Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/845925d5-c5b6-34dd-8fc5-ef47a8910970.roa
File:                     845925d5-c5b6-34dd-8fc5-ef47a8910970.roa (raw, json)
Hash identifier:          PhefFvaHHgCRk82bzD4E52b1vc1HyD5xCcX3JMNvfPk=
Subject key identifier:   EA:39:52:F7:39:02:6E:A1:61:C7:E3:0C:69:F4:9B:CE:3B:13:CE:0E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762291ABC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/845925d5-c5b6-34dd-8fc5-ef47a8910970.roa
Signing time:             Fri 30 Nov 2018 01:08:40 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        108.162.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:1a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=9548355b-12e0-454c-9606-aa68cd3b1e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:f5:98:67:34:c9:ed:ff:54:a6:26:f1:be:
                    a7:06:e5:b7:28:38:8d:c6:0b:0b:8d:7a:90:07:17:
                    27:44:33:9b:65:34:2d:d1:bd:4e:3f:78:5f:2b:03:
                    92:3a:7b:5a:4e:29:5b:12:8d:f9:16:51:82:f4:8e:
                    09:2e:70:8b:fa:99:f8:3b:43:5e:fb:27:75:e5:49:
                    a0:b0:2a:41:67:c7:17:a3:b0:d2:54:2a:8c:28:7c:
                    44:f2:50:ad:5d:5e:aa:f1:3d:b2:91:38:6a:de:5a:
                    da:d8:31:3f:38:d8:71:97:75:fb:09:ad:0c:d5:2b:
                    9e:9e:e0:8b:28:84:0c:f2:34:b2:cb:74:ec:3b:2b:
                    6a:e6:73:34:9c:86:05:58:f1:b9:47:45:65:26:9f:
                    0b:83:89:94:08:04:55:04:af:a9:c1:4a:d9:99:f3:
                    5b:de:03:69:da:26:54:8d:29:28:30:29:95:62:11:
                    4b:5d:61:ff:c1:ee:9b:f3:72:f1:f3:50:6b:36:bb:
                    c5:dc:36:a7:85:9c:53:6f:ca:32:7f:0e:ca:69:29:
                    87:45:8d:b1:b6:f6:01:ab:ec:87:4d:18:ce:a2:2f:
                    3d:a6:a0:3e:f7:3f:58:6b:2f:e3:53:d3:7b:c9:35:
                    c2:8c:93:46:64:20:be:93:fd:08:d6:15:e7:57:64:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:52:F7:39:02:6E:A1:61:C7:E3:0C:69:F4:9B:CE:3B:13:CE:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/845925d5-c5b6-34dd-8fc5-ef47a8910970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:90:57:7d:79:94:8d:eb:13:bf:97:0a:40:51:7f:71:e7:5b:
         85:1e:13:3a:b0:14:9e:01:af:e6:73:ab:5a:55:74:fc:8d:2d:
         cf:92:39:ef:74:24:41:d2:8e:e1:e5:65:f4:03:da:ff:36:a0:
         02:d3:86:f4:6a:2c:e7:c3:1a:71:4e:2e:3d:94:60:cb:98:01:
         19:83:6c:f9:3e:8a:dd:31:0f:6d:0a:da:62:f1:0e:e6:fb:a0:
         be:ec:e2:01:ea:2e:2f:d6:a9:f2:37:50:f9:ee:4b:49:2c:bc:
         2a:93:a5:ad:94:62:b7:ec:c9:77:f5:3f:03:a3:4f:2a:9a:a4:
         ac:db:b8:cd:a8:7b:91:16:ca:c9:fd:c2:2a:79:35:10:c2:8c:
         a9:4a:21:2c:58:ae:e0:bd:93:e5:d9:e2:31:47:67:94:1c:dd:
         b8:cf:22:07:46:f7:1c:36:82:25:75:7b:80:cb:f7:2d:2a:2c:
         88:59:05:5a:d9:bf:73:30:ce:75:3f:c7:f1:bd:5f:ec:ef:e2:
         39:f6:ce:bf:22:ee:65:3b:10:01:20:c8:7d:98:d5:34:89:c5:
         f2:ba:0a:0e:ed:0c:cd:89:e2:fb:1d:58:a4:9c:d3:b3:e6:fd:
         19:db:14:5e:0d:6f:07:cd:41:44:97:67:f0:40:f0:b7:4d:ab:
         bb:33:7c:37
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IpGrwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDk1
NDgzNTViLTEyZTAtNDU0Yy05NjA2LWFhNjhjZDNiMWUyMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALzF9ZhnNMnt/1SmJvG+pwbltyg4jcYLC416kAcX
J0Qzm2U0LdG9Tj94XysDkjp7Wk4pWxKN+RZRgvSOCS5wi/qZ+DtDXvsndeVJoLAq
QWfHF6Ow0lQqjCh8RPJQrV1eqvE9spE4at5a2tgxPzjYcZd1+wmtDNUrnp7giyiE
DPI0sst07DsrauZzNJyGBVjxuUdFZSafC4OJlAgEVQSvqcFK2ZnzW94DadomVI0p
KDAplWIRS11h/8Hum/Ny8fNQaza7xdw2p4WcU2/KMn8Oymkph0WNsbb2Aavsh00Y
zqIvPaagPvc/WGsv41PTe8k1woyTRmQgvpP9CNYV51dkAhcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTqOVL3OQJuoWHH4wxp9JvOOxPODjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzg0NTkyNWQ1LWM1YjYtMzRk
ZC04ZmM1LWVmNDdhODkxMDk3MC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGyi7jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAPZBXfXmUjesTv5cKQFF/cedbhR4TOrAUngGv5nOrWlV0/I0tz5I573QkQdKO
4eVl9APa/zagAtOG9Gos58MacU4uPZRgy5gBGYNs+T6K3TEPbQraYvEO5vugvuzi
AeouL9ap8jdQ+e5LSSy8KpOlrZRit+zJd/U/A6NPKpqkrNu4zah7kRbKyf3CKnk1
EMKMqUohLFiu4L2T5dniMUdnlBzduM8iB0b3HDaCJXV7gMv3LSosiFkFWtm/czDO
dT/H8b1f7O/iOfbOvyLuZTsQASDIfZjVNInF8roKDu0MzYni+x1YpJzTs+b9GdsU
Xg1vB81BRJdn8EDwt02ruzN8Nw==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:08 2024 by rpki-client on console-fra.rpki-client.org