Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78c34dde-f0b5-32cb-9a28-7e569094641e.roa
File:                     78c34dde-f0b5-32cb-9a28-7e569094641e.roa (raw, json)
Hash identifier:          YdWYcZVTQItBY6ESz0xmuLBhPAUUsqZYXOy3C0kACqE=
Subject key identifier:   0F:FB:4C:52:16:E7:CE:C4:D2:4C:87:69:52:EA:9F:83:0A:E2:20:37
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762298929
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78c34dde-f0b5-32cb-9a28-7e569094641e.roa
Signing time:             Fri 30 Nov 2018 01:09:08 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:89:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=c2b16232-c074-4cc7-bcdc-4089456b15e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:0a:62:78:c8:92:24:32:81:24:c5:f8:01:
                    a0:c6:f7:20:3a:32:35:18:07:d9:a0:97:c2:d2:92:
                    54:c2:01:93:10:a0:0f:07:f3:18:18:25:bf:15:d5:
                    fc:92:48:15:6c:c0:7c:61:a0:b7:02:fe:be:04:c8:
                    b4:49:ce:f1:0c:f6:91:54:2f:a3:c3:c3:a9:60:d1:
                    77:42:20:81:8d:e9:91:bb:eb:53:0b:fc:dd:a4:c7:
                    9b:fd:6f:64:4b:8f:73:f9:eb:60:33:04:20:f9:69:
                    fd:88:b5:6e:50:21:fb:bb:41:79:a6:5b:3b:e6:7d:
                    e5:b6:90:72:ac:15:99:0d:8f:8c:c1:6a:96:4a:3b:
                    f3:d9:fb:f0:cc:9f:0c:b9:9d:df:e6:65:e9:48:97:
                    42:68:79:8d:9e:7e:be:b0:64:0b:bb:81:a5:55:aa:
                    0c:97:8b:60:de:58:4f:ec:0d:d6:2c:68:49:80:0a:
                    4e:58:a6:96:ca:54:b8:bc:e4:bc:4b:57:39:ed:47:
                    81:11:a6:79:b2:80:b3:36:8f:5c:d4:9c:cc:d4:cc:
                    9d:1b:1b:fe:69:86:84:68:91:94:d4:b3:96:b3:04:
                    98:e6:33:81:b9:4e:ef:96:42:ba:34:0e:ab:d8:e0:
                    4a:69:07:a5:7c:ef:66:b3:46:4a:f7:2e:26:a7:df:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FB:4C:52:16:E7:CE:C4:D2:4C:87:69:52:EA:9F:83:0A:E2:20:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78c34dde-f0b5-32cb-9a28-7e569094641e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:c8:0b:23:49:de:b8:10:3c:af:13:16:4f:2f:9f:31:6c:
         c5:0e:f3:22:e4:ee:b2:22:bf:57:b8:b9:60:38:6f:3f:d5:57:
         28:7d:2f:b3:de:60:b6:79:b1:8b:e3:b5:34:2c:91:2d:95:e1:
         49:44:63:d6:3b:73:d7:67:1c:4c:a0:ec:a5:2a:82:c9:40:b7:
         c5:45:b2:37:27:78:78:65:04:e5:0f:a8:ac:e3:b3:83:64:4c:
         ad:af:43:2e:d3:3f:50:f5:55:71:7c:86:0a:29:92:e7:d3:64:
         00:9c:44:13:42:96:19:94:30:e9:ad:c4:7a:58:9f:3b:a2:c2:
         e2:1f:3a:a1:a9:54:de:90:ff:10:d3:5e:8a:9f:05:b1:03:4b:
         91:52:e7:d2:a4:aa:ce:80:7b:f9:f6:e9:65:1c:6c:97:72:f4:
         eb:83:6f:8b:f6:94:9b:f7:31:c3:54:5e:96:7b:c9:68:3a:ae:
         34:41:7c:ef:35:df:a1:88:e5:3a:20:d3:4c:4b:ef:a2:06:ef:
         3d:56:5b:7c:eb:3f:38:ac:9e:b7:b4:8a:ec:e2:08:1f:be:b2:
         47:a0:d6:bc:a0:54:36:f4:f5:a6:e5:bd:3a:86:2d:b8:2a:a5:
         9a:44:e0:cf:15:4b:61:b8:56:82:9b:05:d2:8f:cd:31:16:5b:
         b0:6d:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:08 2024 by rpki-client on console-ams.rpki-client.org