Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ac20c2a-19ad-3ddb-93c3-c247f0f5cd00.roa
File:                     4ac20c2a-19ad-3ddb-93c3-c247f0f5cd00.roa (raw, json)
Hash identifier:          aV1gLxzU8s7G8+pr9TK1hzPpLOxrS97Y5dI32lJ6CWw=
Subject key identifier:   7E:1A:AC:74:64:4E:BD:0B:CC:D8:5A:A1:73:E1:EC:C1:19:9E:0E:C2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762298208
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ac20c2a-19ad-3ddb-93c3-c247f0f5cd00.roa
Signing time:             Fri 30 Nov 2018 01:09:06 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:82:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=9806edb6-560b-4235-bcca-1ac6b15b5247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:32:5b:a7:be:9c:3e:35:52:f1:81:08:ba:
                    50:90:8d:fa:ea:16:1c:40:fa:7d:b4:1f:77:d2:81:
                    5c:38:90:34:10:05:b5:8a:b4:e4:2f:f9:9b:51:37:
                    26:eb:89:59:2d:eb:ae:40:e9:0f:f5:c5:41:a5:62:
                    0b:70:df:bb:e5:06:40:14:29:e5:e3:18:40:23:be:
                    f7:77:c6:1d:b2:99:60:ff:e3:88:1d:ef:91:ff:76:
                    33:1a:7d:29:b6:ae:56:36:e4:ed:6e:ad:78:7d:70:
                    5a:aa:a9:b0:cf:8a:1f:55:2b:11:22:53:a5:38:65:
                    c1:5a:d8:47:9c:48:45:fc:70:a4:e0:12:5c:87:2c:
                    1a:7f:0c:ff:ea:df:b2:02:68:03:f1:58:9e:9c:b0:
                    77:d8:0e:56:76:dc:3b:e0:43:67:4f:a5:0f:62:49:
                    0e:44:26:b7:a4:72:54:ea:36:a9:cd:14:c2:76:1f:
                    65:51:86:7d:79:61:d6:d6:56:b0:72:60:e1:44:85:
                    4a:0a:45:eb:d1:97:76:cb:43:fa:da:df:ae:cf:11:
                    d7:dd:55:f9:25:75:6d:b1:3d:93:8a:4c:ff:2b:c1:
                    97:8a:17:cd:31:95:65:31:8b:33:5d:cb:36:1d:0d:
                    e0:30:67:83:35:f9:7b:6f:8a:87:8a:80:3c:a1:6f:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1A:AC:74:64:4E:BD:0B:CC:D8:5A:A1:73:E1:EC:C1:19:9E:0E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ac20c2a-19ad-3ddb-93c3-c247f0f5cd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:b3:60:7e:69:a2:8d:ab:5e:e4:db:4b:fe:af:5d:91:2d:
         1a:5e:d8:75:7e:f4:e7:21:be:c2:a5:c6:39:73:41:07:a4:32:
         1b:33:88:d7:15:9f:09:27:cb:7b:4d:18:16:6e:77:44:66:d0:
         07:5e:2c:a8:6b:e0:18:cb:36:a5:80:0c:cb:6d:c4:bc:2f:85:
         1a:f6:bb:52:de:2d:ff:dd:6e:16:9c:3d:c7:08:9f:8b:eb:20:
         a4:b0:7c:8c:25:aa:2b:be:37:97:97:c0:31:96:92:1c:5a:da:
         eb:e1:fb:f3:da:15:d5:4b:58:43:d7:fe:23:0b:ed:1f:49:77:
         5e:1e:58:c9:02:0b:1f:b3:5f:a4:d6:bb:b5:8b:ae:31:ab:05:
         8b:4b:bf:91:23:c9:d8:d7:c9:fc:74:cc:ef:87:68:31:7a:09:
         4a:92:48:3e:9a:b3:6c:94:61:bf:48:cb:49:fa:4e:b7:17:18:
         77:6c:f5:fe:a3:66:2a:09:60:01:b9:6c:38:f9:52:ee:cb:d7:
         c6:6d:72:95:c4:b6:49:20:c3:00:c2:0e:f6:bb:38:3f:92:53:
         8d:78:3b:00:bf:0a:1f:59:53:3c:ef:07:d5:80:6e:d7:ec:f8:
         b8:cc:ee:37:27:e7:ae:f5:ed:fc:92:3b:35:b8:00:db:49:e6:
         52:73:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:58 2024 by rpki-client on console-fra.rpki-client.org