Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a78ea2f-b20b-3b0f-b54a-9b645637ed40.roa
File:                     4a78ea2f-b20b-3b0f-b54a-9b645637ed40.roa (raw, json)
Hash identifier:          ObkJcXeBoF8ZeFRHRPX/9OgVXu8rwAtnKb9/4eTt3EY=
Subject key identifier:   40:68:5B:D2:6A:AC:2F:69:B6:6E:6A:14:E2:A7:22:C3:41:41:48:7A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A965B
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a78ea2f-b20b-3b0f-b54a-9b645637ed40.roa
Signing time:             Fri 30 Nov 2018 01:10:17 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        173.245.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:96:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=86a5add5-1630-43fb-bc94-5f043ea339db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:67:c0:bf:fe:2d:a9:e6:e3:5e:72:a3:4e:
                    2c:bf:ed:ce:a1:6c:c6:70:0a:a0:46:12:35:dc:77:
                    3a:ed:25:43:39:12:bf:e7:2b:77:9c:ac:ff:59:67:
                    94:2e:28:8a:3a:16:71:4b:c2:03:0d:02:e9:13:98:
                    72:f3:4f:6d:58:93:93:a4:9b:48:94:fe:ba:58:12:
                    23:d2:bf:55:51:0c:06:3c:c9:de:33:2a:b8:25:54:
                    f5:fa:d3:82:ec:ac:e5:72:68:32:19:50:74:30:0a:
                    b1:05:7f:fb:e5:5b:84:d3:a5:0c:b6:6c:13:6e:89:
                    f4:52:cb:8d:0e:ef:23:7e:5f:4c:d5:f9:9f:c6:cb:
                    b5:a4:d9:7a:e5:cb:73:30:7d:bf:53:2b:b4:60:61:
                    fd:17:38:44:92:22:04:c0:d2:23:60:d3:8c:44:2e:
                    73:7a:8c:b6:94:be:87:87:c7:f8:93:a6:03:6e:8a:
                    de:3c:a7:5a:04:d6:a5:11:82:d4:9f:a5:2b:f6:42:
                    2d:3a:f2:3f:71:f0:7c:14:5e:4d:a0:18:8f:6a:e8:
                    5c:db:83:70:af:1a:36:8a:01:39:41:c5:d1:fb:71:
                    ab:b5:7c:34:c0:0d:a7:0d:0c:8b:be:9c:ce:04:7e:
                    6a:36:eb:8b:38:6a:08:c9:e0:74:a4:37:3b:79:d2:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:68:5B:D2:6A:AC:2F:69:B6:6E:6A:14:E2:A7:22:C3:41:41:48:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a78ea2f-b20b-3b0f-b54a-9b645637ed40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:45:88:4d:fd:88:31:b2:8d:a7:00:c3:a8:cb:b8:c6:65:
         a4:57:69:f1:25:dd:ba:b6:c6:74:92:c8:1b:a4:3c:19:68:b3:
         13:da:0f:2b:86:09:db:54:b5:c9:57:c2:63:6f:36:cf:2a:0e:
         a5:f2:df:25:e9:0e:ba:e8:43:45:88:08:fa:82:79:47:75:27:
         31:ee:c5:1f:8e:72:97:dd:fe:f9:50:af:c2:ec:f4:8c:ab:83:
         1d:de:c3:d3:a8:ac:21:74:1c:6f:6e:79:66:ef:80:91:52:47:
         50:ad:ac:6e:77:7a:a1:8f:fe:92:f4:ca:b2:13:4a:25:df:28:
         41:f3:63:cd:d5:05:ef:1b:41:ed:5e:e3:a4:9d:b4:9b:a3:a1:
         a5:8f:46:c3:c4:3a:3c:c3:3b:1b:1e:de:84:01:98:e3:c9:7f:
         76:54:07:40:5e:b1:c9:1e:cb:a2:d8:ad:2f:71:a7:e8:59:ab:
         8d:33:1c:7b:7e:5c:74:6b:3f:db:7c:7b:31:cf:33:a2:02:f7:
         15:ee:49:10:aa:24:c1:80:e1:79:b8:81:fb:0f:d7:a7:4d:96:
         66:4d:d9:e3:67:93:cd:d0:74:7a:38:65:a8:47:e1:d8:3d:b4:
         6d:80:0b:14:a0:12:87:f2:c3:cc:b5:ab:ec:42:eb:61:04:3c:
         f3:28:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:06 2024 by rpki-client on console-fra.rpki-client.org