Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42582837-a7c7-3702-a7f9-33029131f565.roa
File:                     42582837-a7c7-3702-a7f9-33029131f565.roa (raw, json)
Hash identifier:          ZheuveNIiRiwhOKIvBq9+MuECBeK9WPCyaSASjjab+k=
Subject key identifier:   E8:F5:22:06:8B:CF:32:B7:B5:05:E8:96:B5:FA:65:EC:6F:2B:0C:34
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A0381
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42582837-a7c7-3702-a7f9-33029131f565.roa
Signing time:             Fri 30 Nov 2018 01:09:39 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:03:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=4178ff2d-029a-4843-8f22-5db2a4bcca15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:0e:5f:e3:d1:68:cb:f5:fd:5e:a5:fc:0d:
                    4c:83:8b:1f:6d:99:a4:d7:99:48:26:da:42:0c:15:
                    dd:5e:4f:7e:4d:fe:7f:24:4a:a7:60:f2:a4:75:f8:
                    ef:1c:e0:ec:5f:c6:03:5f:7e:c3:b5:2f:16:3c:12:
                    cd:58:86:fb:f4:3d:b1:8c:5b:da:0c:e6:49:fa:59:
                    19:f6:7a:1e:7f:a7:f7:d0:64:bf:90:04:4c:c8:c1:
                    d4:2f:4b:6d:98:70:b7:29:cc:c9:32:63:e0:c7:7f:
                    11:60:0b:c5:8c:8e:83:08:88:8c:15:92:3a:0a:f5:
                    44:7b:26:12:b7:dc:03:15:f2:23:16:05:e5:9f:8c:
                    a7:e4:9f:41:69:59:d6:ff:29:42:8d:02:a2:17:7d:
                    5c:f9:f0:16:c2:bf:e4:27:c2:e8:a3:24:20:23:12:
                    a0:da:0a:b8:9c:b0:6c:b7:dd:8c:bd:67:d0:25:55:
                    17:b1:45:5b:5e:16:eb:78:8b:9f:0c:a0:c1:c7:a9:
                    55:2a:54:ea:bd:af:5a:3c:f9:bc:36:89:48:ee:6e:
                    a0:9d:27:28:a2:e6:50:c6:d3:e3:bf:fb:ae:4b:e6:
                    eb:c9:aa:59:59:89:71:cc:82:bc:46:28:24:4a:07:
                    b1:5f:f1:46:d5:17:af:69:81:5e:ff:1e:b6:cb:a2:
                    ca:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F5:22:06:8B:CF:32:B7:B5:05:E8:96:B5:FA:65:EC:6F:2B:0C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42582837-a7c7-3702-a7f9-33029131f565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:7e:f0:18:4e:ac:aa:ad:45:57:06:a6:1a:35:61:98:dc:81:
         cf:d5:b2:ed:ac:22:fa:6d:07:50:a4:b0:8a:ac:5e:f5:21:dd:
         df:4b:8f:7a:81:49:f7:3c:ca:1e:22:f3:3b:f1:9b:11:34:af:
         55:67:d4:f5:92:da:4e:43:58:40:b0:86:c4:1a:b2:8f:d3:b6:
         71:29:4e:c5:af:60:41:07:3d:ed:6b:d3:ed:1f:de:c2:cc:00:
         c0:7b:27:8a:1b:a2:af:1c:c5:01:b1:a1:6b:68:9f:30:43:f4:
         0f:eb:58:b3:5a:49:1d:ea:a1:7a:76:24:8c:f3:6e:31:a6:1a:
         c6:60:68:b8:df:0d:8b:48:ea:45:67:83:15:45:b2:13:44:5c:
         c7:eb:72:f8:b9:23:64:df:e4:44:c8:e5:d1:21:66:eb:44:ea:
         01:12:22:79:67:88:a5:a7:79:40:f6:32:90:dd:24:73:06:b8:
         58:cd:b7:3b:0c:15:97:a3:4a:0a:7d:2d:a6:ca:d4:6f:64:8a:
         ee:2d:15:be:dc:be:69:19:38:ca:4b:2e:19:24:f8:12:d0:ae:
         5b:7e:b7:a1:95:40:31:cf:53:a0:90:c3:f9:4b:00:34:27:f0:
         ff:2e:da:0a:28:ce:f0:db:73:bc:29:76:7e:46:06:06:43:9a:
         12:60:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:05 2024 by rpki-client on console-fra.rpki-client.org