Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/189817a4-d706-3353-b731-540e03d26153.roa
File:                     189817a4-d706-3353-b731-540e03d26153.roa (raw, json)
Hash identifier:          /aU9jb3LZL/Rr/Y1XAjBTjosWy6Ad28c9O0hCz3V3gk=
Subject key identifier:   B8:C2:ED:D2:05:DE:DD:0C:C1:28:FD:87:47:67:93:6F:F8:7E:B8:01
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858380F5F96A81951DD09923FE800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/189817a4-d706-3353-b731-540e03d26153.roa
Signing time:             Wed 25 Nov 2020 05:00:00 +0000
ROA not before:           Wed 25 Nov 2020 05:00:00 +0000
ROA not after:            Sun 16 Apr 2028 04:00:00 +0000
asID:                     395747
IP address blocks:        198.41.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:0f:5f:96:a8:19:51:dd:09:92:3f:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 25 05:00:00 2020 GMT
            Not After : Apr 16 04:00:00 2028 GMT
        Subject: CN=7ebbd34b-e33a-4551-9ac8-289656f3f2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:21:d8:55:11:f1:bb:1a:05:4f:b9:d5:d7:
                    74:b3:d9:a8:c4:eb:a7:e8:58:8e:e3:8f:23:5f:c3:
                    59:b9:9c:3a:28:ee:26:9d:d4:06:03:bc:c7:ff:41:
                    fe:70:59:55:90:8b:0f:4d:ae:2e:d5:37:c0:b8:22:
                    84:dd:7b:a0:f3:51:c4:b4:9d:ad:62:3b:4f:e8:dd:
                    8a:42:fd:bf:fd:78:bb:38:85:13:d9:8e:ab:18:37:
                    a3:61:92:0a:4e:46:3d:96:95:88:6f:93:17:c7:35:
                    40:98:a8:db:3c:17:4b:9b:c5:e5:9b:6f:3f:30:c1:
                    66:29:80:5a:da:69:03:3f:ff:cb:a5:77:f6:fa:e7:
                    4a:c6:95:45:d4:2f:14:93:67:f9:75:49:8b:3b:2e:
                    34:de:60:ad:1a:b6:cb:29:78:11:32:a1:35:55:31:
                    17:90:1c:a5:5d:c2:06:cd:ef:a2:5f:38:cd:26:da:
                    87:0e:7e:8c:7b:54:19:6e:38:54:59:2e:93:74:41:
                    25:b6:71:b5:d1:ab:33:88:ab:de:36:03:ea:ca:9d:
                    68:11:f0:7f:88:87:70:da:49:ce:4b:f3:7b:91:1c:
                    34:bd:36:dd:61:15:48:63:dc:84:99:87:64:03:a8:
                    92:e0:25:98:75:40:70:cb:6c:0b:a6:e7:df:64:d9:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C2:ED:D2:05:DE:DD:0C:C1:28:FD:87:47:67:93:6F:F8:7E:B8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/189817a4-d706-3353-b731-540e03d26153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b2:50:27:28:a9:d9:79:52:05:e9:c1:00:58:26:90:64:0e:
         63:90:58:3d:d5:31:3f:33:a4:78:bb:f1:31:49:86:3e:64:74:
         ee:51:39:43:5e:d9:a7:74:78:37:26:a1:92:73:9b:50:53:b3:
         27:46:97:76:fa:eb:13:a6:55:cb:73:b2:1b:c2:b0:51:fb:59:
         75:d4:b8:b9:dc:f2:54:45:fe:e5:2a:8f:78:58:c6:c7:70:d5:
         7f:f9:fd:6a:c9:73:19:1a:d1:0b:32:87:2f:d9:33:ab:38:4a:
         ad:4a:1d:1d:41:30:9a:7c:ec:c3:d3:b0:b9:d8:06:a6:0b:6d:
         a3:4d:bb:70:9b:61:fb:7d:7c:aa:fe:53:51:45:90:9c:27:36:
         96:6e:9d:51:9c:a5:4f:b3:78:00:a9:f9:86:ff:73:fb:6f:ba:
         a0:89:a1:a5:e9:0e:ef:05:fc:df:26:5e:08:f4:de:4c:2a:d2:
         00:67:e5:2d:6f:1c:4b:e0:3c:dd:fd:08:a1:31:45:de:fa:dc:
         42:87:39:a1:a6:f6:24:b6:08:92:2c:3c:09:f3:91:a4:8d:3d:
         c2:b6:ba:ab:a7:98:74:89:bf:cd:c0:d7:00:fe:1f:45:c9:f9:
         72:a8:74:39:dd:2e:fb:34:2f:a5:36:1a:b3:94:ba:77:e8:d3:
         dc:6e:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:00 2024 by rpki-client on console-ams.rpki-client.org