Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ab03c3e-8eb3-3946-8244-c6091ab41e5d.roa
File:                     8ab03c3e-8eb3-3946-8244-c6091ab41e5d.roa (raw, json)
Hash identifier:          4kyOuNtkAWgnmSYGTtNhZIqDXuoADIsY/SWRJOv0DD4=
Subject key identifier:   A0:B3:DD:7C:45:16:4D:49:98:36:9C:D8:EF:48:AB:C2:36:0A:39:19
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AC4DD
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ab03c3e-8eb3-3946-8244-c6091ab41e5d.roa
Signing time:             Fri 30 Nov 2018 01:10:29 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     202623
IP address blocks:        198.41.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:c4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=bec83716-165d-4542-b127-7bad775c03f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:dd:4b:60:ae:c3:28:7e:16:4b:44:2a:37:
                    bf:4e:60:63:e3:35:2d:24:bd:5c:48:ea:32:65:d3:
                    d7:29:2c:cc:7d:b3:5e:0f:a5:60:bc:f4:90:c6:0d:
                    10:17:65:89:6b:c9:cf:bb:37:23:0f:8e:b3:f6:7a:
                    6c:e7:75:0d:bc:17:d6:d1:f7:98:94:69:19:56:9f:
                    22:da:85:0b:7c:a2:59:6e:12:b6:86:87:7c:78:5f:
                    aa:1e:55:a3:e4:e0:8e:c3:2d:fe:ee:1a:d0:51:00:
                    11:c9:84:50:7e:0e:8c:94:ae:04:b3:c2:57:d4:c6:
                    6b:e5:be:3b:ff:74:d5:8e:f8:e1:b1:43:01:52:49:
                    0d:f8:f3:42:6b:c7:06:6a:c2:8a:a5:84:bd:5d:9e:
                    8c:d0:55:3b:22:2f:15:11:a2:8d:f3:01:52:bc:f2:
                    66:eb:d5:11:7f:e0:30:b8:ff:5e:9d:1d:c6:fa:96:
                    1b:30:3e:c8:0a:97:ec:76:a2:7a:5b:fc:d8:05:03:
                    47:72:4e:27:35:f8:e1:c0:71:8f:ce:4d:c7:6d:50:
                    51:2d:8b:4a:49:02:d9:5a:85:eb:a4:11:81:ba:b6:
                    13:cb:61:9c:8a:13:44:57:5c:22:66:dd:af:a4:7d:
                    d1:33:71:47:11:78:53:95:97:b3:6d:ea:26:c6:16:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B3:DD:7C:45:16:4D:49:98:36:9C:D8:EF:48:AB:C2:36:0A:39:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ab03c3e-8eb3-3946-8244-c6091ab41e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:46:f4:7d:4a:25:79:fa:d1:a2:04:7a:d8:85:5e:ca:51:e1:
         e4:3d:26:e5:67:98:2a:7c:02:10:be:7b:bf:c7:80:b8:d1:84:
         6c:26:c0:08:a4:79:8e:f5:d3:37:d1:3b:94:1c:52:8c:c8:c6:
         32:4c:50:e9:1b:05:f1:02:00:b4:38:57:12:f3:05:c2:4f:f4:
         50:1a:f6:69:b7:d8:2a:04:8d:f7:d6:2a:bd:af:f7:a2:7b:95:
         dd:33:b1:4c:9d:d6:01:5a:3f:85:06:5d:c4:95:7e:66:b3:61:
         0f:01:83:5d:58:29:04:65:20:77:8e:98:64:65:fc:32:db:b4:
         02:ed:e7:7f:81:bf:6c:8c:dc:1b:b2:ce:f2:c8:d1:50:95:83:
         a5:42:93:d6:41:b6:23:0c:c6:26:12:4b:53:bc:c8:8d:72:2c:
         e6:5f:1d:b4:5d:1c:6d:17:fb:e4:64:8c:25:6d:1e:27:b5:49:
         52:ec:fb:e0:f5:7c:82:e7:f9:09:89:dd:7a:3c:4a:47:75:80:
         7e:de:02:ea:0e:8d:04:11:6a:5b:8c:4e:ac:4b:e0:11:1b:32:
         93:d5:4a:a9:7c:61:90:3b:65:f7:2c:c8:53:b8:e8:53:7d:a2:
         1c:93:dd:a3:70:97:c0:87:7f:6d:54:0a:f6:c4:1f:73:6e:7c:
         f5:37:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:01 2024 by rpki-client on console-fra.rpki-client.org