Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8450194a-0376-3509-b9b1-d4a7823fb86c.roa
File:                     8450194a-0376-3509-b9b1-d4a7823fb86c.roa (raw, json)
Hash identifier:          c6NB779m1SpHpyzOcJ2WOhno9pMVNSpwCRCKDVUwR1Y=
Subject key identifier:   FA:E6:B1:D6:89:6C:92:99:D4:E9:82:9C:36:04:CB:E5:A5:25:16:9D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16588B6F15B
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8450194a-0376-3509-b9b1-d4a7823fb86c.roa
Signing time:             Thu 30 Aug 2018 02:43:35 +0000
ROA not before:           Wed 29 Aug 2018 04:00:00 +0000
ROA not after:            Fri 27 Aug 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        162.159.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:88:b6:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 29 04:00:00 2018 GMT
            Not After : Aug 27 04:00:00 2027 GMT
        Subject: CN=d48cfaa2-4405-46c9-99b8-0391a38ad3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:20:ee:e9:70:14:ac:b4:a1:f0:1b:66:d3:
                    9f:ae:01:31:e8:cf:59:6c:99:3a:01:d4:db:59:a3:
                    14:16:94:8c:10:47:76:98:ed:8e:12:02:01:ec:7c:
                    22:e7:9d:0e:d3:28:f1:4e:0b:d3:c1:50:01:cb:85:
                    41:d0:d0:2c:81:62:fe:57:76:13:5f:65:33:44:68:
                    09:99:21:45:26:75:ca:f0:97:0b:2f:3a:3a:d9:ab:
                    eb:93:6a:c0:da:5e:fc:22:58:c4:57:e7:f6:0d:40:
                    a2:ea:63:19:83:6a:da:4a:b7:38:04:24:f0:02:23:
                    03:50:67:31:71:a7:86:07:42:53:12:36:83:e4:38:
                    ea:26:56:da:a2:73:ef:26:f8:5e:29:c3:5f:1e:74:
                    de:2a:1d:13:85:c9:31:d6:d8:3d:b6:57:69:2d:b9:
                    78:83:5c:48:e9:f0:e4:c9:38:d4:b2:78:a3:d1:c0:
                    7e:e3:a4:94:10:a0:8a:1f:d7:c0:0a:47:84:3c:7c:
                    2b:4a:78:6b:a4:68:ee:4f:e5:5c:bb:5e:1e:f5:e1:
                    24:c2:2b:ed:50:d8:cd:f1:d0:a9:6f:8a:c4:ad:e6:
                    56:07:3d:75:4d:e6:8a:97:d9:aa:67:5b:d9:c0:7d:
                    ee:4d:08:46:e8:12:4e:24:c4:19:1e:2c:55:54:23:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:B1:D6:89:6C:92:99:D4:E9:82:9C:36:04:CB:E5:A5:25:16:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8450194a-0376-3509-b9b1-d4a7823fb86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:b4:e5:0e:d1:47:93:61:c2:e2:dd:59:22:ba:80:51:22:
         f2:9a:7b:c4:77:fc:92:8c:b6:f9:d7:ef:4d:ff:42:44:48:c6:
         c6:da:0e:ff:f4:89:30:f1:cf:c6:07:3b:41:a6:6b:b5:b2:d1:
         29:a5:47:10:d6:02:58:ee:7e:c4:b4:7d:0c:f8:a6:4e:d3:4c:
         ac:09:5b:41:93:f8:5b:15:4c:e8:2c:14:cb:66:80:d4:74:31:
         9f:0c:90:59:79:40:60:d4:3b:e5:17:f7:9b:65:5b:06:43:d5:
         26:0a:ce:f7:d1:dd:c0:18:8f:ec:16:67:a0:6a:65:b9:6a:d7:
         13:6b:3b:e0:89:71:ac:c4:d3:36:70:28:36:f6:c3:a2:cf:fd:
         a4:c4:68:a3:06:33:ce:a5:b2:7c:40:35:52:9e:46:62:ec:b1:
         08:a6:20:b8:c8:e4:11:51:d5:7e:a0:1f:1c:65:e2:f9:0b:df:
         8a:18:7c:19:34:90:4d:34:78:05:75:9c:36:ad:2e:aa:b0:b9:
         fe:a1:15:13:0d:38:fc:46:dd:df:0c:e0:74:4e:8f:02:c4:c1:
         99:dc:51:7c:5d:e2:eb:23:1e:74:ce:76:f7:24:36:13:80:f7:
         97:23:a8:ba:ad:20:fb:4f:cc:4b:a2:23:21:1a:ef:75:61:16:
         31:58:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:41 2024 by rpki-client on console-fra.rpki-client.org