Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ffa5a7d-11f1-3529-8c25-9a3bf04bc3f4.roa
File:                     8ffa5a7d-11f1-3529-8c25-9a3bf04bc3f4.roa (raw, json)
Hash identifier:          0guKrUYqwBHS0ro0fxbFpKyuCK6y5CXoVjmueCLiv2M=
Subject key identifier:   27:DD:28:E8:EF:1E:B2:BC:AA:DC:15:60:4B:72:DE:F0:3D:9C:1C:45
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DD1A130D8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ffa5a7d-11f1-3529-8c25-9a3bf04bc3f4.roa
Signing time:             Tue 15 Oct 2019 22:54:24 +0000
ROA not before:           Tue 15 Oct 2019 04:00:00 +0000
ROA not after:            Wed 19 Aug 2026 04:00:00 +0000
asID:                     13335
IP address blocks:        162.158.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:d1:a1:30:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 15 04:00:00 2019 GMT
            Not After : Aug 19 04:00:00 2026 GMT
        Subject: CN=fdd4223c-91fa-46d4-a2c1-8c5c868debcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:cc:05:2d:20:32:f7:2f:94:a9:51:92:55:
                    57:a8:4c:8d:7e:47:5c:ef:9e:46:ae:c2:7b:e1:79:
                    8c:97:0a:d9:51:e3:17:37:4b:f1:1b:02:af:f7:e5:
                    ef:97:12:8c:fd:1a:a7:7a:62:41:74:27:77:a0:90:
                    59:75:b1:cd:24:0f:d9:08:d0:10:57:c7:8f:9d:2b:
                    e7:d7:42:39:66:d1:03:e6:c3:5a:b0:24:25:be:54:
                    88:fe:17:9f:c3:68:f0:e4:a1:2a:0f:e5:85:d5:23:
                    3b:69:ba:db:86:1a:d1:1e:01:14:37:c8:04:06:8b:
                    a1:a2:0e:6b:43:be:5c:e0:0e:64:10:e7:c8:56:44:
                    c8:be:64:7d:c9:c8:21:ee:5b:23:0d:27:5d:4d:57:
                    40:49:1d:a0:38:78:bc:5c:c5:3c:43:7c:44:ed:ac:
                    bf:c0:85:3d:7c:74:3a:f5:bd:7c:38:4a:48:ba:3d:
                    69:5e:6a:64:83:77:b0:16:be:b5:55:17:2c:70:8a:
                    e7:af:af:c0:0e:dc:a1:67:de:7b:dd:31:6d:50:98:
                    8a:c1:6c:ac:36:82:89:85:e4:56:e6:b2:77:b5:5c:
                    f6:b9:93:aa:f3:d5:df:97:52:19:ef:67:1b:6c:3d:
                    51:42:e1:70:6e:44:55:0c:dc:97:68:6d:79:ff:9a:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:28:E8:EF:1E:B2:BC:AA:DC:15:60:4B:72:DE:F0:3D:9C:1C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ffa5a7d-11f1-3529-8c25-9a3bf04bc3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:6f:1e:ed:fa:5b:a1:a0:27:28:d1:3a:53:68:ce:5f:a3:
         d4:57:84:83:a7:b8:19:48:07:7c:eb:cb:3c:95:d5:ea:74:3b:
         06:61:5d:22:a5:42:a8:5f:6f:fc:50:eb:57:14:d7:72:1e:77:
         89:96:5e:8d:76:cd:cb:aa:89:57:f1:c0:9e:27:f1:c4:e3:03:
         38:13:16:c9:bf:8b:fd:64:a0:97:83:d7:56:39:11:92:2c:eb:
         03:32:85:ed:da:26:1d:aa:da:e5:4a:ad:63:ce:13:98:8e:d4:
         6a:5b:87:f6:5b:bb:71:3f:53:19:29:e0:af:b2:71:31:35:ec:
         72:14:d2:55:1f:82:b1:cc:fe:ba:5c:08:43:b1:65:82:7e:9b:
         f0:4e:b7:dc:33:c6:94:0a:1a:7e:ee:fd:6b:d2:17:e7:8a:4d:
         c8:bb:7b:41:8d:c9:2f:49:84:c5:20:90:a5:18:33:ef:09:21:
         35:8f:5d:3f:ad:c9:d7:8e:cc:ae:b4:34:c9:59:0d:e3:e6:79:
         97:76:28:b0:fb:3c:b4:b1:a5:d6:e8:e2:99:74:c0:1c:90:eb:
         ba:53:fe:ba:d7:4e:e2:7c:51:fc:bc:e9:a3:58:ae:fc:de:53:
         9b:5a:0b:76:1e:55:82:af:77:23:b3:41:12:b6:1f:e7:21:92:
         12:a6:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:11 2024 by rpki-client on console-ams.rpki-client.org