Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64e8179d-b24f-3553-b413-1049818e728c.roa
File:                     64e8179d-b24f-3553-b413-1049818e728c.roa (raw, json)
Hash identifier:          ZyWYTezxhOYcJA81uNB8BISsNaiHUjBS35yeEa1fRRg=
Subject key identifier:   45:68:E3:FC:EC:BE:76:44:E3:1E:4B:8B:8C:8A:44:0A:64:87:DB:97
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC172A0978E84
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64e8179d-b24f-3553-b413-1049818e728c.roa
Signing time:             Wed 10 Jun 2020 23:36:26 +0000
ROA not before:           Wed 10 Jun 2020 04:00:00 +0000
ROA not after:            Tue 05 Jan 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:a0:97:8e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 10 04:00:00 2020 GMT
            Not After : Jan  5 05:00:00 2027 GMT
        Subject: CN=a42087ce-9b41-4030-9819-35d9bb9c326c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:70:16:ac:98:44:de:db:ee:f7:84:f4:39:
                    0c:d8:0f:a4:e3:97:c2:66:fc:da:36:ad:23:9f:f4:
                    22:62:60:22:63:82:f5:96:16:d6:03:6a:68:8b:01:
                    1e:03:fd:53:fa:1b:2c:86:ae:ab:c1:5a:fd:ec:c0:
                    d3:be:da:5d:5e:da:6f:b1:15:e4:0c:9e:b4:cb:c4:
                    5d:c7:db:be:f1:39:fc:5a:d0:4c:2b:2e:23:ad:c2:
                    2f:20:f3:39:eb:1e:2c:e2:ba:e2:61:cb:ef:22:49:
                    bb:fe:ad:a0:45:73:6a:a5:b0:95:b8:83:f9:db:8b:
                    96:50:37:51:70:fc:c3:a0:35:3f:1c:46:ff:3f:39:
                    60:24:bc:d6:b8:f5:42:97:8d:5d:4a:03:9f:0e:05:
                    fe:58:ba:44:bd:7c:7e:91:e3:78:3d:d7:68:60:32:
                    da:9f:cd:d7:6a:3a:12:4d:6a:42:56:4b:e1:31:12:
                    0c:99:97:e6:eb:bf:18:3e:5b:f2:6c:70:d7:87:c7:
                    e0:b6:76:8f:65:a7:6d:5c:8b:96:d9:fa:67:cf:96:
                    6f:a3:27:d3:34:0c:c0:06:79:98:da:05:10:41:5e:
                    4c:1f:ff:01:be:85:94:eb:eb:f5:44:ff:1b:79:c7:
                    d3:fe:ab:2a:86:6d:0a:e9:82:74:28:c5:29:0a:f1:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:68:E3:FC:EC:BE:76:44:E3:1E:4B:8B:8C:8A:44:0A:64:87:DB:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64e8179d-b24f-3553-b413-1049818e728c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:0d:a5:57:f8:7d:95:85:33:ee:63:cf:ea:85:80:44:ed:
         2c:61:e8:52:b8:d2:2e:2b:90:fc:9b:6d:76:04:59:b5:1d:9e:
         16:0e:56:5d:fd:c4:57:41:6f:2f:f2:f9:91:e2:25:ec:ea:6a:
         4d:ec:c5:2e:6f:9d:46:b9:66:9c:d1:a1:53:89:97:51:5c:30:
         3f:1b:51:cc:be:b5:13:2f:0e:8b:6b:2e:8d:56:87:9c:aa:df:
         fa:92:4b:94:a0:4c:20:36:21:9f:5e:30:1f:a0:3a:e4:20:5f:
         3e:d9:ca:ac:5b:1b:36:97:15:e5:77:3c:6d:0a:88:90:d9:60:
         61:f5:54:23:1f:20:3f:f6:d0:da:3c:22:08:ef:78:e8:3f:98:
         61:4f:d5:61:64:e5:de:9d:68:8b:fe:63:4f:d7:ff:b0:a8:06:
         16:e6:b1:44:f6:f5:a9:73:5b:49:8c:16:3e:f5:92:3d:11:51:
         5a:62:de:cd:43:89:a0:54:27:28:89:7c:61:7d:a1:43:07:6f:
         38:ea:aa:9b:90:f4:ed:74:c0:6b:84:6f:eb:20:eb:98:2a:21:
         e1:6f:53:8c:b2:49:01:09:52:35:9e:7d:0e:c3:ff:72:73:26:
         de:d7:b1:d5:f6:ce:7c:1f:57:6c:a2:b8:3a:f9:96:6a:42:ed:
         52:e6:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:07 2024 by rpki-client on console-fra.rpki-client.org