Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7bec499b-f47b-3ab0-a636-82056a027a83.roa
File:                     7bec499b-f47b-3ab0-a636-82056a027a83.roa (raw, json)
Hash identifier:          qFW1gV6Axh/U+JPoQxWpFuIbxcUgNhuntS/JfAf2gk0=
Subject key identifier:   3F:4B:18:77:E7:8E:A5:6F:1F:58:2E:37:BF:70:F0:2B:BD:0C:75:46
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762298676
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7bec499b-f47b-3ab0-a636-82056a027a83.roa
Signing time:             Fri 30 Nov 2018 01:09:07 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:86:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=f54bf555-04ef-4cee-8a8f-cf7ed664bc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:01:b9:14:c7:9e:6e:5d:1a:26:f0:0c:65:
                    57:2f:dc:8c:0d:08:c6:01:77:09:2d:27:34:18:66:
                    39:2e:8b:3d:dd:25:51:3b:de:0b:1c:f9:62:67:1b:
                    24:b7:41:64:b6:f6:de:f1:09:1a:e5:4c:3c:7d:84:
                    2c:57:eb:e3:7b:84:7d:6f:05:f1:cf:fa:ef:8b:17:
                    5e:4e:84:86:45:91:ca:27:06:2d:8a:cb:79:c7:c7:
                    f1:e4:e6:18:6a:1e:93:1d:e9:56:ed:90:d3:82:06:
                    6b:13:d0:1f:d6:d6:01:f2:0b:21:98:fc:9e:36:c9:
                    6e:38:88:e5:15:94:01:fe:9a:6f:f8:1b:3a:32:53:
                    6f:54:c1:b0:68:2d:bb:e3:1c:52:1c:40:df:cb:1e:
                    2c:fd:08:13:16:3c:fc:46:5d:55:15:72:bd:c3:82:
                    14:a2:11:86:76:61:63:e8:b5:35:32:8b:c8:4e:4b:
                    e8:b3:95:b7:c8:3e:cc:3c:e9:c9:ce:44:5b:2e:c5:
                    46:73:39:c2:1b:41:a3:e6:4f:37:5e:21:00:02:1c:
                    0c:bd:a1:c0:da:ce:ef:db:38:6a:26:7b:da:1a:6e:
                    ce:04:28:0c:bf:2b:de:4b:8c:98:96:46:c9:f9:db:
                    8c:8f:d5:ef:4b:17:ec:94:4f:da:fa:6d:35:48:4f:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4B:18:77:E7:8E:A5:6F:1F:58:2E:37:BF:70:F0:2B:BD:0C:75:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7bec499b-f47b-3ab0-a636-82056a027a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:d7:94:69:8d:12:7e:63:9d:aa:a8:e5:38:cd:7d:11:89:
         67:f2:df:37:09:ba:99:02:e7:74:6a:1d:13:4c:9f:09:44:3a:
         b0:29:ab:bd:1a:74:e4:38:ea:a6:16:9b:73:ce:da:58:60:87:
         93:7f:d9:50:d1:95:6a:4b:ee:a4:7a:b6:4f:92:d1:3b:81:c0:
         48:63:17:65:5f:25:f0:da:3f:93:89:9c:9a:26:2f:10:22:23:
         8c:d0:dd:13:65:d5:8a:c7:a9:a7:81:3b:0c:95:d2:c3:21:43:
         97:f3:55:09:a8:20:af:57:c4:f7:d2:d7:3d:49:77:28:22:e0:
         78:02:a5:70:a0:9f:6c:40:93:fd:ad:e8:e1:13:61:c8:7c:86:
         28:f8:cf:e9:c6:d5:db:e6:d9:ad:3a:0d:53:44:b4:21:96:31:
         cb:43:bc:08:c3:e1:4b:99:e1:ca:ca:9b:7d:b9:83:f1:c7:01:
         ae:c2:af:e2:93:14:e8:0a:72:8f:57:15:a1:d6:e6:d5:3c:8b:
         95:d0:8c:13:87:2c:93:78:7d:1e:68:98:f2:e1:26:e7:d3:a2:
         00:4b:32:98:b2:bc:58:20:c5:72:17:59:16:3b:36:fd:b6:1c:
         00:f8:46:d4:96:8d:fd:de:4c:fe:c5:20:68:86:61:15:18:1a:
         34:1b:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:08 2024 by rpki-client on console-fra.rpki-client.org