Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7231b1b6-b4ae-3270-9d2c-1097429690e0.roa
File:                     7231b1b6-b4ae-3270-9d2c-1097429690e0.roa (raw, json)
Hash identifier:          VrPn3F4r0eTKk/SckOx0rdPMCyxeH1SHYdqjc4nWG4Y=
Subject key identifier:   9B:F9:36:8F:8D:56:82:E6:C0:B2:FB:F9:26:7E:45:E5:0D:FC:9F:9B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229F73A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7231b1b6-b4ae-3270-9d2c-1097429690e0.roa
Signing time:             Fri 30 Nov 2018 01:09:36 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:f7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=78fb9137-b6c2-4db3-82b4-9501770a6f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:22:55:66:90:e7:82:b1:04:46:d2:1b:0e:
                    0d:06:9f:89:09:83:a1:00:a8:37:24:9c:ad:c4:39:
                    b2:27:12:45:a8:7c:e9:93:25:fb:9e:d9:43:b0:d8:
                    1e:c5:84:41:f6:14:58:21:22:99:ef:f6:4f:b9:2b:
                    0b:68:86:a2:00:38:a4:e1:43:0c:19:6b:fd:0e:cb:
                    ec:a6:c7:20:96:bb:2f:3a:d9:27:fe:23:85:e0:3d:
                    88:ba:e4:4a:2b:58:96:c5:48:53:0b:e3:e3:ad:e5:
                    b9:3f:51:29:9f:06:f4:54:8b:82:b4:43:13:78:a3:
                    19:3a:82:7c:ab:34:aa:c9:6c:75:40:8d:67:51:92:
                    31:cb:21:37:2d:fe:b6:c4:11:68:c4:b4:3e:0d:fd:
                    83:2d:a2:7b:2f:2e:8f:b4:d0:f1:7e:1a:3b:04:ba:
                    42:5a:29:c4:41:4a:dd:a4:20:fe:28:9b:64:27:c4:
                    46:d7:5c:43:89:e4:a7:f3:c6:2b:16:80:fc:8f:7e:
                    63:49:1b:22:10:b2:1c:9e:80:1e:bd:ca:62:d6:f0:
                    8d:82:ef:71:00:46:dd:29:11:b3:ea:31:8e:d9:1c:
                    6f:4e:ee:23:4e:df:bc:31:1c:2c:23:23:a4:13:cb:
                    37:65:ea:4f:37:81:31:ca:91:94:c1:90:c7:d3:38:
                    47:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:36:8F:8D:56:82:E6:C0:B2:FB:F9:26:7E:45:E5:0D:FC:9F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7231b1b6-b4ae-3270-9d2c-1097429690e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5f:d6:fd:bb:58:64:1c:a8:f5:2d:4c:01:cd:22:c9:7d:9e:
         3f:78:b5:32:d9:b6:62:58:fd:38:93:77:9f:71:4e:dd:25:fa:
         81:c0:b0:5e:5f:ed:07:3a:4f:c8:05:c7:f2:65:1c:07:41:19:
         ef:28:c6:b1:a7:d8:3f:28:fb:7e:f8:9a:a8:26:32:bc:c6:bf:
         e6:d2:06:8b:09:c1:72:d7:0c:73:c8:df:ae:b3:da:a6:5a:4d:
         35:26:df:e2:4a:50:93:22:59:02:a4:e5:bf:dc:69:77:d8:03:
         77:56:78:7b:92:0d:53:8a:e4:7b:2b:d3:89:00:fe:74:eb:4a:
         09:ba:aa:0d:23:89:25:c3:fb:f5:73:20:d4:81:9e:fb:33:12:
         6f:95:02:50:66:99:4b:68:e3:8b:0e:45:46:44:c5:80:2e:5d:
         c8:1e:69:8f:3b:af:07:62:2c:77:c9:78:ef:65:20:56:f7:8c:
         4c:48:80:e9:54:99:18:43:c9:1d:8a:b7:0e:da:24:3d:5c:79:
         1e:54:0c:a3:94:60:d4:49:41:1d:fa:2d:5b:cb:b4:93:96:07:
         41:4c:db:59:71:0c:cc:90:bf:ce:79:0e:98:9a:35:55:d5:29:
         3e:db:f1:85:36:61:74:8f:00:bb:c6:e7:bf:39:fc:3f:97:83:
         59:6f:d5:ac
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Ip9zowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDc4
ZmI5MTM3LWI2YzItNGRiMy04MmI0LTk1MDE3NzBhNmYzMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKyEIlVmkOeCsQRG0hsODQafiQmDoQCoNyScrcQ5
sicSRah86ZMl+57ZQ7DYHsWEQfYUWCEime/2T7krC2iGogA4pOFDDBlr/Q7L7KbH
IJa7LzrZJ/4jheA9iLrkSitYlsVIUwvj463luT9RKZ8G9FSLgrRDE3ijGTqCfKs0
qslsdUCNZ1GSMcshNy3+tsQRaMS0Pg39gy2iey8uj7TQ8X4aOwS6QlopxEFK3aQg
/iibZCfERtdcQ4nkp/PGKxaA/I9+Y0kbIhCyHJ6AHr3KYtbwjYLvcQBG3SkRs+ox
jtkcb07uI07fvDEcLCMjpBPLN2XqTzeBMcqRlMGQx9M4R6cCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSb+TaPjVaC5sCy+/kmfkXlDfyfmzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzcyMzFiMWI2LWI0YWUtMzI3
MC05ZDJjLTEwOTc0Mjk2OTBlMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxEmDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAZF/W/btYZByo9S1MAc0iyX2eP3i1Mtm2Ylj9OJN3n3FO3SX6gcCwXl/tBzpP
yAXH8mUcB0EZ7yjGsafYPyj7fviaqCYyvMa/5tIGiwnBctcMc8jfrrPaplpNNSbf
4kpQkyJZAqTlv9xpd9gDd1Z4e5INU4rkeyvTiQD+dOtKCbqqDSOJJcP79XMg1IGe
+zMSb5UCUGaZS2jjiw5FRkTFgC5dyB5pjzuvB2Isd8l472UgVveMTEiA6VSZGEPJ
HYq3DtokPVx5HlQMo5Rg1ElBHfotW8u0k5YHQUzbWXEMzJC/znkOmJo1VdUpPtvx
hTZhdI8Au8bnvzn8P5eDWW/VrA==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:07 2024 by rpki-client on console-fra.rpki-client.org