Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bec52a2-9367-3476-a83f-22dd16142c66.roa
File:                     3bec52a2-9367-3476-a83f-22dd16142c66.roa (raw, json)
Hash identifier:          AwXVi/1vk2yBCnW+MQLvAjqayETA+h9w++pks+yzPAc=
Subject key identifier:   48:33:0C:FB:32:8E:0E:C0:EB:6D:97:FC:44:97:99:2F:A8:9F:8C:89
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229CC51
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bec52a2-9367-3476-a83f-22dd16142c66.roa
Signing time:             Fri 30 Nov 2018 01:09:25 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:cc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=10713226-9889-4fed-9e4b-d51079a104d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:8c:e9:a2:7b:1d:ff:16:5e:97:ba:d9:69:
                    b7:60:23:32:d6:77:49:de:c8:75:a6:ee:81:38:3e:
                    73:de:b3:ad:84:d3:73:66:5b:c4:fd:38:da:11:0c:
                    b7:f4:74:29:e8:ee:f5:d2:d4:92:cd:1a:2e:78:24:
                    51:af:a3:5b:f2:d1:bb:60:cc:ec:6d:9a:a5:ba:e8:
                    d7:05:2b:a1:3e:a8:90:b0:db:80:74:7e:b1:a2:02:
                    f0:65:8f:a3:8c:14:c8:f0:32:f1:9c:8f:72:e9:8f:
                    f0:94:a3:7d:4e:58:d6:b2:e1:20:17:28:da:dd:40:
                    2e:1c:ae:fd:e1:1f:39:19:5e:d6:bf:f5:4f:82:1c:
                    ed:15:da:7d:51:3d:3d:7b:61:81:0d:c8:d7:40:24:
                    1b:7d:50:27:d9:33:97:91:24:0f:53:42:74:7c:ad:
                    af:df:c6:3a:27:5a:f9:11:b2:b3:55:1f:83:91:02:
                    5c:18:0e:a9:10:a5:1a:f1:94:21:78:4b:5c:84:90:
                    9e:87:a5:90:d5:f1:b0:33:6c:97:d0:28:2d:5b:68:
                    57:90:92:7b:52:d2:d8:45:8f:30:67:23:8f:bd:a0:
                    bf:d1:e5:58:31:2d:73:b6:1c:d6:5a:02:b8:6a:0d:
                    df:5e:8a:32:93:be:e7:fa:24:4f:78:c4:b3:3e:e9:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:33:0C:FB:32:8E:0E:C0:EB:6D:97:FC:44:97:99:2F:A8:9F:8C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bec52a2-9367-3476-a83f-22dd16142c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:03:f8:b1:0f:fc:28:3e:48:d0:d7:f8:05:a0:22:5e:40:
         3c:81:ae:d7:74:18:3d:84:79:3e:f8:b6:fc:85:b8:76:ad:87:
         67:bf:ce:66:13:93:1b:aa:5c:f7:9e:e5:c9:01:c6:e7:ce:a6:
         ab:8f:b7:9c:52:ae:84:be:7f:8d:10:df:85:14:58:af:77:0d:
         7a:40:43:9f:fb:c0:e2:7a:48:77:a7:f8:0d:cf:0b:4e:29:a0:
         0d:1f:66:60:31:77:d5:11:20:9b:3e:7b:49:81:cf:03:1f:0c:
         fc:92:65:07:58:e0:a9:70:08:7c:1f:60:7b:0f:24:e9:59:84:
         21:8c:8b:8b:f8:43:24:4a:5e:b3:5d:2d:b2:30:4b:5f:47:c4:
         c3:ee:27:00:86:ce:33:36:48:27:d1:79:fe:2d:23:fd:c9:fe:
         14:ad:66:1c:c9:25:85:aa:be:03:2e:5f:b3:4e:5b:a1:f7:3b:
         6a:a5:9d:6b:17:90:cb:24:ae:3b:0a:df:b0:ae:53:de:97:4e:
         5d:e3:e2:9b:01:10:2e:19:d0:60:b8:f8:51:a2:d0:e8:13:aa:
         37:21:82:b2:1f:c0:38:64:a7:bb:b3:38:db:95:98:b4:06:32:
         a4:d5:42:f6:0a:fb:65:4c:05:67:06:b3:1e:7d:d5:db:af:98:
         f6:71:c6:47
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IpzFEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDEw
NzEzMjI2LTk4ODktNGZlZC05ZTRiLWQ1MTA3OWExMDRkNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANCCjOmiex3/Fl6Xutlpt2AjMtZ3Sd7IdabugTg+
c96zrYTTc2ZbxP042hEMt/R0Keju9dLUks0aLngkUa+jW/LRu2DM7G2apbro1wUr
oT6okLDbgHR+saIC8GWPo4wUyPAy8ZyPcumP8JSjfU5Y1rLhIBco2t1ALhyu/eEf
ORle1r/1T4Ic7RXafVE9PXthgQ3I10AkG31QJ9kzl5EkD1NCdHytr9/GOida+RGy
s1Ufg5ECXBgOqRClGvGUIXhLXISQnoelkNXxsDNsl9AoLVtoV5CSe1LS2EWPMGcj
j72gv9HlWDEtc7Yc1loCuGoN316KMpO+5/okT3jEsz7ph8sCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRIMwz7Mo4OwOttl/xEl5kvqJ+MiTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzNiZWM1MmEyLTkzNjctMzQ3
Ni1hODNmLTIyZGQxNjE0MmM2Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKeNTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAOiwD+LEP/Cg+SNDX+AWgIl5APIGu13QYPYR5Pvi2/IW4dq2HZ7/OZhOTG6pc
957lyQHG586mq4+3nFKuhL5/jRDfhRRYr3cNekBDn/vA4npId6f4Dc8LTimgDR9m
YDF31REgmz57SYHPAx8M/JJlB1jgqXAIfB9gew8k6VmEIYyLi/hDJEpes10tsjBL
X0fEw+4nAIbOMzZIJ9F5/i0j/cn+FK1mHMklhaq+Ay5fs05bofc7aqWdaxeQyySu
OwrfsK5T3pdOXePimwEQLhnQYLj4UaLQ6BOqNyGCsh/AOGSnu7M425WYtAYypNVC
9gr7ZUwFZwazHn3V26+Y9nHGRw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:02 2024 by rpki-client on console-ams.rpki-client.org