Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6a9dfd-c5a0-378f-8db3-a1a72200899e.roa
File:                     2a6a9dfd-c5a0-378f-8db3-a1a72200899e.roa (raw, json)
Hash identifier:          Vhqm7iDTeW/UAOPiPqnsdpH46ojM8eMcjpYB3pwnW1w=
Subject key identifier:   3F:B4:7D:AA:B4:4D:C3:19:AD:70:2B:CC:F2:4A:2A:9D:32:91:F9:CA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A90D6
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6a9dfd-c5a0-378f-8db3-a1a72200899e.roa
Signing time:             Thu 02 Aug 2018 21:45:45 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.65.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:90:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=c1f861ff-5b13-4911-b95c-db134f5cf077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:0c:41:a4:cd:0e:11:d5:99:4d:72:ac:0c:
                    dc:0d:e0:76:fa:eb:71:dd:94:d4:03:f4:0b:3e:90:
                    b2:bc:29:ac:86:6b:ab:b0:cc:69:78:da:b0:ab:67:
                    36:3d:56:a0:e4:08:a2:19:e8:34:d7:45:29:63:3d:
                    6a:70:78:2e:52:5c:bb:b8:c1:d9:c3:9b:17:b6:70:
                    f3:31:5f:0a:a4:0e:04:22:ef:1a:50:aa:6d:e9:0a:
                    00:1a:9e:c0:b8:52:b0:6e:9f:5f:f7:5e:af:a2:c0:
                    84:cd:dd:3b:84:46:39:dd:70:74:6b:84:74:87:93:
                    69:72:0b:61:3d:ab:5c:ec:b5:06:52:92:b2:21:3d:
                    eb:d0:b1:09:bb:26:1e:65:ab:dc:e9:59:eb:e8:b7:
                    ce:9b:39:b9:e2:0e:10:c9:ba:a5:8e:0e:00:a2:3c:
                    cb:fb:46:da:db:d7:40:2d:2e:65:15:28:cf:ba:f2:
                    55:e7:cf:9f:68:41:59:1e:b6:ca:93:ec:34:61:3e:
                    9d:f6:7b:1b:df:5b:eb:9b:9b:58:19:93:f5:ce:24:
                    c7:27:3b:a9:46:5d:80:23:45:58:3b:f3:c3:25:97:
                    b2:b2:82:f3:2c:e2:8a:68:3a:53:8c:69:e1:90:45:
                    fd:f0:6f:52:3f:b3:84:44:7e:46:ee:4a:9b:37:76:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B4:7D:AA:B4:4D:C3:19:AD:70:2B:CC:F2:4A:2A:9D:32:91:F9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6a9dfd-c5a0-378f-8db3-a1a72200899e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:29:4b:3a:be:29:c0:87:de:ea:56:57:b4:cc:da:5d:de:99:
         dc:6a:25:94:ee:ae:90:2d:ab:43:14:42:2b:0c:51:9d:b8:38:
         cf:2d:4b:e3:6d:57:c9:18:cf:c6:ea:cd:68:17:ff:70:62:7b:
         6f:ac:89:27:ad:6a:3c:93:c1:6a:c4:e2:65:63:e8:43:9b:de:
         93:f6:ee:20:50:d9:78:e4:38:05:c0:29:57:8f:a2:b7:4d:94:
         66:31:41:d4:84:68:01:ba:ad:4a:63:51:70:ff:8b:08:6d:c7:
         9a:70:46:5e:b8:00:d1:f3:fc:33:dc:46:a5:7b:68:8a:9e:27:
         4e:08:93:02:7b:87:35:2c:71:92:0d:01:8b:31:a2:fc:26:e2:
         9c:67:34:3f:5e:27:74:91:e5:b2:03:da:82:e6:ca:32:a4:b6:
         e8:80:19:e4:56:9a:f0:44:8a:06:1f:3a:90:0d:b9:24:67:ff:
         60:76:74:01:ca:1a:7c:87:28:e2:d1:8f:0d:aa:ff:15:1e:76:
         c1:9a:2a:39:b4:a6:35:3e:a3:1b:22:e6:ec:d7:6f:9b:36:29:
         d4:51:db:2f:e2:03:6f:2d:f4:a1:c7:5e:b6:1f:45:b9:ad:59:
         5a:d5:0b:50:86:0f:72:65:fd:8f:87:ad:a6:1c:1f:f6:2b:60:
         42:a1:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:55 2024 by rpki-client on console-fra.rpki-client.org