Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1758a951-9865-35bb-9632-92930e32a1d8.roa
File:                     1758a951-9865-35bb-9632-92930e32a1d8.roa (raw, json)
Hash identifier:          iOOsKs1rYDOX60LV58X+UPbAMGCLd2m2rEIWVmoZ7ow=
Subject key identifier:   B1:72:14:DE:57:A8:E0:EC:1C:75:0A:2F:37:51:1C:FE:30:2A:68:A7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228E33A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1758a951-9865-35bb-9632-92930e32a1d8.roa
Signing time:             Fri 30 Nov 2018 01:08:26 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:a8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:e3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=8316fd7f-f3da-487f-bb96-04e883de9bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:b5:38:fb:7e:8b:28:56:ce:9a:27:95:32:
                    13:61:7a:6a:9b:ba:31:94:1e:42:ec:d9:8f:8b:09:
                    af:da:aa:a1:8d:8b:21:ab:e9:64:95:e4:1e:c1:f6:
                    ee:89:a7:1d:d7:7e:f5:4c:a9:20:85:6f:18:b6:71:
                    1c:9c:b2:a6:b4:ee:6b:04:1a:6b:79:80:ce:18:15:
                    07:93:5a:01:75:17:63:12:14:d0:01:3b:39:f8:c4:
                    dd:21:0a:97:11:dc:71:49:3b:5b:08:27:4c:a1:44:
                    62:9d:ba:3d:a6:15:00:e0:ca:3a:ad:7b:ed:b6:1b:
                    dd:d4:b8:2e:28:5d:5a:31:d6:c5:53:60:fc:f2:37:
                    44:6e:76:8f:07:d2:a4:01:d9:34:a5:ee:11:21:20:
                    1d:77:b6:9b:8a:26:46:64:b1:5a:4a:84:a1:b5:16:
                    9e:10:e9:41:9e:d6:e8:89:c9:53:b7:33:06:0d:d8:
                    2d:11:ea:d4:00:ca:0f:e3:52:23:53:aa:68:e4:0f:
                    29:a3:8c:bf:1b:84:7f:7b:b0:74:a0:95:70:8b:7d:
                    e6:77:7f:36:82:aa:1c:d2:d4:ca:d7:bc:fe:dc:c3:
                    1c:7b:c3:2b:cc:35:0d:e0:64:1b:ae:81:ba:41:8e:
                    67:bc:9c:dc:14:f1:1b:6c:df:d6:f9:17:8d:ed:5f:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:14:DE:57:A8:E0:EC:1C:75:0A:2F:37:51:1C:FE:30:2A:68:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1758a951-9865-35bb-9632-92930e32a1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:a8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:09:bb:39:99:0f:70:00:23:60:22:ef:c1:38:17:69:9b:6c:
         df:87:bc:68:23:37:b9:ae:1a:0b:25:e2:01:42:fc:72:b0:70:
         ea:18:2c:50:f3:8e:0c:e2:04:c1:03:4a:75:e7:c3:9f:11:21:
         19:bb:6f:60:ef:c3:53:38:b7:06:b6:c1:52:86:ea:7a:3b:b8:
         b0:b4:75:e4:fc:81:38:c4:3f:51:03:f2:56:4d:b1:4f:99:50:
         c8:f7:09:12:d2:11:c0:52:26:bb:6a:03:7f:8a:d9:1a:fa:3e:
         fc:f5:20:ee:2f:bc:8a:89:77:da:be:d4:71:21:01:0f:0c:c3:
         c6:8f:46:fc:48:20:67:1c:07:90:11:61:44:60:e0:dd:4e:9e:
         57:df:ba:81:75:fd:ee:bb:0c:bc:a4:29:62:60:0e:bd:71:59:
         a4:41:c2:85:ba:46:ba:2f:64:3b:59:ff:31:89:c8:7b:33:69:
         38:d9:fc:92:9a:d7:d5:c6:2c:b2:48:94:21:a4:b7:51:3f:fa:
         06:da:e6:27:13:f7:04:93:0c:31:f4:26:41:77:00:f7:eb:9e:
         cb:4b:fb:8a:16:cb:21:39:a5:02:c9:ae:59:9d:76:f7:3c:0a:
         1c:f3:8d:2b:8a:47:7d:97:c1:39:05:c0:ab:09:9d:28:4a:84:
         99:1f:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:51 2024 by rpki-client on console-ams.rpki-client.org