Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2924a138-6edb-3b08-bea9-706c5263bd5a.roa
File:                     2924a138-6edb-3b08-bea9-706c5263bd5a.roa (raw, json)
Hash identifier:          itcQX/iwsOpSyH54ch7MVau25UxipPw07itfhyT/XvI=
Subject key identifier:   5B:D6:A1:2C:C0:77:07:01:EA:28:C7:20:38:7D:0E:02:7D:37:39:91
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AACB2
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2924a138-6edb-3b08-bea9-706c5263bd5a.roa
Signing time:             Fri 30 Nov 2018 01:10:23 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        199.27.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:ac:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=912beb55-6cef-4017-828a-0cc49f18a332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:38:ac:7f:89:8b:fc:6e:2e:b8:93:b9:ef:
                    cd:3f:2a:ef:2d:fa:cd:dd:32:9a:4a:ed:a8:b7:c6:
                    2d:a4:6d:8a:d2:40:e1:89:89:05:5d:c1:cf:62:14:
                    96:e6:bc:5e:ec:91:bb:1d:a8:37:6c:bd:5f:d2:d1:
                    a3:fd:da:a6:2c:f0:bc:2e:4e:e5:63:8b:c3:78:4c:
                    34:17:d0:cd:f1:e3:b5:f3:18:8a:60:8c:f5:ac:08:
                    27:ca:e4:9e:dd:68:16:53:c1:32:12:64:67:ac:6a:
                    eb:c6:2a:5c:7a:40:98:56:a4:b9:11:c1:98:ff:ca:
                    66:d9:7f:8e:8a:8d:33:ba:ca:6e:d6:d9:21:b0:e5:
                    e1:ec:a1:11:66:a0:ce:66:b2:1c:78:04:82:30:f0:
                    56:42:73:1b:8d:84:31:c8:0e:9f:b6:78:1b:77:b9:
                    67:f5:99:de:06:ac:0e:c5:dc:8c:52:0f:cf:78:8a:
                    d8:b3:14:25:64:e2:72:8e:2f:ba:5b:75:d3:40:2d:
                    4b:5c:bb:87:aa:9d:96:00:14:62:75:94:b0:16:4e:
                    a6:5a:a4:48:3d:59:75:62:60:32:f6:bf:e0:b8:92:
                    92:cd:6a:9a:65:ea:40:54:c3:aa:02:0d:41:dd:38:
                    87:c8:eb:38:01:01:d2:68:a4:44:a7:58:95:ff:46:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:A1:2C:C0:77:07:01:EA:28:C7:20:38:7D:0E:02:7D:37:39:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2924a138-6edb-3b08-bea9-706c5263bd5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:27:e0:00:65:80:7c:38:f9:e1:95:25:22:29:3a:81:c8:0c:
         bd:41:32:0f:c6:de:f0:33:d7:c8:fd:b9:5a:61:7b:56:e0:8a:
         69:fd:6c:58:78:e0:61:73:3e:0f:25:e4:ca:3e:02:a4:2a:2f:
         ba:14:b3:e7:55:52:46:03:96:b1:46:fe:bb:0e:62:c9:f0:c4:
         a5:5b:88:7c:d8:03:90:31:c1:27:74:d4:ba:ac:6b:f8:25:78:
         51:39:3c:2f:a1:f9:69:b3:c2:ae:f5:75:e3:bf:c7:75:23:90:
         19:30:9a:a2:ab:4a:5e:2d:fd:a3:7c:55:f9:3c:ba:be:7d:96:
         3e:a9:67:12:7d:de:e2:df:69:42:29:5f:8a:7e:35:01:ad:ff:
         f3:8e:be:27:a7:b5:37:21:73:de:57:a5:f8:20:59:ae:5f:e7:
         a3:9f:e3:d4:c1:b4:02:7f:ab:77:03:71:9d:be:50:ff:44:0d:
         5d:28:dd:d6:4f:85:45:99:e3:01:e6:2c:0c:b7:5d:be:10:5a:
         8c:e3:72:b4:42:b4:02:e2:c8:fa:79:ed:98:a4:db:57:74:29:
         58:81:78:f1:70:29:c2:4b:77:ac:a3:64:9a:80:8b:24:2d:fe:
         33:90:06:8e:a2:bb:7c:ef:59:18:a4:08:3c:89:88:83:88:27:
         4c:00:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:01 2024 by rpki-client on console-ams.rpki-client.org