Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39e52640-d218-3a9c-a04d-e6a6701514db.roa
File:                     39e52640-d218-3a9c-a04d-e6a6701514db.roa (raw, json)
Hash identifier:          WjrMABOWyeihLT2mw9cB3Ky4BTfKhemd5Fo0Nk2HoF4=
Subject key identifier:   A3:59:81:BD:DE:90:88:03:47:01:83:3E:68:31:7A:C5:F2:F0:26:57
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A0FBC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39e52640-d218-3a9c-a04d-e6a6701514db.roa
Signing time:             Fri 30 Nov 2018 01:09:42 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=3e9bcf86-fdef-43e8-ace7-b34d68547b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:8b:c7:cf:53:4c:52:24:9e:ed:73:66:05:
                    17:f4:c9:53:dc:74:46:fe:c9:24:25:73:13:f2:ff:
                    fd:8b:52:51:87:b7:5c:e5:20:0a:39:8c:17:7e:76:
                    a5:03:ff:7e:83:ea:c0:e6:b4:e6:4b:51:2f:07:88:
                    c9:c0:d5:be:37:26:be:dd:df:41:89:56:f1:87:f3:
                    f2:e6:56:be:65:19:a0:c8:ca:f8:58:84:8f:65:e5:
                    78:0c:c0:47:0d:eb:9a:c9:ea:45:1e:c3:3a:60:fd:
                    ea:02:80:f9:9b:44:c3:92:a3:75:08:41:24:d0:be:
                    f9:9f:1f:a0:a7:3d:dc:82:c5:c9:15:2f:e9:bf:1a:
                    c0:e0:8a:5c:bb:5e:30:4f:b9:6f:ba:2c:28:3f:4d:
                    69:62:89:bf:49:41:dd:27:be:50:fb:08:d8:12:48:
                    d8:3a:4d:3f:2c:2b:d8:a9:a2:a6:25:22:55:73:c7:
                    30:a7:83:5e:66:0a:bd:8b:f2:56:47:13:01:4f:de:
                    22:09:a2:ca:5d:26:5e:dd:0d:12:80:ef:47:2a:31:
                    73:6e:ff:97:e6:b3:f8:09:05:70:fd:4c:d1:bd:29:
                    e4:60:33:d0:f6:3e:4a:ff:92:98:29:55:18:50:0e:
                    af:3f:40:25:15:d2:0f:d2:75:75:96:97:37:24:00:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:81:BD:DE:90:88:03:47:01:83:3E:68:31:7A:C5:F2:F0:26:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/39e52640-d218-3a9c-a04d-e6a6701514db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:38:dc:f2:2c:22:d0:f4:ec:de:eb:81:48:fe:6c:f8:6e:
         d2:9c:1f:c4:df:ed:81:fc:47:6a:10:37:33:bb:a3:be:50:3f:
         e6:f4:9f:5d:86:c8:53:14:cb:a3:f9:59:51:11:d7:66:01:6d:
         c5:ea:4b:54:cb:76:b1:c5:49:ba:ea:4c:b9:43:e5:f3:93:b7:
         33:9d:14:b0:92:fd:ab:66:37:e0:ed:f5:ee:66:6f:26:68:70:
         fc:4b:d4:d4:ac:62:bc:46:8f:76:cd:4a:b6:80:14:47:48:82:
         22:b4:fa:49:ac:21:b9:a8:2d:d5:47:e0:c9:0d:86:bb:fd:e0:
         05:a3:7c:8a:3b:f3:67:39:dd:b8:f9:cd:f0:2a:63:53:b3:69:
         06:f3:4c:e1:9b:28:6c:eb:93:84:19:9c:75:eb:54:1c:9c:28:
         6d:b3:bb:bd:32:ba:35:a8:e6:e0:ec:0d:fa:2b:2a:d4:26:01:
         b6:cb:73:dc:96:1a:9d:55:42:5c:d3:13:bb:85:d9:aa:b1:9b:
         ed:27:60:10:51:8d:aa:10:e4:96:72:e2:a5:81:d0:4b:ac:ff:
         86:f1:3d:00:23:6d:44:c0:35:a5:11:7c:da:b5:a6:8c:6c:15:
         33:76:6b:d9:c0:28:b6:a1:33:b2:05:87:ce:6c:8a:7f:ba:bb:
         ea:dd:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:05 2024 by rpki-client on console-fra.rpki-client.org