Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa
File:                     1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa (raw, json)
Hash identifier:          10bAEr0RPblHGs2jzb/kWPdYSWsDnoj1s1Q5/I9C2wY=
Subject key identifier:   B0:E8:8D:57:5D:A8:EF:44:73:9C:53:AD:A1:A5:10:8B:FF:9F:54:85
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A9B9EB81E
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa
Signing time:             Thu 09 May 2019 08:03:51 +0000
ROA not before:           Thu 09 May 2019 04:00:00 +0000
ROA not after:            Mon 26 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        162.158.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:9b:9e:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  9 04:00:00 2019 GMT
            Not After : Jul 26 04:00:00 2027 GMT
        Subject: CN=49d3723b-fcfd-43aa-ac27-5acc20745134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:52:3a:93:7a:06:08:92:2a:ff:06:63:11:
                    5e:b5:a9:b0:0e:38:d8:05:83:2e:23:d9:a6:e2:ae:
                    f4:00:cc:dc:56:0f:47:a2:8e:10:bb:08:d6:af:6e:
                    34:b0:4f:ae:c3:5d:ed:4c:83:68:fc:16:f6:4a:60:
                    ae:c5:99:9c:ee:0d:35:7d:98:f2:82:0f:9f:c5:49:
                    ab:65:1d:63:38:38:8b:d3:3b:30:0f:21:50:a3:1a:
                    b1:36:c8:c6:94:39:8f:b3:3b:0a:16:b6:bb:14:a9:
                    31:02:ef:11:ef:9e:74:1b:7d:6d:47:51:67:01:43:
                    d6:e5:a3:cf:37:58:27:f4:01:89:98:26:49:0f:c8:
                    e8:4e:c4:ca:d1:08:5e:2b:ac:40:e0:31:cd:59:f5:
                    71:b7:2e:74:fd:f6:fa:2d:4e:d4:06:f4:94:d4:ad:
                    c1:23:95:8f:b5:c2:07:d6:99:a4:33:fa:10:27:81:
                    7b:56:1d:2a:9a:be:d9:17:82:64:f4:74:c0:f9:05:
                    c1:2a:a2:ea:13:46:6f:72:8c:8a:d9:da:5a:54:44:
                    4c:c2:25:11:2e:2b:5b:9f:04:ef:0f:f4:9e:fd:a9:
                    4b:ae:25:b5:50:00:c9:bd:2d:37:c3:ab:ce:43:d6:
                    58:91:8b:09:31:ed:6a:a6:b2:81:36:c3:5f:04:f6:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E8:8D:57:5D:A8:EF:44:73:9C:53:AD:A1:A5:10:8B:FF:9F:54:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1eaa6a52-f650-3e5d-9b5e-7956791a651e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:a7:47:8f:f4:8d:ff:17:17:5b:a0:18:2b:24:c0:49:34:
         c0:ec:50:c3:a6:b4:77:a6:75:08:8e:e0:8d:13:64:56:61:fb:
         23:d3:d8:10:5a:2f:8e:24:cf:f6:91:2d:00:77:5f:df:d7:5f:
         18:4a:fc:04:84:e3:ea:95:99:f5:f0:26:3b:21:88:66:4d:54:
         a4:bd:a4:e0:98:5f:06:4c:bd:dd:36:70:00:0d:7d:77:a4:32:
         b5:b9:5e:a8:cd:7d:37:74:86:f3:9c:75:c2:ce:08:74:82:02:
         b3:32:19:78:7c:dd:2c:1a:1f:42:5c:a7:d0:aa:dd:a8:ec:a4:
         d8:1e:ef:cd:eb:cb:c5:09:6d:68:da:ac:b1:76:d0:d6:31:e5:
         89:51:e7:63:d6:67:f5:83:cc:a6:d3:54:13:12:6e:c3:c7:14:
         89:13:dc:09:42:5c:ee:ed:c8:06:ff:af:0c:98:be:e7:59:9c:
         aa:25:e5:7a:03:d1:a3:27:37:86:c5:ea:45:77:cc:b6:a4:2a:
         12:a9:95:7e:e4:72:62:fc:4a:15:79:cb:20:c3:c4:23:34:dc:
         f2:7e:39:43:cd:f0:a4:29:5e:82:23:9b:3e:7c:4a:e1:04:86:
         7b:4b:ed:bf:39:53:51:82:69:72:46:1b:75:ab:55:e6:46:76:
         68:96:c6:f2
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BapueuB4wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xOTA1MDkwNDAwMDBaFw0yNzA3MjYwNDAwMDBaMC8xLTArBgNVBAMTJDQ5
ZDM3MjNiLWZjZmQtNDNhYS1hYzI3LTVhY2MyMDc0NTEzNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMVlUjqTegYIkir/BmMRXrWpsA442AWDLiPZpuKu
9ADM3FYPR6KOELsI1q9uNLBPrsNd7UyDaPwW9kpgrsWZnO4NNX2Y8oIPn8VJq2Ud
Yzg4i9M7MA8hUKMasTbIxpQ5j7M7Cha2uxSpMQLvEe+edBt9bUdRZwFD1uWjzzdY
J/QBiZgmSQ/I6E7EytEIXiusQOAxzVn1cbcudP32+i1O1Ab0lNStwSOVj7XCB9aZ
pDP6ECeBe1YdKpq+2ReCZPR0wPkFwSqi6hNGb3KMitnaWlRETMIlES4rW58E7w/0
nv2pS64ltVAAyb0tN8OrzkPWWJGLCTHtaqaygTbDXwT2CjUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSw6I1XXajvRHOcU62hpRCL/59UhTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzFlYWE2YTUyLWY2NTAtM2U1
ZC05YjVlLTc5NTY3OTFhNjUxZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKezjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAhpunR4/0jf8XF1ugGCskwEk0wOxQw6a0d6Z1CI7gjRNkVmH7I9PYEFovjiTP
9pEtAHdf39dfGEr8BITj6pWZ9fAmOyGIZk1UpL2k4JhfBky93TZwAA19d6Qytble
qM19N3SG85x1ws4IdIICszIZeHzdLBofQlyn0KrdqOyk2B7vzevLxQltaNqssXbQ
1jHliVHnY9Zn9YPMptNUExJuw8cUiRPcCUJc7u3IBv+vDJi+51mcqiXlegPRoyc3
hsXqRXfMtqQqEqmVfuRyYvxKFXnLIMPEIzTc8n45Q83wpClegiObPnxK4QSGe0vt
vzlTUYJpckYbdatV5kZ2aJbG8g==
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:05 2024 by rpki-client on console-ams.rpki-client.org