Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c447c2b-e2bc-3b33-bf6b-6b24021053f9.roa
File:                     9c447c2b-e2bc-3b33-bf6b-6b24021053f9.roa (raw, json)
Hash identifier:          Vt2SNiz7Yk30Jhdhvb2/duTW5nu1wjNA2tGoTMUgOAw=
Subject key identifier:   EF:A9:33:7C:B7:09:08:AF:AB:24:3B:CB:BC:D8:C2:72:DF:23:1E:7A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762297BA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c447c2b-e2bc-3b33-bf6b-6b24021053f9.roa
Signing time:             Fri 30 Nov 2018 01:09:05 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=a4ff08e6-20d5-4e8c-ab5e-243c756d037e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:26:0e:a2:c5:fb:e7:f8:9a:69:c0:a2:eb:
                    98:4f:c1:4b:39:93:cc:ea:bb:95:d0:da:cf:e9:85:
                    4e:ff:87:05:f4:9a:c4:24:b8:06:0b:42:1d:1c:06:
                    2d:ab:0e:73:7e:71:01:0a:b8:b5:27:f6:52:95:58:
                    dd:85:ee:7b:29:18:44:35:3f:c1:1c:3b:eb:74:72:
                    55:c8:f8:6e:b5:f7:35:74:58:f1:ab:b4:df:6a:80:
                    dc:3c:7c:25:00:c6:91:2e:46:ae:ee:ef:77:17:a3:
                    6e:6c:af:26:c5:08:2d:99:8b:a7:6f:45:53:b6:00:
                    47:fb:44:3f:7a:73:3d:9a:5b:cc:84:90:f4:82:0c:
                    2c:9e:30:b3:b7:43:55:5f:59:7d:3c:66:3d:07:e0:
                    e8:bd:6a:1d:0e:b0:9b:94:90:b2:45:18:66:44:26:
                    66:2c:27:b9:7d:74:40:15:d3:26:05:4e:c0:b3:6f:
                    69:a8:6a:f2:dd:8f:6e:5f:86:64:2e:be:85:80:71:
                    21:ec:de:11:f2:80:70:4e:ad:02:f4:da:84:f1:bb:
                    be:05:60:19:bd:5e:c2:67:36:c8:af:7e:0b:b0:01:
                    ea:2c:3c:d3:47:9c:20:fe:26:f3:3c:c0:58:30:95:
                    05:05:35:e1:6f:b9:86:7e:77:fc:f2:78:09:a0:79:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:33:7C:B7:09:08:AF:AB:24:3B:CB:BC:D8:C2:72:DF:23:1E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c447c2b-e2bc-3b33-bf6b-6b24021053f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:8a:25:00:cd:62:82:af:99:f2:41:47:80:0a:4c:b8:b4:
         a0:56:b6:c9:1d:71:41:d6:4f:d6:40:a5:79:c8:68:29:98:0b:
         98:5e:41:a6:05:77:8f:53:18:6b:61:ea:12:27:2f:fa:05:4c:
         2d:e8:2c:cb:f2:61:20:e1:f0:22:5e:b1:63:a4:fb:c5:3a:67:
         ed:7e:2d:9b:b5:07:21:0a:38:51:11:49:be:da:48:88:87:90:
         58:da:29:b2:ff:ef:56:fd:c0:59:12:7a:83:aa:4d:71:aa:31:
         9f:dc:4f:7d:db:ff:0c:a0:6e:be:a5:6a:cc:80:03:c0:a7:28:
         78:95:a1:9d:49:19:30:03:d8:dd:dc:4a:73:c7:61:64:b9:1e:
         93:69:6b:a6:f3:b8:e9:81:75:b6:c1:4c:25:c5:73:0a:3d:62:
         49:42:17:ea:0b:a6:35:30:0d:3a:44:16:74:18:f5:9d:04:24:
         07:a2:50:a9:a1:57:74:c9:5f:01:36:bb:74:31:67:fc:fe:6f:
         08:ac:0d:62:93:b8:2b:29:7a:1c:1e:d6:57:60:2e:eb:8c:1e:
         32:50:48:c5:86:47:9c:f2:8b:e5:09:d9:1c:8e:6e:b8:9b:40:
         44:88:9f:e1:a6:97:e7:4c:9c:af:70:ae:f5:84:da:12:00:3c:
         b5:8d:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:03 2024 by rpki-client on console-fra.rpki-client.org