Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27393b8c-5bfe-3ad1-a9c3-9cde9ad4481f.roa
File:                     27393b8c-5bfe-3ad1-a9c3-9cde9ad4481f.roa (raw, json)
Hash identifier:          VNkpchAgCVAzskFSkA2FnsR2KXt5HmXt4Yt0jQmsNkg=
Subject key identifier:   60:2F:25:33:E0:12:D5:C7:30:E4:12:63:44:21:DF:E6:8A:E3:0E:9A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A1C5D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27393b8c-5bfe-3ad1-a9c3-9cde9ad4481f.roa
Signing time:             Fri 30 Nov 2018 01:09:46 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:1c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=e96c7b52-6cda-42fb-827a-0fb3a3704932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:f2:e1:d1:23:83:c3:4a:c6:c0:af:76:e2:
                    0d:33:f6:02:52:d6:6c:39:0c:70:bb:be:9b:fd:3b:
                    7f:52:3a:a1:a2:60:52:27:d2:97:dd:14:98:15:19:
                    18:50:d0:a4:5f:c8:71:8e:8f:7a:2f:3d:33:1f:7e:
                    c1:55:b7:4d:4f:97:2a:98:cf:34:e8:f7:e3:61:87:
                    dc:47:aa:2d:45:b7:ef:bc:c6:7b:72:86:8a:1e:9a:
                    a3:66:fc:49:d8:58:26:49:7c:92:3b:68:9a:a2:a9:
                    28:8b:0b:21:f4:2e:09:15:88:7e:8d:0c:6b:ab:fc:
                    e2:be:24:04:dd:68:70:10:06:41:66:b2:16:3b:4e:
                    3b:ad:bd:67:39:6e:1b:86:ca:36:a9:aa:76:bd:a2:
                    0c:2e:be:21:bd:20:64:7f:8d:8c:d8:25:44:9d:1d:
                    2e:26:f2:1e:a5:52:d6:a5:7d:aa:0b:56:8b:aa:ca:
                    f7:c0:a1:8e:7a:9c:0a:79:03:f3:fb:31:e9:5a:a5:
                    cc:dd:4b:8e:62:15:b8:90:e7:88:7f:3c:7c:0b:25:
                    46:f5:a4:43:8e:91:29:b8:f1:24:d8:18:b8:a6:24:
                    b9:98:bf:2f:f1:de:dd:d8:91:e8:2d:69:01:0f:aa:
                    91:1c:1b:af:c7:bd:98:95:c6:67:a1:e8:e8:20:88:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:25:33:E0:12:D5:C7:30:E4:12:63:44:21:DF:E6:8A:E3:0E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27393b8c-5bfe-3ad1-a9c3-9cde9ad4481f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:26:17:ce:ed:e3:15:c7:ae:c1:44:2c:7e:26:c1:ee:3d:a2:
         83:37:74:a4:b1:ec:5e:64:0e:58:ae:8d:4e:70:4f:32:d1:16:
         37:3c:4a:a2:58:9d:7e:d8:31:6c:29:12:bb:90:79:20:01:32:
         01:be:b7:c7:6e:71:8f:c4:8b:de:f2:f4:7a:a1:91:84:1a:e1:
         52:cb:cb:98:85:4d:1b:9e:f5:66:bd:82:1b:e6:d7:68:fb:91:
         49:47:c0:28:b2:50:9b:b0:52:ca:d5:b4:3d:ee:de:42:f0:34:
         06:ac:4b:53:d5:2e:90:e4:c4:11:be:a8:b2:1e:0c:c5:62:e3:
         fc:cd:5d:7b:60:98:ae:e2:e8:13:97:bd:ac:2d:61:86:66:3c:
         e2:10:46:53:bc:7d:13:c5:52:09:d3:4e:f6:f6:0d:db:00:3b:
         1e:83:6a:aa:d1:3e:bb:62:4f:21:1e:4d:35:23:6b:93:8f:1f:
         83:e1:23:7d:a6:8b:b9:d4:b6:fb:e4:fb:80:11:d3:0f:6e:fb:
         4f:65:43:5a:1e:1f:dc:e8:79:b0:5a:b0:e2:3e:76:14:52:85:
         e3:ab:18:e5:88:8c:36:78:77:50:37:d8:64:24:88:87:03:27:
         1b:eb:3d:9f:cb:48:a9:9a:d9:6f:97:86:fd:48:81:ba:5f:b8:
         3a:11:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:09 2024 by rpki-client on console-ams.rpki-client.org