Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623baf16-c1b8-322f-815b-942658bd52a5.roa
File:                     623baf16-c1b8-322f-815b-942658bd52a5.roa (raw, json)
Hash identifier:          9TFaBIUm6VN1AU3ymCtwqQGstifpWtJys8HGuT2Yy0w=
Subject key identifier:   3C:42:09:00:13:05:FA:FE:BC:14:55:1C:F8:DC:10:B6:0A:B5:AF:8D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229C346
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623baf16-c1b8-322f-815b-942658bd52a5.roa
Signing time:             Fri 30 Nov 2018 01:09:23 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:c3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=1896b3c7-0593-4269-a37d-c4056c3370ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:16:1b:4b:57:a1:bb:b8:2a:c7:20:44:cb:
                    da:34:df:a1:5a:18:03:cc:b1:e0:12:3f:df:53:42:
                    0c:dc:8e:0e:36:a8:ff:32:b1:63:c0:a7:e5:d1:6e:
                    fa:24:92:a0:a3:5c:8c:e3:ec:18:73:d9:be:ad:c6:
                    5a:4b:03:26:7e:be:03:46:f3:60:08:0b:c4:dc:d7:
                    47:4c:e6:e2:b5:13:29:28:63:1c:3f:1d:25:40:f2:
                    1a:34:89:af:8f:5b:ce:3d:23:37:35:81:bb:6e:e9:
                    a6:d7:28:fc:15:1f:76:c6:ef:f3:63:74:f7:60:23:
                    7f:e1:0d:08:a3:08:6b:0b:08:48:f2:0d:fb:d9:fd:
                    87:89:ae:c1:5a:fd:e0:de:b0:bb:5c:9b:5f:f8:c4:
                    34:4d:5c:ef:30:e5:4b:19:de:c3:cc:57:4b:4f:b0:
                    2c:86:9f:85:73:1e:be:89:a9:6d:30:35:04:80:ae:
                    a3:36:a2:db:89:06:90:81:41:5c:5f:05:1c:d6:f2:
                    37:bd:1e:39:51:3a:9a:2a:e6:80:dc:df:8e:1b:a5:
                    7d:1f:73:1d:38:cb:b0:c1:33:38:49:95:3d:b8:5d:
                    83:05:d9:13:26:67:3c:e6:17:7a:61:11:a1:1d:77:
                    b3:f8:47:5b:d9:67:58:04:f7:b7:49:bc:b7:5f:d0:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:42:09:00:13:05:FA:FE:BC:14:55:1C:F8:DC:10:B6:0A:B5:AF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623baf16-c1b8-322f-815b-942658bd52a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:d9:12:90:8e:cb:d2:08:fb:02:88:84:a4:1c:dd:f4:c0:
         9f:21:e1:9a:9e:65:6e:59:df:6e:fc:18:fb:cf:57:7c:d7:ab:
         3a:08:89:92:88:bf:da:53:76:ba:f0:dd:83:f4:4a:9b:1a:a6:
         44:5c:b2:86:b4:a0:6d:1a:d9:08:7a:23:23:16:4a:8e:8a:41:
         f7:7b:f9:62:d4:a6:53:77:8a:49:2d:2d:c5:48:b7:89:71:6a:
         84:5b:fb:d1:f9:16:f3:8a:3d:a8:e6:18:ea:26:6e:55:ad:21:
         47:11:d5:0b:dd:2c:ca:bc:1e:c8:c1:ea:b1:74:56:d5:8a:a9:
         34:98:19:61:6f:4b:7c:be:1b:59:8c:c9:83:bf:d0:4a:bf:5e:
         82:90:24:9a:8b:83:8f:8c:be:4e:94:c5:a4:8e:b1:f4:b2:df:
         30:0d:e2:17:f8:5c:64:ad:80:fd:6b:8b:8a:9b:3a:fc:b5:57:
         18:ec:b6:19:3d:4d:04:69:9a:53:22:6e:ea:9d:ea:ce:a9:2b:
         54:49:42:c8:12:be:92:30:a9:c2:dc:19:ac:4a:f9:ee:2b:9d:
         66:85:d4:07:92:ee:38:95:d7:90:d6:7a:73:c1:55:7a:a7:3e:
         1a:27:0a:48:fa:87:f1:4d:2b:be:97:94:11:60:cb:ff:23:6d:
         b1:d4:d3:b1
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Ipw0YwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDE4
OTZiM2M3LTA1OTMtNDI2OS1hMzdkLWM0MDU2YzMzNzBjYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMEyFhtLV6G7uCrHIETL2jTfoVoYA8yx4BI/31NC
DNyODjao/zKxY8Cn5dFu+iSSoKNcjOPsGHPZvq3GWksDJn6+A0bzYAgLxNzXR0zm
4rUTKShjHD8dJUDyGjSJr49bzj0jNzWBu27pptco/BUfdsbv82N092Ajf+ENCKMI
awsISPIN+9n9h4muwVr94N6wu1ybX/jENE1c7zDlSxnew8xXS0+wLIafhXMevomp
bTA1BICuozai24kGkIFBXF8FHNbyN70eOVE6mirmgNzfjhulfR9zHTjLsMEzOEmV
PbhdgwXZEyZnPOYXemERoR13s/hHW9lnWAT3t0m8t1/Qk4kCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ8QgkAEwX6/rwUVRz43BC2CrWvjTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzYyM2JhZjE2LWMxYjgtMzIy
Zi04MTViLTk0MjY1OGJkNTJhNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKeLzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAM+LZEpCOy9II+wKIhKQc3fTAnyHhmp5lblnfbvwY+89XfNerOgiJkoi/2lN2
uvDdg/RKmxqmRFyyhrSgbRrZCHojIxZKjopB93v5YtSmU3eKSS0txUi3iXFqhFv7
0fkW84o9qOYY6iZuVa0hRxHVC90syrweyMHqsXRW1YqpNJgZYW9LfL4bWYzJg7/Q
Sr9egpAkmouDj4y+TpTFpI6x9LLfMA3iF/hcZK2A/WuLips6/LVXGOy2GT1NBGma
UyJu6p3qzqkrVElCyBK+kjCpwtwZrEr57iudZoXUB5LuOJXXkNZ6c8FVeqc+GicK
SPqH8U0rvpeUEWDL/yNtsdTTsQ==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:07 2024 by rpki-client on console-fra.rpki-client.org