Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dfc9342-447b-3cf3-9987-3c52171489f9.roa
File:                     5dfc9342-447b-3cf3-9987-3c52171489f9.roa (raw, json)
Hash identifier:          buuik2HvGokVrF111uIpzpuSS1bwGDALK73d+rgFG4E=
Subject key identifier:   3F:AA:BC:CB:9E:66:9E:93:B3:B2:61:A0:C3:EF:90:28:F7:FC:37:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762291E7C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dfc9342-447b-3cf3-9987-3c52171489f9.roa
Signing time:             Fri 30 Nov 2018 01:08:41 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        108.162.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:1e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0174b8bd-159e-4833-8e58-069d13a92cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:33:11:f8:4e:27:1b:c7:1f:24:5a:9b:d4:
                    27:da:80:11:5a:c9:37:6a:7c:e9:9f:12:d0:b4:d8:
                    60:20:59:8b:ea:60:6f:bf:16:5f:19:0a:c2:06:a4:
                    e1:83:8c:8c:03:0c:f4:d8:0a:3b:f6:9c:fa:18:bd:
                    36:ec:8d:18:6d:bd:18:70:19:86:7d:32:40:1f:e6:
                    c9:78:3d:45:71:e1:18:a1:0d:19:19:de:9b:b0:66:
                    c1:aa:20:37:a0:15:a7:e5:c5:4d:8f:9b:24:ad:03:
                    b8:82:20:cc:0d:38:d5:58:52:4f:56:0e:73:09:35:
                    c5:24:f8:28:b2:01:0a:44:24:c0:e1:1f:6d:30:56:
                    87:79:aa:2a:e2:ab:5b:0a:d9:66:66:15:ff:61:f4:
                    8d:df:36:4b:d4:28:c0:01:bf:78:06:cc:0a:6f:45:
                    89:ce:c7:a6:e2:89:f6:39:b3:19:c7:7c:79:37:ed:
                    3d:e0:a5:70:82:8e:71:3d:10:a3:c2:86:c0:98:ec:
                    fe:7e:c6:e2:8b:a8:7d:b5:99:77:a3:49:82:e3:2e:
                    ac:e8:f2:c9:cf:2e:b8:6b:58:89:19:0e:0f:a9:13:
                    79:4f:79:79:6f:8e:ca:b1:2c:7d:a4:21:4c:96:d3:
                    4b:b6:bc:92:0b:cf:18:8a:bb:97:b9:2a:d5:a2:74:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AA:BC:CB:9E:66:9E:93:B3:B2:61:A0:C3:EF:90:28:F7:FC:37:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dfc9342-447b-3cf3-9987-3c52171489f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:75:93:5c:1a:18:62:db:7c:3e:5e:b3:54:7d:fe:df:1b:27:
         a9:dc:d3:6b:21:0e:c1:7c:35:ee:a3:27:26:1a:33:05:c3:fe:
         72:6e:db:79:ba:76:d6:7b:ed:14:be:57:9f:3d:2c:93:48:bc:
         c4:cf:87:93:9e:54:2b:42:5c:f3:cf:3d:1b:74:b5:f4:e9:b4:
         43:d6:0b:8c:5f:36:67:fc:1c:4e:e7:be:37:41:c6:22:f0:69:
         6a:ef:13:a8:e0:50:24:fd:ff:4a:50:72:ad:29:72:fc:78:c0:
         d5:0f:98:92:3e:13:5d:43:99:b3:2e:03:af:9c:0b:bf:18:48:
         c4:54:46:b0:2b:c4:61:e2:6b:d3:0a:cb:05:4e:94:29:b0:6c:
         f7:ca:7e:8d:ee:b7:e7:a7:db:49:ad:ee:09:d6:77:9e:f8:80:
         ee:02:9c:7f:53:f4:26:3b:a5:19:3b:47:8b:5b:ba:29:31:9f:
         21:0a:a7:a2:27:51:59:8c:e8:ef:e5:2f:8d:18:be:1b:a3:75:
         f7:67:40:b4:1a:bf:ea:36:69:0c:1c:0b:d9:2f:b0:24:62:00:
         c1:24:ed:f7:0b:3b:f9:ee:15:9f:73:04:95:43:3c:ca:06:a4:
         d5:6f:74:1c:75:e1:f9:10:88:e3:03:f0:9a:3a:3f:0c:ec:53:
         9b:7e:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:59 2024 by rpki-client on console-fra.rpki-client.org