ee:bf:5e:b8:76:96:62:
                    d0:39:fe:5f:aa:ca:90:f9:96:ae:b8:72:d6:1f:34:
                    ff:c1:e8:c8:b4:8d:3a:4e:a5:25:82:c4:f7:ea:1a:
                    78:a5:2a:c6:7b:5b:67:fd:1b:5a:8b:cd:59:02:a2:
                    07:09:3b:64:44:ba:35:9b:26:5b:45:66:0b:58:15:
                    33:4a:4c:9b:a9:2b:45:0b:88:0a:62:48:9f:6b:fe:
                    61:8d:e2:d1:58:16:b4:38:df:38:0e:eb:3e:59:83:
                    a8:2d:f5:2c:cf:26:e1:77:ce:85:2b:e4:d2:68:84:
                    7c:5b:a5:ff:46:ca:07:13:57:77:d9:9a:22:64:8b:
                    63:ec:37:7f:7b:b0:7a:8d:4f:7d:80:ac:cb:cd:8d:
                    e6:d2:e6:cc:46:d7:7e:9e:74:d0:73:d2:8e:75:78:
                    03:63:86:1f:89:ae:ac:88:d0:6b:57:2d:f2:25:93:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3C:A5:70:B0:1D:06:05:20:DC:82:00:BB:FE:EA:14:17:63:D7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1569bd53-3571-3447-844a-0445e2bf99ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:82:08:fd:ac:97:db:61:7a:04:b0:63:de:c0:89:36:4c:
         36:6f:d9:70:52:a0:c0:ff:f9:8f:3b:57:20:86:45:63:46:53:
         7a:ea:5a:0f:a5:39:6e:a2:ef:38:8e:91:2d:da:02:d8:75:90:
         e5:34:1f:bb:4e:b3:a9:b7:06:a4:76:ce:d1:9a:15:ac:83:d4:
         c4:ae:c5:54:b8:e4:9f:40:6d:92:97:a6:98:11:e7:d3:59:7f:
         4c:de:1a:66:e2:71:18:a8:56:17:da:a6:31:02:be:d3:34:d4:
         70:3a:8c:74:ac:cb:4d:e6:2e:99:79:fc:8a:f6:53:9c:37:7f:
         82:bd:3b:1a:d6:fa:f6:39:81:4d:7e:b8:62:3c:98:e6:05:0b:
         fb:97:14:bc:bb:ad:5c:01:87:72:c7:a8:91:e1:5d:1d:c0:86:
         bd:f7:6d:25:1a:a2:36:9b:02:cd:e3:b6:9c:7d:9b:ba:65:32:
         66:ce:41:65:10:6f:e1:d4:5c:44:f3:2b:ee:93:61:e3:1b:b6:
         3f:98:a0:7f:24:07:a9:a7:3c:32:ef:36:a0:91:92:65:74:be:
         98:1f:90:8e:3a:7d:4e:f1:8c:a1:c3:a1:8c:f2:31:73:14:de:
         98:45:43:f8:54:da:88:05:e7:8c:5c:9f:f1:c3:ea:4b:6a:e4:
         ec:70:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:54 2024 by rpki-client on console-fra.rpki-client.org