Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25fb2802-2288-3076-beba-0720c3f7b365.roa
File:                     25fb2802-2288-3076-beba-0720c3f7b365.roa (raw, json)
Hash identifier:          QwSKpMKJryvGaZtps7T4AwFlTK9OfnOHNCDdXvNAq8U=
Subject key identifier:   3B:BE:47:94:A2:D0:F9:C8:96:A6:0F:52:AD:19:F6:89:86:60:3A:0B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A23D4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25fb2802-2288-3076-beba-0720c3f7b365.roa
Signing time:             Fri 30 Nov 2018 01:09:48 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:23:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0f64b9fe-72d8-4be4-92df-9dbe79fc8827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:39:12:98:38:9b:8d:de:fc:57:61:d8:2b:
                    28:b2:a5:35:50:de:91:92:33:c1:96:dd:5c:4c:2c:
                    09:ca:b5:65:44:39:ec:6d:04:17:22:3d:4c:ff:5e:
                    37:f2:9e:a3:a3:7b:9f:2e:bd:2c:4c:ed:d0:25:f3:
                    10:95:96:2d:93:f8:a8:01:f0:32:88:68:67:e0:cd:
                    03:39:b5:28:26:d9:71:fc:87:96:9a:81:a5:b1:03:
                    4d:5e:45:92:fd:aa:e7:e9:ff:49:0b:ff:0b:62:1c:
                    03:e5:e3:ba:76:72:c5:10:e1:3f:1d:79:97:71:58:
                    cd:cb:6c:33:c0:69:bb:e0:c7:9b:56:99:35:40:66:
                    df:1a:40:05:18:3c:96:ed:3f:dd:c8:18:47:0d:21:
                    98:91:e4:f4:c8:24:1f:c6:b2:4b:d8:65:65:21:db:
                    4f:e8:53:c5:15:d3:53:24:1c:3d:96:6a:6c:36:a0:
                    6d:87:32:80:75:81:89:af:3e:bb:68:2e:f5:fa:a3:
                    00:00:2b:cb:df:da:90:74:03:44:5e:f3:ca:78:ae:
                    43:a0:5e:f5:0d:0f:ed:1e:dc:2b:0b:7b:ae:f6:02:
                    bc:64:8e:c0:ea:20:5e:9c:ba:5d:67:70:06:73:a3:
                    ca:ef:8e:a0:96:45:a1:66:f2:b4:db:26:4f:48:c1:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BE:47:94:A2:D0:F9:C8:96:A6:0F:52:AD:19:F6:89:86:60:3A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25fb2802-2288-3076-beba-0720c3f7b365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:99:5e:9a:f8:2b:0b:36:dd:34:f2:5c:cf:8e:75:a0:d0:65:
         c1:e4:5d:4f:da:88:9e:91:7f:49:84:7f:c9:08:1b:e5:83:21:
         7b:60:30:4a:94:db:fa:51:64:50:e0:9c:47:dc:6a:39:11:b8:
         4c:58:3c:e6:62:db:21:84:b2:b1:45:3d:45:86:a4:7a:9a:70:
         34:76:f2:e2:30:a1:5f:66:d3:84:d4:74:4d:50:e7:44:ff:c9:
         46:71:54:c6:d4:8e:3f:82:b3:46:07:0a:b2:7c:75:ff:c8:a2:
         c8:2a:86:fc:df:a8:26:d6:cd:f0:69:4f:b4:fd:8d:1f:96:28:
         a5:31:74:7a:04:4e:08:68:8a:f7:4f:3c:1f:10:3f:64:0c:a7:
         fe:94:81:3e:e5:aa:c1:be:2d:84:51:e1:aa:8b:d5:b9:d4:55:
         65:97:ba:31:1a:3f:57:1c:12:4b:5e:39:65:98:03:0d:68:db:
         46:d2:c7:57:6b:1f:86:df:62:19:be:f1:03:88:1f:48:cf:e5:
         6f:08:f4:fe:96:47:65:36:8a:41:b2:99:ce:1d:15:e4:35:9f:
         9e:5b:0f:58:d9:7f:0b:ca:bf:48:c2:3b:ad:a2:53:de:74:6e:
         98:16:6b:27:89:92:df:69:23:7e:d6:77:9d:09:f4:ec:75:2a:
         8b:cb:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:30:12 2024 by rpki-client on console-ams.rpki-client.org