Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/41ee4cbe-8874-314d-90c6-be3f2d25f071.roa
File:                     41ee4cbe-8874-314d-90c6-be3f2d25f071.roa (raw, json)
Hash identifier:          iSpjtu+L4C/yuezO7t80PQQVkDgsWYrsMKoca1jJEcY=
Subject key identifier:   41:7C:9F:FA:64:C3:48:E1:E2:BE:B8:33:AA:02:DF:5C:6C:1A:0B:97
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229906C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/41ee4cbe-8874-314d-90c6-be3f2d25f071.roa
Signing time:             Fri 30 Nov 2018 01:09:10 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:90:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=879cae00-e366-4815-897c-00c974123259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:bd:64:c8:43:90:a0:4a:c0:a9:3a:96:df:
                    2f:26:c9:ba:02:b7:ac:a3:af:5f:30:5a:70:a9:59:
                    b5:d7:f4:d4:56:e6:fe:18:5b:8b:f1:c4:9c:62:57:
                    47:31:2c:8b:ca:dc:ec:3b:8e:e4:61:c4:33:2d:0a:
                    2f:86:c6:9c:a8:8a:2c:82:e8:7c:76:12:dd:6a:1d:
                    22:e5:36:33:c7:e2:08:b5:5d:d5:0f:86:ef:68:07:
                    a1:90:5e:28:81:56:1d:ed:5b:d9:2d:31:36:e1:5d:
                    b4:73:7e:36:d8:f9:86:05:51:d0:9d:a1:7c:7c:69:
                    43:26:8e:9e:29:25:68:85:4e:1d:4a:27:e0:7e:0c:
                    45:92:a8:e1:46:7b:2f:f8:bc:fd:a5:b5:32:1f:67:
                    9a:99:e4:9d:ad:aa:9b:a5:26:4b:d7:a0:ad:5e:4c:
                    be:a6:06:c1:eb:c0:8b:ea:b1:ef:c4:c6:13:84:d4:
                    8e:69:51:75:12:f9:b9:36:14:e4:d1:7a:80:db:fb:
                    91:22:e1:45:19:9f:5a:4e:70:7b:a1:45:47:46:e9:
                    77:94:21:99:b6:a5:9b:18:b7:ff:09:fe:a2:fc:99:
                    58:9f:7d:75:75:6f:0c:7e:db:70:65:ee:f5:13:34:
                    a4:b3:15:59:24:5b:0a:b8:12:b7:ca:3c:da:31:55:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:9F:FA:64:C3:48:E1:E2:BE:B8:33:AA:02:DF:5C:6C:1A:0B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/41ee4cbe-8874-314d-90c6-be3f2d25f071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:df:f4:48:8b:e3:25:ee:f4:df:72:d9:76:85:51:02:a1:
         f9:37:31:4a:7a:d4:1f:74:78:06:70:c5:eb:58:cb:48:e9:ee:
         de:3e:15:bd:66:16:e3:30:da:31:c0:0b:55:78:37:21:12:2b:
         f6:2e:d6:93:d7:8a:b9:82:01:ee:b0:2b:79:e9:d9:14:b4:4f:
         ed:26:c0:6f:7f:07:64:e7:09:52:28:24:b2:f9:09:1f:47:61:
         82:57:b2:81:d2:f0:dc:9f:3d:de:c1:3b:f9:a9:5f:56:d9:dd:
         3a:48:2a:de:a3:78:bf:0c:36:59:71:f8:51:f2:e0:37:bd:62:
         28:70:3e:a2:49:30:95:53:07:6c:e7:5d:ff:b6:28:7b:53:29:
         06:f9:13:40:01:6c:06:3f:e1:5a:68:2f:a5:b9:b5:38:4a:32:
         b8:ac:af:d4:dd:4a:1e:d2:9d:05:c7:1a:fd:c9:1f:9b:b2:00:
         4e:a3:ef:71:4a:83:93:7d:f1:25:8f:e7:c9:3f:34:0a:9a:0a:
         70:e6:ff:3f:b8:06:d6:08:82:52:02:7d:7e:38:b9:67:b5:7f:
         e8:b4:e0:56:fe:ba:2c:a2:8e:8f:79:ff:98:7b:f7:ae:6d:2f:
         56:a7:51:12:ad:77:db:21:3b:7e:f3:36:d0:50:10:c0:30:c8:
         db:68:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:03 2024 by rpki-client on console-ams.rpki-client.org