Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f2e944d-9ae1-3ed5-8b0e-98ae7ecf65a8.roa
File:                     5f2e944d-9ae1-3ed5-8b0e-98ae7ecf65a8.roa (raw, json)
Hash identifier:          v6f5HWqJFrY3HFo7X+V0A3dt/4Jv6JIO8yqUR2uGunI=
Subject key identifier:   A8:28:E9:8C:BC:F3:20:C4:54:22:47:06:7C:F0:5C:6F:24:D9:88:80
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A4E56
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f2e944d-9ae1-3ed5-8b0e-98ae7ecf65a8.roa
Signing time:             Fri 30 Nov 2018 01:09:59 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:4e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=bdab98fc-0ee3-4319-a85d-bfcd4a644479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:64:86:be:5b:26:7d:1c:de:ab:00:aa:00:
                    05:62:67:9b:45:de:df:ce:1d:8f:8d:51:2b:f3:73:
                    08:b8:23:40:ec:30:06:97:0c:97:58:97:f6:fe:b6:
                    6c:14:22:32:a0:6f:dc:f6:66:32:bf:0e:3c:4b:a8:
                    4f:d0:f1:d5:60:57:2f:91:3d:be:92:fc:e1:5c:fe:
                    d1:7e:c0:57:10:fa:60:d5:b8:fe:c3:22:03:d3:6c:
                    31:1d:fe:55:7c:1f:52:9e:6c:c5:78:ab:2a:b0:10:
                    84:2a:b2:84:87:04:d4:bd:d1:a1:be:8e:13:16:b1:
                    1b:1f:58:ee:c7:df:51:85:c9:47:4f:2f:32:46:b9:
                    03:5d:54:da:98:b9:a9:16:0b:dd:7c:a8:7a:84:57:
                    88:24:f7:08:d8:a4:44:69:b4:9a:41:d9:44:9e:0f:
                    41:c1:04:77:43:d0:1b:e4:e5:9f:b8:71:b4:bc:bc:
                    8f:ec:91:b5:3f:f9:8f:5b:fb:83:d2:f2:4f:6b:68:
                    cc:51:72:87:52:9e:6f:45:17:5e:8b:02:a6:37:b3:
                    a5:9f:9d:25:b4:00:c3:e6:96:10:aa:28:c7:1e:e4:
                    2b:4c:3f:db:77:eb:b4:b6:e5:61:93:50:fc:fe:79:
                    2b:74:ec:82:6e:67:fe:df:d8:42:da:0a:a6:65:b8:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:E9:8C:BC:F3:20:C4:54:22:47:06:7C:F0:5C:6F:24:D9:88:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f2e944d-9ae1-3ed5-8b0e-98ae7ecf65a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:03:1c:1e:e9:9b:4a:95:70:c6:25:aa:54:11:ce:b8:e4:
         87:a7:5a:c5:07:0f:48:23:af:8a:cc:fc:a0:8d:22:9d:cf:b9:
         7b:56:08:53:ff:90:fa:02:66:b0:79:77:48:de:57:95:d0:fb:
         ea:3f:72:5e:61:6d:15:20:40:6d:00:63:7a:e6:81:65:5e:c9:
         83:7d:42:5b:44:b9:60:ef:85:49:50:cb:c5:de:6b:1d:56:03:
         e4:59:c6:92:dc:c8:db:0a:58:cf:e6:69:a7:34:5b:a4:e4:b5:
         06:55:98:34:d0:9e:4e:b7:18:e4:80:17:57:0d:03:cb:27:fe:
         49:2f:c7:a6:0a:24:3f:d3:07:1a:19:5f:f0:13:0b:0f:54:40:
         b9:d1:9c:43:bf:41:d9:2e:01:0c:9f:94:bc:5b:93:24:2a:fc:
         b5:40:91:8c:54:a1:66:e6:51:e5:04:a9:40:70:0c:1f:bf:49:
         f7:54:5a:5f:a8:46:89:83:81:05:3d:af:e3:0c:b3:30:59:eb:
         2f:2e:a2:ea:8a:0f:8e:ff:e0:69:bf:26:61:43:5b:c0:cf:88:
         af:02:d4:4e:a8:e5:45:11:a3:10:f7:56:a7:9f:a2:00:2b:da:
         5a:0d:80:69:4b:c8:7d:69:91:24:88:8f:b3:d9:8d:72:5c:f6:
         29:bc:6f:26
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IqTlYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGJk
YWI5OGZjLTBlZTMtNDMxOS1hODVkLWJmY2Q0YTY0NDQ3OTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALFJZIa+WyZ9HN6rAKoABWJnm0Xe384dj41RK/Nz
CLgjQOwwBpcMl1iX9v62bBQiMqBv3PZmMr8OPEuoT9Dx1WBXL5E9vpL84Vz+0X7A
VxD6YNW4/sMiA9NsMR3+VXwfUp5sxXirKrAQhCqyhIcE1L3Rob6OExaxGx9Y7sff
UYXJR08vMka5A11U2pi5qRYL3XyoeoRXiCT3CNikRGm0mkHZRJ4PQcEEd0PQG+Tl
n7hxtLy8j+yRtT/5j1v7g9LyT2tozFFyh1Keb0UXXosCpjezpZ+dJbQAw+aWEKoo
xx7kK0w/23frtLblYZNQ/P55K3Tsgm5n/t/YQtoKpmW4lp8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSoKOmMvPMgxFQiRwZ88FxvJNmIgDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzVmMmU5NDRkLTlhZTEtM2Vk
NS04YjBlLTk4YWU3ZWNmNjVhOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxFkDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAQw0DHB7pm0qVcMYlqlQRzrjkh6daxQcPSCOvisz8oI0inc+5e1YIU/+Q+gJm
sHl3SN5XldD76j9yXmFtFSBAbQBjeuaBZV7Jg31CW0S5YO+FSVDLxd5rHVYD5FnG
ktzI2wpYz+ZppzRbpOS1BlWYNNCeTrcY5IAXVw0Dyyf+SS/HpgokP9MHGhlf8BML
D1RAudGcQ79B2S4BDJ+UvFuTJCr8tUCRjFShZuZR5QSpQHAMH79J91RaX6hGiYOB
BT2v4wyzMFnrLy6i6ooPjv/gab8mYUNbwM+IrwLUTqjlRRGjEPdWp5+iACvaWg2A
aUvIfWmRJIiPs9mNclz2KbxvJg==
-----END CERTIFICATE-----
Generated at Sun May 12 03:26:01 2024 by rpki-client on console-fra.rpki-client.org