Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99ee99a3-e54b-3dd4-8c02-8203a60b018e.roa
File:                     99ee99a3-e54b-3dd4-8c02-8203a60b018e.roa (raw, json)
Hash identifier:          /BkxIIwL6Rka84eSvlPXw7emZjfvsClnUVtaQ/lBn4o=
Subject key identifier:   CD:53:49:DB:9D:6B:D9:4E:90:73:72:95:FE:FF:A7:8D:9D:35:6D:DE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16588B6DF71
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99ee99a3-e54b-3dd4-8c02-8203a60b018e.roa
Signing time:             Thu 30 Aug 2018 02:43:30 +0000
ROA not before:           Wed 29 Aug 2018 04:00:00 +0000
ROA not after:            Fri 27 Aug 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        162.159.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:88:b6:df:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 29 04:00:00 2018 GMT
            Not After : Aug 27 04:00:00 2027 GMT
        Subject: CN=62768b69-0c48-4569-9713-7f9168425735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:9c:e4:72:cf:15:5a:f9:3c:a8:0f:d9:d1:
                    83:79:34:ea:9b:e1:47:7e:48:0d:12:93:ef:68:7a:
                    fc:0a:39:a5:6b:a6:40:5d:50:e2:e5:b0:12:1c:41:
                    89:48:aa:dd:7d:9e:0e:f9:5a:da:b0:ee:04:73:48:
                    4f:57:5d:c6:25:d4:f2:32:c3:39:88:0c:77:f5:ef:
                    be:50:de:93:d8:7c:7a:e4:1a:95:be:90:03:ca:3b:
                    5c:5b:af:b9:cd:44:1e:24:a1:8c:97:3c:44:04:10:
                    f7:f8:58:aa:af:de:8e:2c:7e:ff:38:13:bd:01:6e:
                    79:c5:f9:5b:19:b3:d9:e6:e4:47:52:84:99:e6:df:
                    73:09:2f:e7:b9:0c:e5:ab:b6:89:3b:20:32:c1:af:
                    89:31:e8:d3:6f:10:3f:5c:bd:f5:21:a4:7c:e9:aa:
                    c9:dd:38:75:29:aa:0b:52:d8:1a:47:2b:3b:63:4b:
                    26:35:d0:f6:84:7e:37:3e:a5:ac:d6:41:02:b9:0d:
                    60:d1:b1:5a:34:6d:91:12:3c:e8:7b:9d:f0:09:ff:
                    19:f5:b7:96:6a:8d:43:80:3e:bc:76:f6:5a:40:d1:
                    7a:1f:c5:ec:1a:e6:05:18:4b:da:20:63:7c:e4:63:
                    01:53:87:52:72:85:e7:6f:a3:f5:17:d9:9b:ba:64:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:53:49:DB:9D:6B:D9:4E:90:73:72:95:FE:FF:A7:8D:9D:35:6D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99ee99a3-e54b-3dd4-8c02-8203a60b018e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e2:3e:f5:58:3f:c5:01:56:f3:82:09:31:e7:db:c0:94:f8:
         18:ca:4e:f6:01:5e:77:39:2d:9c:7c:8c:77:df:9a:9b:70:c1:
         73:bc:86:03:b6:d2:ea:1e:0f:82:19:05:e9:02:3b:d6:e6:41:
         19:3e:da:c2:95:e2:e4:e0:9b:b5:da:c6:c9:89:e7:c3:07:63:
         84:25:6f:e3:04:db:7a:59:9a:b4:54:08:a3:c2:ae:19:1a:e2:
         6e:be:d3:67:80:21:91:d9:8f:24:af:1a:bd:ad:68:6e:ac:c3:
         8f:1a:62:a9:03:47:46:95:2c:bf:f6:df:f6:ff:ef:16:02:1b:
         f8:4a:de:1b:9f:68:64:26:3c:7c:ff:1e:b4:f4:5f:b7:de:c7:
         9d:86:9b:04:52:ac:69:7d:4c:d2:8a:52:a3:71:41:e1:67:25:
         40:53:ee:57:bc:42:91:da:ab:fb:73:15:89:7b:b3:2a:7c:b5:
         94:bb:f1:1c:b0:74:f2:af:5a:60:d1:f1:aa:b0:b7:f7:66:79:
         0c:9a:bd:a9:a0:c5:c8:ae:58:8a:f1:15:56:16:f8:6b:41:b2:
         9d:e4:df:eb:76:b5:a2:3f:21:16:d6:1b:8c:c9:0d:28:de:56:
         7f:fd:b4:d3:11:72:bc:e6:91:d2:99:36:de:58:a1:ed:b1:1c:
         6c:00:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:12 2024 by rpki-client on console-ams.rpki-client.org