Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/306e2ab4-b69c-39cb-a0b3-447f72572d51.roa
File:                     306e2ab4-b69c-39cb-a0b3-447f72572d51.roa (raw, json)
Hash identifier:          2LPx9g5aMZL/zI89fXe9hx6aUPrM2SQ1d25+Q/bDbrc=
Subject key identifier:   AD:56:FB:4D:43:6B:13:3F:A0:E9:15:E3:7D:C2:70:58:AD:F7:01:66
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AFB51
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/306e2ab4-b69c-39cb-a0b3-447f72572d51.roa
Signing time:             Fri 30 Nov 2018 01:10:43 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        198.41.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:fb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=a8eefe8e-5fcb-4af2-9d20-308e8b994f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:7b:73:eb:19:18:90:77:67:cc:54:e6:4b:
                    95:9a:e1:9c:fa:b6:83:0a:11:60:5c:3f:1b:21:e4:
                    30:f3:1c:74:84:77:90:12:4a:48:c0:32:2c:f3:84:
                    16:f0:93:66:21:79:44:31:13:3a:88:fb:34:16:2d:
                    29:1e:a6:1b:f0:95:9e:ea:2e:c2:6f:3d:dd:d3:19:
                    0b:19:3d:3f:54:7b:85:10:10:70:ad:de:3c:49:13:
                    b1:fd:d7:17:9e:2b:6b:6b:dd:c4:f5:bb:d8:82:b4:
                    00:dd:93:3f:ec:9a:67:81:46:94:69:6d:44:b1:31:
                    bd:0a:e6:bc:81:89:d0:7f:9c:8c:0e:17:71:1b:38:
                    d3:4d:af:50:bb:a6:fd:8a:ef:ed:7d:d0:9d:b1:26:
                    dd:7a:0a:12:45:a2:51:eb:0a:1f:96:35:e9:2c:16:
                    ec:c6:7b:af:96:b6:9a:a1:4f:46:01:88:8b:06:ce:
                    3a:29:e8:cf:2e:ee:81:0c:05:39:f9:5e:38:f2:2b:
                    3b:9b:f0:29:a0:aa:9f:de:aa:dd:33:7a:3e:e3:01:
                    e0:45:c0:65:e3:ad:7c:32:23:3f:2b:d7:74:65:16:
                    fa:d8:cc:73:c4:95:6a:05:aa:fc:63:3a:f1:10:90:
                    44:68:8b:19:ee:5f:89:2c:a6:ed:0b:7f:af:30:cb:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:56:FB:4D:43:6B:13:3F:A0:E9:15:E3:7D:C2:70:58:AD:F7:01:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/306e2ab4-b69c-39cb-a0b3-447f72572d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:15:b9:ea:30:a2:f3:b9:c5:a4:f9:c7:65:e6:b7:cc:40:ae:
         7e:61:06:97:c1:8f:79:db:78:38:6d:c3:8a:fe:7d:1c:cc:63:
         36:b9:a6:32:6f:b2:86:8b:63:e8:28:f8:36:3f:cb:a9:6c:60:
         70:b6:f8:ba:da:6d:71:ee:3f:b1:73:6c:07:d1:a6:6c:ad:d1:
         7e:0b:37:37:aa:96:52:1d:fc:47:ca:3f:12:4b:a7:41:51:1a:
         01:49:de:06:eb:10:12:4c:ef:11:2f:06:69:96:36:6b:7b:45:
         86:e2:fd:1a:5b:7b:08:05:4e:56:ae:32:e4:4a:cc:0e:fd:39:
         80:1f:28:af:25:9a:b3:71:12:4c:e2:f9:8a:fa:c8:59:0a:f1:
         c1:9b:b2:61:1f:bc:59:b2:c2:fb:01:1e:98:91:8e:79:d7:2f:
         ad:f1:fb:3f:c8:2e:b4:21:f9:68:2e:1b:11:22:e4:19:2c:a9:
         21:27:5f:bd:22:d6:6a:58:a0:d6:5c:a3:ad:39:22:3c:84:39:
         17:a6:2c:f5:ee:20:5c:92:40:c7:a6:54:3b:ff:21:ef:4d:59:
         e5:8e:b3:ac:92:97:5a:74:28:7a:5f:62:d5:87:37:b2:2f:14:
         b9:8a:ed:b7:61:15:2f:ae:61:fc:48:9e:3c:dc:57:79:02:1c:
         04:22:55:9b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Iq+1EwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGE4
ZWVmZThlLTVmY2ItNGFmMi05ZDIwLTMwOGU4Yjk5NGY4NjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMh1e3PrGRiQd2fMVOZLlZrhnPq2gwoRYFw/GyHk
MPMcdIR3kBJKSMAyLPOEFvCTZiF5RDETOoj7NBYtKR6mG/CVnuouwm893dMZCxk9
P1R7hRAQcK3ePEkTsf3XF54ra2vdxPW72IK0AN2TP+yaZ4FGlGltRLExvQrmvIGJ
0H+cjA4XcRs4002vULum/Yrv7X3QnbEm3XoKEkWiUesKH5Y16SwW7MZ7r5a2mqFP
RgGIiwbOOinozy7ugQwFOfleOPIrO5vwKaCqn96q3TN6PuMB4EXAZeOtfDIjPyvX
dGUW+tjMc8SVagWq/GM68RCQRGiLGe5fiSym7Qt/rzDLm2UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBStVvtNQ2sTP6DpFeN9wnBYrfcBZjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzMwNmUyYWI0LWI2OWMtMzlj
Yi1hMGIzLTQ0N2Y3MjU3MmQ1MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMYp2DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEASxW56jCi87nFpPnHZea3zECufmEGl8GPedt4OG3Div59HMxjNrmmMm+yhotj
6Cj4Nj/LqWxgcLb4utptce4/sXNsB9GmbK3Rfgs3N6qWUh38R8o/EkunQVEaAUne
BusQEkzvES8GaZY2a3tFhuL9Glt7CAVOVq4y5ErMDv05gB8oryWas3ESTOL5ivrI
WQrxwZuyYR+8WbLC+wEemJGOedcvrfH7P8gutCH5aC4bESLkGSypISdfvSLWalig
1lyjrTkiPIQ5F6Ys9e4gXJJAx6ZUO/8h701Z5Y6zrJKXWnQoel9i1Yc3si8UuYrt
t2EVL65h/EiePNxXeQIcBCJVmw==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:05 2024 by rpki-client on console-fra.rpki-client.org