Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6ef430a3-d7bb-3194-9a43-c9683d5329b5.roa
File:                     6ef430a3-d7bb-3194-9a43-c9683d5329b5.roa (raw, json)
Hash identifier:          ZDzFEub+qcrjQNEdpa6WDzY3f5UkW44XDLPgyEBfgv0=
Subject key identifier:   9B:E4:E1:2F:83:BA:70:C5:D3:DD:A9:55:D7:71:CE:5C:6E:A8:36:E8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228CCD6
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6ef430a3-d7bb-3194-9a43-c9683d5329b5.roa
Signing time:             Fri 30 Nov 2018 01:08:20 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.64.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:cc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=4392ef88-82e0-4140-9f74-fe7a342757cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:55:1a:fb:eb:27:9a:16:7c:15:30:71:b8:
                    ec:90:d0:59:89:77:e0:11:45:e4:7f:89:4c:bf:19:
                    10:0d:b8:04:e2:4a:e5:97:62:53:44:de:7b:5b:55:
                    96:64:97:07:71:e2:32:aa:69:49:c3:72:d9:ba:d7:
                    a1:b5:31:10:92:44:66:6d:10:77:a3:4e:8e:ee:53:
                    5e:98:c4:ab:42:9a:1a:90:e5:9b:b7:f3:b3:0b:00:
                    04:f5:26:94:12:65:a1:20:d0:f8:ab:0f:28:8d:e0:
                    96:fb:6a:c5:e3:62:1c:5b:ec:aa:b7:d2:87:72:8d:
                    e2:0c:8b:e3:4c:78:9f:7d:da:e4:55:7d:69:c7:b9:
                    1d:5c:dc:1d:e1:b8:99:c0:b9:a0:63:cf:0e:dc:74:
                    22:3d:ad:dd:c7:73:21:a1:7d:d6:d5:c5:55:62:08:
                    88:42:92:62:e7:ed:5a:9f:ac:32:6c:c0:17:39:bc:
                    af:1d:a9:7f:80:92:79:2b:6b:24:56:67:c7:44:60:
                    b0:d3:2d:6e:92:66:d7:61:c7:36:08:e3:40:99:13:
                    4a:f1:c8:5d:b3:bb:db:39:ce:10:5e:82:f5:76:82:
                    59:5c:d0:d3:1f:cb:a5:0e:38:b9:65:40:db:c9:de:
                    87:48:54:48:a8:13:65:db:6d:f0:66:fb:9a:cf:a7:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E4:E1:2F:83:BA:70:C5:D3:DD:A9:55:D7:71:CE:5C:6E:A8:36:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6ef430a3-d7bb-3194-9a43-c9683d5329b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:50:c0:53:73:f8:db:c3:fc:c8:80:e4:23:d8:d2:64:f9:87:
         46:02:d8:a0:ba:1c:3b:e4:25:9f:54:2e:74:04:74:14:a0:f5:
         a9:94:7a:e6:1c:04:a7:8a:31:6a:6d:bd:e7:9f:87:bc:7e:18:
         f7:0f:ec:ad:a6:68:80:51:48:e2:2a:67:5a:7a:0c:ec:e0:e5:
         b1:b1:68:46:90:6a:62:fa:2d:62:4d:fe:74:4f:9f:b4:e5:60:
         e1:d4:4e:21:95:8a:36:79:a8:5d:93:f5:86:41:ac:21:1c:3a:
         62:6a:23:dc:65:17:ba:9a:42:9f:c1:5d:5c:52:f3:8c:97:52:
         4e:9b:ed:d9:4f:13:ec:79:73:20:70:8d:00:21:58:9b:e5:94:
         71:8c:61:62:56:1f:fc:46:17:c2:f3:f0:81:8c:d9:a2:fd:3f:
         7c:e8:c3:77:f9:8f:d4:bc:95:55:96:2c:d3:3b:fb:7a:54:f5:
         a5:ff:c4:5e:39:78:4b:27:20:75:92:4a:13:ca:4a:89:4d:be:
         e9:4a:a1:e2:c9:30:8e:d2:32:23:7e:f0:d3:eb:9a:c2:61:be:
         b3:33:72:39:cb:f7:fc:0f:65:95:a2:b3:5a:2a:13:61:1d:fc:
         f4:88:6d:95:98:4f:88:99:0f:15:27:35:61:f2:d1:5d:72:b2:
         b1:05:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:05 2024 by rpki-client on console-ams.rpki-client.org