Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e25f-df58-3ca8-a914-8280e1fdbcfe.roa
File:                     5bb2e25f-df58-3ca8-a914-8280e1fdbcfe.roa (raw, json)
Hash identifier:          g5qGevkwaKdt3R5SSoPD0slcmJY9pJv5XjsEwqU/ZdE=
Subject key identifier:   70:36:9B:4A:1C:42:BF:6D:F9:68:ED:63:C7:68:AA:7B:F0:BB:7D:48
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC171A96E26CC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e25f-df58-3ca8-a914-8280e1fdbcfe.roa
Signing time:             Thu 23 Apr 2020 23:45:00 +0000
ROA not before:           Thu 23 Apr 2020 04:00:00 +0000
ROA not after:            Fri 26 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:a9:6e:26:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 23 04:00:00 2020 GMT
            Not After : Feb 26 05:00:00 2027 GMT
        Subject: CN=9e7c3de9-d812-4fea-8cd6-bbe16378b642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:11:f5:f8:e1:0b:e4:72:d5:75:5f:99:78:
                    e3:96:b1:21:b7:2f:c7:fc:f3:db:10:0c:36:6e:3b:
                    a9:ff:93:2a:00:6f:3f:ee:55:2e:e4:bf:e9:e8:a6:
                    5c:95:c6:43:e9:04:5e:5d:dc:ac:ba:7b:b2:9e:af:
                    e5:96:c2:08:73:70:d8:26:25:b1:0a:d9:ef:6c:f9:
                    fb:b2:e7:44:50:20:af:64:09:0c:ce:64:35:f1:61:
                    69:15:d9:c6:86:f2:db:8a:55:2d:06:3a:53:ba:06:
                    7b:57:6d:86:37:90:2f:28:6f:b5:5f:be:ff:7e:f3:
                    f6:b9:84:c9:27:72:61:ff:3b:d7:f6:e7:1c:11:ee:
                    5e:8b:29:cd:41:08:95:f7:cb:93:62:28:8e:c9:95:
                    a6:a7:c5:e0:1e:6a:69:31:98:a9:60:f7:87:67:e7:
                    2e:48:8c:7c:94:42:53:ca:b5:6c:cc:5f:6b:cd:76:
                    37:32:51:e3:69:39:55:ce:35:dd:00:f0:ec:c9:8c:
                    6b:29:92:88:05:62:18:75:ff:f4:cf:ad:23:cb:53:
                    83:80:b6:ec:29:55:cb:03:c9:c0:94:57:e2:9b:d5:
                    93:e0:4e:08:f9:30:b6:97:ab:7b:35:73:9e:ca:8f:
                    96:46:44:e8:cf:ea:36:51:df:31:57:a3:ec:16:8b:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:9B:4A:1C:42:BF:6D:F9:68:ED:63:C7:68:AA:7B:F0:BB:7D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e25f-df58-3ca8-a914-8280e1fdbcfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:16:73:f4:9d:0b:3a:16:6a:22:ad:38:16:dc:d6:32:a9:
         45:7d:1d:6f:39:ca:63:3a:89:ce:df:35:59:ff:bc:a1:56:fe:
         4f:18:a7:70:09:ba:64:4a:cb:86:28:c6:bb:f0:67:01:34:f9:
         5f:52:b1:f7:9d:af:22:79:a0:7e:e4:23:80:be:f8:d6:be:2e:
         fb:ed:98:31:3e:49:30:a5:14:22:18:a6:b1:2e:1e:fd:1c:4f:
         01:05:54:24:b0:60:1b:a6:d6:0d:b1:ef:19:bd:e2:2a:a1:76:
         10:1d:79:d0:ae:a1:7e:fb:52:ed:1b:af:6c:97:c8:e2:82:61:
         e1:96:ca:77:be:e6:bf:c0:66:ae:80:7f:15:ec:3d:a2:94:23:
         36:f7:49:7e:37:ee:b4:20:4a:24:e9:62:66:f0:bf:05:28:ac:
         0e:e6:81:22:8c:b2:70:b6:28:ef:d3:6d:97:4e:fb:e5:08:33:
         0e:b0:b4:a2:ec:6f:bf:ae:f0:c4:eb:1d:1f:6f:39:54:5a:71:
         89:65:6d:f0:5f:0c:1b:7a:8f:c9:8e:bf:8f:f1:af:bf:58:7a:
         bf:99:bd:10:69:2d:bb:95:98:cb:84:97:06:31:07:39:b2:7f:
         2b:89:df:1e:5b:0a:84:cd:77:d3:c5:de:c8:b0:a9:62:0d:f8:
         0e:a4:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:59 2024 by rpki-client on console-fra.rpki-client.org