Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1afcbc9a-04c8-3b44-8ee7-4c7b683c745c.roa
File:                     1afcbc9a-04c8-3b44-8ee7-4c7b683c745c.roa (raw, json)
Hash identifier:          6dk7myR43WPG7Soe358eFZJK81LPc8V2h+f8P87wNpY=
Subject key identifier:   5C:D1:43:55:E0:21:C0:DF:23:7F:22:E0:B9:D2:7B:A1:B4:2B:4D:F3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16588B70B55
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1afcbc9a-04c8-3b44-8ee7-4c7b683c745c.roa
Signing time:             Thu 30 Aug 2018 02:43:42 +0000
ROA not before:           Wed 29 Aug 2018 04:00:00 +0000
ROA not after:            Fri 27 Aug 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        173.245.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:88:b7:0b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 29 04:00:00 2018 GMT
            Not After : Aug 27 04:00:00 2027 GMT
        Subject: CN=438cc421-84cd-4e9a-965d-99694e5990e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:d8:3b:bc:35:9b:95:51:44:fc:8b:e7:5f:
                    56:11:f4:ce:a0:c0:03:00:2f:04:e8:7b:5a:b0:9d:
                    6f:59:75:7c:70:51:43:18:b0:5e:db:f8:25:c3:4a:
                    82:3f:b9:b4:e7:94:0d:a6:46:05:d8:9d:01:a5:63:
                    74:bf:07:1e:98:c7:59:95:a7:19:a7:96:20:36:d0:
                    d9:74:0d:9a:ac:ec:57:70:8c:60:83:04:f2:f9:8a:
                    51:3e:75:73:f1:02:11:00:fe:02:9b:36:62:9f:50:
                    31:12:92:f8:a1:28:2d:8a:e2:bb:7b:cf:16:ff:0b:
                    21:19:24:92:4d:c5:2c:ad:3e:2a:af:90:5e:ad:5d:
                    1c:63:a1:0b:18:25:76:77:1b:a9:d2:7f:3f:bb:d1:
                    0d:0f:94:a1:df:32:d0:1b:54:b6:16:1f:23:8e:d4:
                    07:1a:37:9c:68:24:93:17:3d:d7:a1:6c:20:e6:1e:
                    72:32:cb:89:cf:93:73:16:21:c0:be:6e:6a:fe:a6:
                    e8:e9:28:ec:84:86:eb:74:da:e1:4d:14:89:72:47:
                    21:fc:d7:18:d9:1c:a2:8b:22:96:e8:b8:6a:89:84:
                    93:b7:35:f5:f7:7d:64:15:e9:02:b5:5f:7c:99:fb:
                    7d:66:77:0a:ac:86:41:03:c6:3a:6a:07:8d:43:51:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D1:43:55:E0:21:C0:DF:23:7F:22:E0:B9:D2:7B:A1:B4:2B:4D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1afcbc9a-04c8-3b44-8ee7-4c7b683c745c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:39:f3:f4:35:9a:c8:1f:16:f7:0e:3c:b1:78:5b:82:75:
         3f:d4:65:eb:f4:b7:a2:12:bf:a2:aa:35:ad:41:5e:41:80:be:
         b4:9c:d1:86:e2:dc:6a:b4:02:b5:73:8c:b4:c7:c7:29:86:cf:
         aa:08:77:aa:08:fb:e1:c0:d7:a0:a1:20:e0:9c:6e:23:01:10:
         fa:4b:93:0f:ef:1a:4e:98:76:3f:f6:ba:11:94:3a:63:d3:c1:
         e0:75:79:57:e8:56:18:1c:f6:a9:18:2c:f1:c8:bb:43:a6:dd:
         6e:54:38:8b:d3:ac:33:bb:23:ae:9e:df:dc:f6:b8:41:c0:d9:
         c6:29:1b:5e:af:1c:62:f4:5f:c6:d5:20:d6:c4:37:c3:69:86:
         4d:4f:b8:bc:7e:c7:6e:b2:24:1d:46:48:55:22:74:16:dd:67:
         78:09:f5:b9:71:61:1e:d8:66:df:11:b5:35:4b:96:26:66:55:
         9b:09:0e:65:ab:04:0f:3d:34:2e:52:21:7e:80:23:f1:b1:f6:
         77:2e:c9:11:ea:5b:73:6a:0f:85:38:2e:7a:8c:85:bf:41:fb:
         da:d8:b1:4d:ae:38:05:88:70:00:9b:f4:86:77:be:32:9c:46:
         61:54:00:28:8d:6a:7b:bd:4d:d8:5b:01:f5:9b:8f:21:aa:2a:
         9e:7e:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:00 2024 by rpki-client on console-ams.rpki-client.org