Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5677b09e-80bd-3acb-815b-599f9c0f3d2a.roa
File:                     5677b09e-80bd-3acb-815b-599f9c0f3d2a.roa (raw, json)
Hash identifier:          D8+pUS/d/uTHB42HXIL1+eyTJn/iYsSAJfvd2Rt9Hxs=
Subject key identifier:   A9:44:B7:47:35:CB:50:EE:5D:B5:1D:20:2F:C6:11:D3:1A:0B:FD:BC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715D4BA5D8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5677b09e-80bd-3acb-815b-599f9c0f3d2a.roa
Signing time:             Thu 09 Apr 2020 04:56:10 +0000
ROA not before:           Thu 09 Apr 2020 04:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.159.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5d:4b:a5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=20cd76bb-808c-4e4e-9518-e83f8398a0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:44:06:56:cd:58:76:b4:3f:5f:58:31:3a:
                    2a:ec:6a:3a:a6:bf:dd:b8:de:a8:11:c3:90:f1:b1:
                    86:3f:79:3a:ce:7d:50:c1:8f:6a:e9:78:e1:9c:ed:
                    7f:50:a6:b1:23:46:bd:36:37:0e:51:dc:2c:37:e4:
                    4d:e6:44:20:74:94:f1:91:52:1b:65:9c:4f:3f:37:
                    b8:a6:79:35:a0:be:10:ab:b1:24:e9:79:d6:08:2f:
                    20:e4:02:8c:32:50:ef:a1:7b:a3:93:14:40:e8:83:
                    04:41:14:73:48:48:58:2f:0e:89:78:ec:70:6f:9f:
                    d8:45:e2:12:ea:49:bf:32:37:19:a7:48:6c:23:cd:
                    75:2c:6e:4e:24:23:ee:35:65:da:5c:bd:1a:8b:0d:
                    34:bd:d3:19:cd:55:85:e4:95:a4:c0:29:8b:6a:40:
                    67:77:69:5f:2a:fe:f0:85:5d:09:96:28:53:1a:2b:
                    7c:be:93:55:df:ca:39:67:be:c2:10:6d:71:ef:00:
                    8e:b6:1b:7a:44:30:ff:27:aa:71:6c:a8:d1:86:14:
                    65:bf:94:dc:da:11:c0:b3:23:d9:cc:bc:76:27:db:
                    00:86:a1:9d:cb:16:df:fa:ba:8a:d2:d9:b1:1c:24:
                    a0:32:ac:b2:ea:9f:bf:a8:dc:e3:88:12:35:ef:24:
                    51:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:B7:47:35:CB:50:EE:5D:B5:1D:20:2F:C6:11:D3:1A:0B:FD:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5677b09e-80bd-3acb-815b-599f9c0f3d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:57:94:f0:4f:a9:ae:60:54:46:55:30:29:48:10:3d:b3:3c:
         a5:f7:c2:27:f0:02:71:99:37:3b:40:95:c8:a0:22:cd:30:8e:
         a5:78:34:d5:a1:cf:cb:4d:0c:33:64:05:d0:40:a6:1f:b7:98:
         17:2d:8c:a0:a0:31:e4:9d:77:e4:30:fe:29:d2:fd:0c:d0:71:
         9e:c2:80:2e:01:c7:58:01:c2:32:2b:99:57:38:81:0e:fd:45:
         60:aa:12:ea:69:54:6f:1e:e0:d9:66:63:4d:fd:f2:1b:0e:39:
         f3:2b:03:40:3b:ba:32:b9:11:a6:6c:b4:08:2b:e0:6b:fb:4b:
         21:89:fa:88:b5:2a:f0:da:24:4d:bc:da:5a:84:d1:9e:09:3f:
         89:e7:35:ba:18:9c:c6:a3:ad:5f:60:f2:d5:43:26:dd:11:b1:
         b0:14:5a:d0:f5:65:34:79:8b:4d:77:41:4a:b6:6e:38:58:52:
         7d:ec:8c:1d:70:c9:22:2c:3e:aa:c2:12:df:4b:4f:ee:2f:cb:
         fc:87:f7:62:a1:85:dc:72:00:1c:41:b5:c5:e4:5a:76:aa:93:
         fd:ed:15:9b:ba:b5:1b:70:ea:c4:55:7e:cc:2a:f0:54:08:1e:
         49:7d:01:7b:8c:e5:e2:98:52:c4:21:5a:fe:a0:89:36:22:be:
         9b:a6:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:06 2024 by rpki-client on console-fra.rpki-client.org