Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/45159a9a-9d09-3485-87e5-4314b9bc6dc2.roa
File:                     45159a9a-9d09-3485-87e5-4314b9bc6dc2.roa (raw, json)
Hash identifier:          VwqroZ/l4W+TyxkR3QcGtIPAxQWsSqM/9BFIHilYONU=
Subject key identifier:   16:30:B1:5A:0D:24:BD:EA:A0:C3:28:F4:83:68:65:77:FC:A3:DE:EB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229F4BF
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/45159a9a-9d09-3485-87e5-4314b9bc6dc2.roa
Signing time:             Fri 30 Nov 2018 01:09:36 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:f4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5035e1eb-ec95-41f2-87d7-a0a962d2c3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:61:3e:32:28:23:f5:bc:ef:09:9d:43:e4:
                    fe:4b:2e:15:33:35:d6:1f:fb:36:70:ee:36:28:c3:
                    32:b8:b0:38:60:1a:8d:d0:43:ad:4a:46:72:b5:ee:
                    9c:70:e4:fb:30:41:6d:b0:bd:d9:f3:05:c4:41:f6:
                    9c:20:fe:11:3e:34:ef:1a:3e:f6:9f:34:e9:67:7a:
                    0d:f7:d5:73:41:de:d8:16:cd:6e:e1:59:66:93:25:
                    6f:5b:4b:a9:4c:4e:d4:3e:26:9d:5b:2c:89:4c:ac:
                    bc:8e:7a:83:26:33:24:c3:95:d1:de:7b:a8:38:7f:
                    79:5d:8e:86:82:0d:dd:fe:1d:35:e5:5f:ad:a0:d6:
                    1a:16:c0:02:bd:1f:8a:8b:96:e3:9a:52:ac:77:2b:
                    eb:b9:e9:ef:ff:3a:34:25:2e:0f:f9:a8:af:0f:d7:
                    16:85:18:51:ac:3d:0e:f1:b3:73:9a:d8:47:d1:3f:
                    a9:6e:f2:c6:3f:8d:2d:83:c1:bd:88:b4:04:bd:1e:
                    03:10:f8:51:d8:33:8d:7d:75:30:1c:07:11:81:e7:
                    63:e7:29:96:ec:ce:a1:0e:10:ae:4a:e0:84:38:b2:
                    96:f0:c4:96:b5:81:8f:98:cd:84:8c:3e:3f:2f:86:
                    43:87:cd:ae:b6:89:54:65:eb:92:c3:97:c2:fd:79:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:B1:5A:0D:24:BD:EA:A0:C3:28:F4:83:68:65:77:FC:A3:DE:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/45159a9a-9d09-3485-87e5-4314b9bc6dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:86:57:b2:9f:61:e3:87:0c:7a:63:05:f0:28:5f:ec:6a:da:
         90:c9:6e:ee:ca:6d:6d:cd:37:b9:a7:b8:8d:35:35:91:4a:bf:
         8e:70:1d:52:4a:0b:59:77:73:02:ff:0f:29:78:c4:85:60:5d:
         ef:f5:95:44:03:df:f6:6a:5f:2f:d7:fc:9c:bf:68:aa:25:3f:
         c4:e0:3d:39:cb:e9:c7:3a:23:44:b8:cb:02:03:f4:83:0e:42:
         56:ae:59:e4:7d:49:1f:5e:50:9c:f1:37:72:be:d9:ee:47:1b:
         23:98:e3:73:85:c2:bd:1c:4b:3d:13:8f:4d:ba:38:c3:77:60:
         05:4c:40:3b:c8:9c:89:5d:73:5a:f1:dd:04:e0:9e:b1:da:ad:
         db:b9:31:fe:cb:a4:5b:97:fa:5d:42:7b:3d:70:27:f4:69:15:
         bc:94:74:ff:b0:6d:aa:6d:d5:e4:0a:19:87:52:e2:41:9c:6d:
         12:b9:a9:28:f9:09:80:db:a2:f8:43:8e:4c:22:cb:03:f4:59:
         ae:56:82:f7:38:f4:bf:79:2b:6a:bd:1e:69:c4:01:75:82:b0:
         4f:57:8d:ea:af:55:6e:62:59:12:af:bc:20:d2:55:68:cc:88:
         d8:99:dc:45:b2:85:fb:06:3c:31:31:3e:0a:84:65:ea:c7:07:
         35:fa:e1:0c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Ip9L8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDUw
MzVlMWViLWVjOTUtNDFmMi04N2Q3LWEwYTk2MmQyYzNiNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOfpYT4yKCP1vO8JnUPk/ksuFTM11h/7NnDuNijD
MriwOGAajdBDrUpGcrXunHDk+zBBbbC92fMFxEH2nCD+ET407xo+9p806Wd6DffV
c0He2BbNbuFZZpMlb1tLqUxO1D4mnVssiUysvI56gyYzJMOV0d57qDh/eV2OhoIN
3f4dNeVfraDWGhbAAr0fiouW45pSrHcr67np7/86NCUuD/morw/XFoUYUaw9DvGz
c5rYR9E/qW7yxj+NLYPBvYi0BL0eAxD4UdgzjX11MBwHEYHnY+cpluzOoQ4Qrkrg
hDiylvDElrWBj5jNhIw+Py+GQ4fNrraJVGXrksOXwv15+VMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQWMLFaDSS96qDDKPSDaGV3/KPe6zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzQ1MTU5YTlhLTlkMDktMzQ4
NS04N2U1LTQzMTRiOWJjNmRjMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxEjDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEATYZXsp9h44cMemMF8Chf7GrakMlu7sptbc03uae4jTU1kUq/jnAdUkoLWXdz
Av8PKXjEhWBd7/WVRAPf9mpfL9f8nL9oqiU/xOA9OcvpxzojRLjLAgP0gw5CVq5Z
5H1JH15QnPE3cr7Z7kcbI5jjc4XCvRxLPROPTbo4w3dgBUxAO8iciV1zWvHdBOCe
sdqt27kx/sukW5f6XUJ7PXAn9GkVvJR0/7Btqm3V5AoZh1LiQZxtErmpKPkJgNui
+EOOTCLLA/RZrlaC9zj0v3krar0eacQBdYKwT1eN6q9VbmJZEq+8INJVaMyI2Jnc
RbKF+wY8MTE+CoRl6scHNfrhDA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:03 2024 by rpki-client on console-ams.rpki-client.org