Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435aa88-f1c2-3896-be51-adedf770b7f6.roa
File:                     4435aa88-f1c2-3896-be51-adedf770b7f6.roa (raw, json)
Hash identifier:          XI5NvfcFoC18wYlRX68NvF64FXZ3x1zLI0RbVCOA9iQ=
Subject key identifier:   87:C5:FB:E6:92:5C:D3:2E:2D:37:0E:81:56:67:17:A3:53:1C:95:3A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762286F3E
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435aa88-f1c2-3896-be51-adedf770b7f6.roa
Signing time:             Fri 30 Nov 2018 01:07:56 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:6f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=c67859af-98ac-4725-bbba-0bda6795e1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:b7:c5:2e:df:a3:3f:89:33:fc:eb:0e:18:
                    04:00:3f:93:00:dd:0f:91:9f:1a:83:89:52:c5:e6:
                    7a:30:f4:16:91:ad:2a:0f:b2:0c:a3:ac:73:1c:34:
                    ae:1a:9b:3b:b4:c2:fc:8a:8d:18:0d:b1:e4:79:2c:
                    f3:24:57:fb:29:ee:64:07:79:ad:75:8a:a6:6f:bb:
                    ae:47:15:52:a6:0e:27:b9:cd:b0:c8:e4:e9:78:8c:
                    18:e7:e4:86:ed:e8:cb:ac:7c:df:18:69:88:1c:69:
                    8c:6d:08:9d:2f:58:68:d0:8a:1e:69:3a:8b:64:66:
                    d4:e0:2a:d0:f6:9f:6e:16:ef:ac:6c:4d:7a:ef:55:
                    d9:9d:3d:d5:01:35:9a:6b:6b:89:85:d6:08:d1:0d:
                    85:34:25:a5:bc:bf:69:77:fa:dd:dd:f8:ee:2d:5d:
                    2f:3b:18:d3:87:8e:9a:42:8a:eb:a2:a9:9f:0a:6f:
                    f4:68:3b:c8:f0:1d:3a:01:2c:b7:a8:96:45:9a:0b:
                    83:11:df:3d:96:d4:49:98:6c:38:88:94:52:5d:05:
                    46:2b:c5:f8:0b:bc:3f:2f:15:ec:4c:ac:8e:77:b5:
                    f8:96:73:f0:06:8c:f6:e5:b2:1b:17:9d:38:65:4d:
                    8d:d2:fc:e4:f5:ff:b5:dc:05:b2:60:ea:6c:ec:4a:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:FB:E6:92:5C:D3:2E:2D:37:0E:81:56:67:17:A3:53:1C:95:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435aa88-f1c2-3896-be51-adedf770b7f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:e7:7d:a9:39:24:06:cd:cb:bc:12:4b:29:22:78:f5:26:
         37:1c:e2:9a:78:39:5e:4a:10:7b:34:b2:c2:d3:fc:23:bc:24:
         4d:5e:5b:ff:c0:44:cd:07:54:3b:0c:74:e3:48:32:62:d8:0c:
         8d:e0:85:f0:26:d1:b8:69:9a:85:31:13:4c:dc:bc:99:96:a6:
         d4:e8:08:e8:f7:ff:6e:05:1e:70:82:37:29:17:88:5a:14:12:
         a9:74:6e:59:d6:50:f5:01:24:52:af:9a:22:43:7b:dd:90:4a:
         2e:ac:0b:b7:e2:ec:44:8c:eb:ba:2e:49:24:c2:51:89:34:dd:
         08:7f:44:fe:dd:87:d1:c7:3b:3e:b3:bb:65:28:04:4b:57:a1:
         65:42:38:03:4c:8a:eb:3d:06:1b:ff:58:9a:67:19:2e:45:a9:
         16:68:21:22:78:13:f1:f8:ae:45:5f:00:67:d9:09:f7:bf:75:
         6b:e9:f6:52:e4:46:2c:0c:f9:fe:48:a6:4e:70:13:0a:e9:f7:
         7c:9c:3b:ee:4b:d5:a8:14:95:e0:eb:53:5d:7e:9e:72:9f:f7:
         0b:67:65:29:ae:46:6a:5e:01:61:d9:c5:8e:85:9b:a6:f9:b6:
         05:d5:cf:15:4d:49:1d:c4:5a:aa:c4:49:84:20:6f:12:d2:86:
         63:53:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:30:13 2024 by rpki-client on console-ams.rpki-client.org