Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/705f6bf7-387d-3a5b-8804-b15ce198af99.roa
File:                     705f6bf7-387d-3a5b-8804-b15ce198af99.roa (raw, json)
Hash identifier:          TbDL5FObeQCuigL25ASp+HoRv1j2kRNAnKIQ2tLccyo=
Subject key identifier:   AF:DB:57:6C:5E:68:E2:24:9F:B3:B5:15:7A:9F:E5:2A:31:B5:D3:39
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762298DF0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/705f6bf7-387d-3a5b-8804-b15ce198af99.roa
Signing time:             Fri 30 Nov 2018 01:09:09 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=1dc5957a-0f2a-4e07-94aa-da42c6d7f1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:31:49:fc:5e:81:5b:bc:c5:0c:06:af:17:
                    94:c1:bb:2a:66:dd:86:c2:fa:f9:c6:7b:f3:58:4b:
                    73:e5:3d:b0:f5:8f:58:de:73:33:24:ef:cb:36:ce:
                    a4:7c:94:ad:8d:d0:be:29:ba:d9:9e:5b:6b:7a:77:
                    79:78:ca:91:c8:40:d9:30:7a:24:13:8f:38:56:59:
                    a1:cf:00:c1:43:41:a1:b4:53:b0:54:1e:dc:76:75:
                    5b:34:4c:af:3b:06:4c:5b:88:b2:11:1f:c7:5b:a3:
                    f9:38:9c:b8:26:74:e1:bc:0f:b6:d0:a9:9b:ba:df:
                    d5:e0:87:ba:29:9e:b2:ab:1c:75:fa:e6:32:be:a1:
                    77:4d:1a:f4:fc:f0:5f:52:fd:38:58:1e:00:40:56:
                    9e:ad:aa:3c:7c:68:85:43:34:97:4c:72:37:71:6c:
                    ba:56:9c:df:e9:58:30:95:11:bb:6a:e2:e9:24:ff:
                    c2:ab:88:1b:2b:ed:96:c7:36:9c:57:5d:16:7b:41:
                    8e:73:f5:70:33:66:d5:b0:87:4f:0b:f9:0c:c9:f9:
                    8c:da:2c:2f:1c:55:f1:a7:2e:e6:a0:59:90:40:16:
                    55:5e:86:ad:b0:f4:2a:60:a8:49:46:b9:54:51:57:
                    5a:83:97:77:9d:16:07:3c:b3:e0:cd:5a:2d:bc:81:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:57:6C:5E:68:E2:24:9F:B3:B5:15:7A:9F:E5:2A:31:B5:D3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/705f6bf7-387d-3a5b-8804-b15ce198af99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:81:1f:c0:f8:84:00:32:22:44:8d:85:7b:62:09:0b:02:79:
         e2:10:95:e5:ab:4b:1d:de:64:1d:f9:91:21:85:9f:a9:9e:5e:
         59:dc:6f:13:b4:0b:67:49:bd:c7:08:5a:18:ae:8d:69:fe:51:
         bb:23:3e:eb:b9:84:46:c7:4e:17:b2:26:0d:af:42:7e:c9:19:
         33:55:f9:c3:3a:4f:1b:68:fa:b7:9c:80:a2:ea:b9:64:13:73:
         42:5f:96:4b:4b:dc:47:5b:9c:6f:49:be:ee:c9:04:80:8c:5b:
         bc:db:68:34:a3:fb:e3:3e:fb:67:aa:51:07:c7:a0:9f:bf:95:
         4d:ff:0e:6c:d7:e5:9c:de:56:b8:1b:86:98:bf:cf:a5:94:21:
         6c:78:8b:72:c4:35:d9:28:17:e6:eb:73:e0:3b:b0:c6:04:2a:
         af:aa:d1:11:fd:4d:03:f7:af:b4:ac:a0:d3:25:b5:3a:3f:54:
         e9:e7:18:a9:2a:1a:73:a7:e1:5e:6e:11:cd:8d:4c:c6:12:44:
         28:da:24:81:74:a9:5f:bb:d8:1a:13:6d:b0:28:48:72:bb:1c:
         aa:9d:28:33:58:a4:13:e4:8c:e1:12:a8:1c:10:ce:59:04:82:
         bb:28:ef:43:9b:de:0a:06:a8:31:93:b5:90:2b:d5:59:ba:d7:
         9c:20:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:49 2024 by rpki-client on console-ams.rpki-client.org