Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/711c1142-61a0-3730-a8f4-cbfae5f63c78.roa
File:                     711c1142-61a0-3730-a8f4-cbfae5f63c78.roa (raw, json)
Hash identifier:          LZcZxt1C0Ihf5SYMVw/XyoR8cSd8JHNSk7g4JNIr2Mk=
Subject key identifier:   01:37:C0:5D:01:70:52:48:99:2F:F6:3D:23:7C:FB:B0:B4:E2:12:00
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622922F1
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/711c1142-61a0-3730-a8f4-cbfae5f63c78.roa
Signing time:             Fri 30 Nov 2018 01:08:42 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        108.162.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:22:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0eb9047f-9c0d-4deb-8df6-961f014f4c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:0a:03:e6:70:7b:58:ea:a8:73:a5:37:51:
                    d1:61:88:03:4a:fa:1f:2d:07:cb:e8:4b:2f:59:85:
                    73:9e:a0:82:d7:f6:4a:66:56:e4:88:ac:de:29:42:
                    0e:7a:e9:a0:70:de:2e:21:3a:ba:48:65:43:d5:be:
                    04:ad:3e:e2:db:cd:a9:d8:5a:84:89:97:dd:31:0f:
                    2e:fa:32:8f:21:8d:83:7c:a5:b3:d7:26:79:6f:fe:
                    2f:06:e5:0e:b4:da:72:ad:cd:d4:47:4e:8f:d9:c7:
                    84:e0:76:24:a3:40:ee:41:ee:64:67:37:06:f0:74:
                    17:83:d5:46:cf:b8:b4:36:7f:88:48:a8:76:9f:eb:
                    a9:ee:10:00:66:db:94:c8:ec:3a:e5:a6:c7:73:8f:
                    bd:30:3a:74:1d:e9:3f:1e:fb:ce:6c:26:45:4a:41:
                    17:8b:1a:ed:53:58:62:70:33:a8:67:e8:ab:6b:d2:
                    40:99:6d:83:3e:4a:1f:af:ce:f7:e6:d6:77:ed:b9:
                    ce:e6:60:23:9a:4d:18:b1:7e:8e:75:6e:62:97:a9:
                    de:cd:27:c1:1d:ee:3b:e0:bc:e4:85:0e:40:97:23:
                    24:c7:d3:e0:0f:61:38:ba:d7:10:e5:55:5b:41:14:
                    9c:c1:6a:61:df:21:cf:eb:db:71:38:0d:e1:29:4f:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:C0:5D:01:70:52:48:99:2F:F6:3D:23:7C:FB:B0:B4:E2:12:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/711c1142-61a0-3730-a8f4-cbfae5f63c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:ad:2a:b8:c4:d0:78:76:bc:94:b1:52:db:78:f0:3b:50:
         14:02:6f:c8:c8:a5:86:6f:2a:62:49:d2:9c:e3:a1:5c:a3:e9:
         3f:64:47:67:96:1c:65:6f:ef:ac:b1:4d:7a:52:fb:00:32:af:
         1f:5d:b0:4a:e6:3e:1b:ee:1f:57:b8:21:59:86:f0:a8:f3:1e:
         02:32:c4:3c:1b:f0:c8:9b:00:b0:65:53:11:80:8c:46:44:44:
         39:46:1e:97:25:56:67:1d:05:5b:cf:44:1b:0a:d7:bc:47:d5:
         fa:ef:5c:be:b9:9c:6a:4c:cb:4b:5d:47:7d:df:c9:f6:36:1f:
         29:d6:df:1d:d0:bd:26:00:da:6a:04:bc:8d:4b:09:ec:fc:fd:
         cc:09:3c:7e:54:15:8a:30:21:b2:8a:b4:0b:b0:69:3c:a9:43:
         49:a5:6a:49:9d:05:26:42:65:87:de:a7:d5:2c:0d:7b:5d:e8:
         d5:7f:11:93:96:08:77:4a:66:ed:75:ac:83:07:99:e2:17:42:
         37:fc:94:80:98:b8:d9:6b:3e:a6:28:48:a5:29:3b:47:f4:59:
         94:2c:01:3c:93:62:fb:eb:26:3f:b7:8f:cf:a2:90:43:8f:aa:
         21:96:f0:cc:22:a2:a5:b2:85:33:88:a2:29:aa:c9:84:0d:1e:
         19:bc:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:01 2024 by rpki-client on console-fra.rpki-client.org