Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48f65e32-5d90-3802-bb8b-5f2041744e8e.roa
File:                     48f65e32-5d90-3802-bb8b-5f2041744e8e.roa (raw, json)
Hash identifier:          7FAMh85qDM9erQvibu+jioqZQHbPNctkstzmp5rMqwo=
Subject key identifier:   17:9D:44:C7:9B:34:7A:C7:24:1C:CF:A0:D9:89:31:7E:E6:63:1B:D7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762291D72
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48f65e32-5d90-3802-bb8b-5f2041744e8e.roa
Signing time:             Fri 30 Nov 2018 01:08:40 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        108.162.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:1d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=d050dc2b-653b-403e-9095-c283f1ba9154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:f4:86:cc:9e:d5:cc:73:e8:ff:02:67:de:
                    cd:f8:d8:e7:1e:25:cb:cc:8b:b7:13:2d:92:6e:b1:
                    bc:1f:72:f6:41:ab:0b:bd:65:2f:8e:d6:b8:a9:e5:
                    6a:26:74:d6:ec:97:17:09:46:e7:a3:3b:e6:ff:f1:
                    fb:d5:bd:5a:f4:19:b5:6e:e0:11:5e:22:70:99:a6:
                    b9:63:77:86:bb:88:9d:44:cc:72:34:53:d2:fb:d2:
                    d5:cb:5f:d4:d8:6d:ae:9c:9e:0c:ab:02:e1:71:92:
                    43:3e:1a:80:6e:8b:55:f9:2f:cc:ec:e7:24:40:a0:
                    df:1b:b4:f2:90:60:33:da:ca:04:14:44:60:eb:5d:
                    31:b7:33:7f:50:3a:42:bc:06:a4:42:fd:6b:23:a2:
                    d4:1e:61:ed:02:6e:c7:3f:9a:e9:b9:c5:7d:f5:41:
                    7c:92:42:2d:11:ba:1d:61:a5:96:62:1e:82:df:3e:
                    f6:46:d7:04:67:cb:b1:ca:9d:be:1e:57:14:ae:f5:
                    82:41:be:d3:1c:8f:47:e1:ae:48:83:b0:33:6e:ae:
                    91:4d:33:92:1a:4f:31:1d:e2:14:61:86:53:df:d6:
                    fe:46:5d:5c:9d:88:fc:1a:68:3f:7c:73:ac:4c:39:
                    93:91:17:6f:bd:49:ea:3b:c4:ad:99:21:b6:83:11:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9D:44:C7:9B:34:7A:C7:24:1C:CF:A0:D9:89:31:7E:E6:63:1B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48f65e32-5d90-3802-bb8b-5f2041744e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:47:04:74:87:b8:a5:0a:0e:54:22:5c:f5:be:e1:50:e4:
         3e:46:10:53:ae:e8:93:cc:9a:40:a0:af:b3:d9:4a:6f:49:6a:
         5b:da:65:a8:f3:49:34:28:90:83:6c:b8:9e:21:55:9e:f2:16:
         a1:83:7b:cf:e9:7e:2f:47:96:19:0c:00:9d:d2:fd:59:bf:d5:
         96:36:eb:bc:a4:b9:a1:44:b3:a5:60:0f:80:82:73:72:38:19:
         9c:30:5d:ea:01:c9:4c:eb:f0:d9:05:72:2b:af:3e:cd:2d:6c:
         81:c1:65:29:d3:0d:08:fb:ef:01:1e:a8:a9:a8:44:d5:91:d5:
         17:04:df:41:0e:6e:fa:5a:74:5d:44:08:63:f8:77:07:c2:2e:
         8e:49:15:07:3c:a7:6c:c4:6d:9d:8b:ed:68:a7:d2:2a:a0:cf:
         c5:fb:0e:2b:73:f2:ef:d4:51:e6:74:5a:b3:85:ba:59:c6:fe:
         4d:11:cf:2f:f2:9e:d3:63:e4:41:ee:c0:a2:08:57:73:2c:ac:
         a1:13:02:b8:ad:49:13:aa:b3:5c:07:f2:b3:2e:5e:88:96:89:
         8c:73:27:a7:d6:e1:68:2a:a2:55:0e:3c:c3:64:19:4b:43:46:
         00:66:dc:d5:77:37:d6:a0:67:62:29:71:08:52:ee:98:cd:fb:
         3e:4f:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:57 2024 by rpki-client on console-fra.rpki-client.org