Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b911d76-8064-3917-aae1-5f366cb731d4.roa
File:                     1b911d76-8064-3917-aae1-5f366cb731d4.roa (raw, json)
Hash identifier:          oN50IxIyPQBjco/z5LGkAh3QorZbePQvv9AFARe0yq0=
Subject key identifier:   5B:14:70:44:42:BA:95:47:2C:D5:0A:A2:20:2E:C9:3F:4E:79:AB:DD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228F201
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b911d76-8064-3917-aae1-5f366cb731d4.roa
Signing time:             Fri 30 Nov 2018 01:08:29 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.65.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:f2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=ea66b8a4-93fb-4bbb-ae16-1800965e6c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:55:b7:a2:d3:91:44:fa:60:89:7c:85:5a:
                    24:7f:42:22:29:69:86:61:3f:df:f4:84:28:36:b1:
                    64:26:13:d3:59:4d:ce:e5:26:a6:5f:89:0e:8b:23:
                    ce:4b:d6:ec:0a:41:84:4c:2d:5a:84:17:1b:9c:77:
                    be:9b:89:f6:ad:d5:8b:c1:1d:60:76:2b:6c:b4:ee:
                    3d:04:cb:20:d3:85:a1:43:31:ae:b0:24:e8:2c:d4:
                    f1:3b:7a:3e:2d:59:21:49:01:3d:42:f0:ab:a7:73:
                    45:f4:0d:62:a6:2b:92:94:3a:c8:b5:e9:d3:12:71:
                    82:8c:7d:21:39:fc:b1:23:30:69:d8:dc:93:13:01:
                    8f:a1:6a:94:fe:b6:52:11:6f:ba:7c:1b:c9:e7:bd:
                    d3:4c:fc:83:3a:53:bd:6d:04:7a:04:df:13:20:3e:
                    c8:2f:f0:ff:48:2b:13:97:fb:7d:58:48:7f:08:83:
                    53:a8:6c:35:da:9c:59:23:e9:95:78:08:22:a8:18:
                    8f:75:39:4b:63:37:de:f0:cf:99:88:0d:70:93:71:
                    a4:88:fd:1e:e9:e2:75:fd:e9:a5:58:12:0f:9a:12:
                    f9:94:7b:ad:cb:2b:f7:db:1f:9c:46:68:c3:b2:92:
                    c8:9a:35:e0:da:13:d8:96:cc:59:93:d5:82:c3:4f:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:14:70:44:42:BA:95:47:2C:D5:0A:A2:20:2E:C9:3F:4E:79:AB:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b911d76-8064-3917-aae1-5f366cb731d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:97:bc:13:46:5c:ea:61:ab:4d:45:78:fb:eb:f1:93:c0:
         58:ce:63:89:bc:e1:e0:78:c5:7a:73:3c:9f:7f:fd:92:e7:3d:
         b3:6a:ef:11:8e:82:5f:2e:1b:f4:6f:24:00:a5:74:93:28:50:
         47:cc:cf:67:65:aa:69:e4:f0:7c:75:c8:ec:c7:80:f2:ae:2b:
         c9:96:f1:8a:72:0c:ab:e3:9c:c6:89:a1:e2:e6:f8:4e:ca:9c:
         3b:23:86:6c:15:0a:12:aa:7f:25:10:06:c4:ba:57:a4:23:59:
         ad:eb:02:7e:99:f0:3b:ae:56:d7:1b:a8:26:40:f0:0e:e9:23:
         22:0b:d7:65:27:d4:d8:da:39:a3:e0:92:de:54:45:60:68:c7:
         d5:de:79:f7:de:52:c3:3b:57:71:ad:da:6e:4b:1d:44:27:a3:
         71:18:0a:dd:e4:9f:c3:ce:2e:d0:a9:53:04:8b:b5:3f:82:d7:
         c3:0e:03:88:55:74:d0:1f:f6:4d:29:e1:59:1f:6f:bd:34:cc:
         22:94:3c:89:94:c7:7d:0d:3e:51:40:9e:96:d3:57:0f:03:ac:
         59:c0:11:5e:a4:60:18:c2:ec:cc:2c:7a:4c:05:05:7b:33:ee:
         2e:a6:37:51:78:77:b6:49:3d:61:b4:d0:19:b0:1e:d2:24:16:
         02:da:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:04 2024 by rpki-client on console-fra.rpki-client.org