Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e1ec351-ea26-34b1-9af3-79b4a25ae09c.roa
File:                     9e1ec351-ea26-34b1-9af3-79b4a25ae09c.roa (raw, json)
Hash identifier:          7r8YyupSA4RzhxD1nU5KqOTGTl/spWWyqO5sVmAcpzo=
Subject key identifier:   18:5D:9E:BC:9A:78:1B:0D:76:66:8F:81:CC:0C:A6:AD:A9:33:0A:B1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762293195
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e1ec351-ea26-34b1-9af3-79b4a25ae09c.roa
Signing time:             Fri 30 Nov 2018 01:08:46 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:31:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=9f6c3c78-7312-46ca-8e26-268d61ee52a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:8c:28:ab:32:ca:0f:92:78:fc:81:5e:2c:
                    e3:a1:4d:62:26:b4:db:fd:41:2a:5f:a8:e0:4b:81:
                    2a:ba:e5:7a:cd:a9:1e:05:52:07:cf:21:ff:79:14:
                    0e:d4:e5:68:11:0c:e9:03:74:88:d7:da:09:04:cf:
                    2d:05:43:ce:75:5f:0d:0f:4a:6d:0d:49:f8:a1:2c:
                    ff:04:9b:19:e0:bb:fe:32:8b:6e:92:5c:a9:cd:fd:
                    7f:56:ed:78:f3:6a:5c:f6:1f:04:37:ef:b2:62:6d:
                    91:6d:91:92:81:a6:0c:50:de:f7:ed:78:32:17:34:
                    c2:7f:14:c9:48:74:87:a8:8e:7d:ed:21:9a:00:43:
                    c0:44:e3:e8:12:31:0b:d5:72:5e:3b:b3:80:19:df:
                    48:f1:2c:d0:61:17:a2:1e:96:bb:d2:f6:a7:12:57:
                    78:89:4a:de:39:06:26:23:44:a1:9d:22:ec:a6:76:
                    b9:cd:72:fb:aa:3d:5e:e0:07:23:33:61:58:36:26:
                    19:9d:19:28:6b:a8:3a:29:6d:c3:36:28:08:05:27:
                    f2:db:be:ff:e6:2f:f2:2c:97:91:45:56:7d:00:8e:
                    13:6a:cf:f5:83:9e:ce:cf:c5:1a:56:53:22:9b:a1:
                    a4:e3:41:8e:c6:6c:ac:20:db:9c:a1:19:4c:f5:6f:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5D:9E:BC:9A:78:1B:0D:76:66:8F:81:CC:0C:A6:AD:A9:33:0A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e1ec351-ea26-34b1-9af3-79b4a25ae09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:7a:c0:4f:9e:39:ce:78:73:74:15:a3:50:db:19:8b:a3:7d:
         b5:b8:c6:85:96:ac:59:4e:2a:fa:be:6a:10:c5:64:fb:1a:e8:
         13:34:52:16:3b:fd:a5:9f:6f:8b:7c:80:f1:22:2a:0c:48:c0:
         98:a9:b2:07:4f:ec:0c:8a:98:a8:6d:19:6a:41:23:44:b6:ed:
         14:86:5d:5d:46:ed:91:bb:c8:67:53:c5:ad:6f:a6:3c:0a:fb:
         53:a7:d9:78:db:06:46:e3:2d:0d:08:b4:b3:5c:13:42:3d:c3:
         c1:96:ed:81:da:b9:ea:c3:03:2e:fe:78:44:ba:bc:dc:46:3a:
         e5:12:c1:55:63:39:fb:c5:cb:8d:d3:74:3b:1d:b8:ea:6c:23:
         f9:34:65:f3:b1:61:32:72:f3:a7:5d:0c:3e:0f:f8:dc:3d:87:
         e5:3a:66:a7:7d:09:c3:cc:b8:6d:4f:8e:5c:8b:fa:3a:77:bc:
         bc:f6:70:70:fc:d5:d3:95:ae:a7:1e:86:31:53:2f:c8:a7:40:
         10:f6:7b:1a:39:d3:c1:5e:5a:0b:66:2e:e6:bb:9d:b7:09:c1:
         14:e1:78:59:e2:02:fa:6f:f4:60:8b:d5:bf:ed:6e:85:02:aa:
         30:c4:9b:90:ed:17:35:b1:b9:cf:ad:38:ce:ef:ea:36:b5:ce:
         78:f0:fa:e6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IpMZUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDlm
NmMzYzc4LTczMTItNDZjYS04ZTI2LTI2OGQ2MWVlNTJhMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ2qjCirMsoPknj8gV4s46FNYia02/1BKl+o4EuB
Krrles2pHgVSB88h/3kUDtTlaBEM6QN0iNfaCQTPLQVDznVfDQ9KbQ1J+KEs/wSb
GeC7/jKLbpJcqc39f1btePNqXPYfBDfvsmJtkW2RkoGmDFDe9+14Mhc0wn8UyUh0
h6iOfe0hmgBDwETj6BIxC9VyXjuzgBnfSPEs0GEXoh6Wu9L2pxJXeIlK3jkGJiNE
oZ0i7KZ2uc1y+6o9XuAHIzNhWDYmGZ0ZKGuoOiltwzYoCAUn8tu+/+Yv8iyXkUVW
fQCOE2rP9YOezs/FGlZTIpuhpONBjsZsrCDbnKEZTPVvDHsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQYXZ68mngbDXZmj4HMDKatqTMKsTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzllMWVjMzUxLWVhMjYtMzRi
MS05YWYzLTc5YjRhMjVhZTA5Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKeCjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAvXrAT545znhzdBWjUNsZi6N9tbjGhZasWU4q+r5qEMVk+xroEzRSFjv9pZ9v
i3yA8SIqDEjAmKmyB0/sDIqYqG0ZakEjRLbtFIZdXUbtkbvIZ1PFrW+mPAr7U6fZ
eNsGRuMtDQi0s1wTQj3DwZbtgdq56sMDLv54RLq83EY65RLBVWM5+8XLjdN0Ox24
6mwj+TRl87FhMnLzp10MPg/43D2H5Tpmp30Jw8y4bU+OXIv6One8vPZwcPzV05Wu
px6GMVMvyKdAEPZ7GjnTwV5aC2Yu5rudtwnBFOF4WeIC+m/0YIvVv+1uhQKqMMSb
kO0XNbG5z604zu/qNrXOePD65g==
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:42 2024 by rpki-client on console-fra.rpki-client.org