Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a091d3a7-b4a7-332b-bc7a-e00f84fe5cac.roa
File:                     a091d3a7-b4a7-332b-bc7a-e00f84fe5cac.roa (raw, json)
Hash identifier:          sF/OgF0o3iBkHfvub7wQv33DiWLibg0zW/1Iu2nzH30=
Subject key identifier:   8D:A3:7E:D6:FC:C8:AB:6D:B6:3E:54:94:F1:6C:34:F8:04:44:56:6D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762295D04
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a091d3a7-b4a7-332b-bc7a-e00f84fe5cac.roa
Signing time:             Fri 30 Nov 2018 01:08:57 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:5d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=01c91680-95e8-4b4f-848b-8bf9f0e3437b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7d:13:9e:07:e3:97:ef:5c:b9:f6:25:ec:10:
                    05:42:87:ca:92:62:37:48:e1:a2:a8:3f:20:f2:6b:
                    14:1f:d2:f5:42:0c:5b:97:c4:5b:91:9d:61:9e:7a:
                    7b:57:15:06:ff:58:26:8a:dc:35:c1:2d:04:68:30:
                    9c:81:75:ee:b2:71:2c:71:bd:ff:8a:25:9c:2c:ba:
                    c5:62:92:46:19:87:2f:99:ee:53:18:9e:6f:44:99:
                    1b:6a:c9:c7:36:ef:5f:c2:5d:20:68:41:0e:f1:5a:
                    06:1c:fd:b6:b7:5b:2d:20:12:f1:b4:d3:27:10:69:
                    c0:58:f1:de:f9:a7:7f:e0:48:73:d2:da:8c:f6:b0:
                    64:52:5b:3f:4a:a9:9f:2e:23:44:9d:66:6d:c8:0f:
                    59:fa:6c:67:5c:38:76:3a:99:26:d0:cc:d8:1b:d6:
                    87:48:85:af:6f:a2:1d:0e:51:af:eb:de:d3:3b:88:
                    f4:2e:4e:aa:09:94:65:9d:48:77:42:24:23:6d:0b:
                    cb:bc:1a:b4:6a:22:d7:6e:1d:a8:be:dd:2a:2e:67:
                    e6:c8:2c:6a:5d:d9:63:89:94:0f:1c:c3:f4:51:ea:
                    3d:10:25:85:98:b1:2e:ef:4c:e0:44:db:43:9f:4f:
                    a8:4b:a1:6c:8c:3a:09:58:19:07:62:0f:32:28:2d:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A3:7E:D6:FC:C8:AB:6D:B6:3E:54:94:F1:6C:34:F8:04:44:56:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a091d3a7-b4a7-332b-bc7a-e00f84fe5cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:bb:04:44:2c:65:a5:11:ec:8d:98:9e:07:56:84:31:ef:
         54:25:66:3c:9a:c9:ff:b3:98:f2:27:a1:a7:62:c9:6b:f5:b2:
         84:04:ca:1c:fa:78:85:41:58:a2:c2:ac:d2:68:5d:7b:d8:2f:
         c5:65:92:24:dc:83:70:16:60:30:1a:ff:78:55:1b:1e:52:3b:
         1b:10:0d:8c:cb:4a:96:d2:96:43:a3:de:50:96:e5:3d:b4:31:
         0c:91:17:38:bf:04:8c:0a:05:6d:96:c7:74:32:10:ab:ae:93:
         81:9d:bd:df:26:fc:3c:42:fa:7a:b9:c0:73:26:59:0d:5b:68:
         46:bb:42:bf:ea:cc:3f:f7:d8:81:91:dd:dc:bc:d6:04:d8:d0:
         99:77:8b:48:bd:01:70:2a:46:51:bf:76:e4:9e:81:bb:e5:c1:
         35:f1:2e:8d:73:83:3b:21:fe:d7:b4:66:6f:bf:3f:6b:cd:a5:
         4e:45:79:60:49:b8:9a:88:d1:8c:2e:79:4c:51:05:37:e5:b7:
         04:bd:06:f4:98:4b:6c:6f:cd:68:8c:97:d5:eb:52:40:32:e5:
         b6:0d:a4:fd:f3:83:92:33:f0:14:6d:68:2c:10:74:64:39:a9:
         56:be:dc:92:43:c1:e9:2a:e1:91:7c:d3:b7:4e:17:cb:e6:c2:
         05:a2:34:fa
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IpXQQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDAx
YzkxNjgwLTk1ZTgtNGI0Zi04NDhiLThiZjlmMGUzNDM3YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANN9E54H45fvXLn2JewQBUKHypJiN0jhoqg/IPJr
FB/S9UIMW5fEW5GdYZ56e1cVBv9YJorcNcEtBGgwnIF17rJxLHG9/4olnCy6xWKS
RhmHL5nuUxieb0SZG2rJxzbvX8JdIGhBDvFaBhz9trdbLSAS8bTTJxBpwFjx3vmn
f+BIc9LajPawZFJbP0qpny4jRJ1mbcgPWfpsZ1w4djqZJtDM2BvWh0iFr2+iHQ5R
r+ve0zuI9C5OqgmUZZ1Id0IkI20Ly7watGoi124dqL7dKi5n5sgsal3ZY4mUDxzD
9FHqPRAlhZixLu9M4ETbQ59PqEuhbIw6CVgZB2IPMigtwIUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSNo37W/MirbbY+VJTxbDT4BERWbTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2EwOTFkM2E3LWI0YTctMzMy
Yi1iYzdhLWUwMGY4NGZlNWNhYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKejDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAos+7BEQsZaUR7I2YngdWhDHvVCVmPJrJ/7OY8iehp2LJa/WyhATKHPp4hUFY
osKs0mhde9gvxWWSJNyDcBZgMBr/eFUbHlI7GxANjMtKltKWQ6PeUJblPbQxDJEX
OL8EjAoFbZbHdDIQq66TgZ293yb8PEL6ernAcyZZDVtoRrtCv+rMP/fYgZHd3LzW
BNjQmXeLSL0BcCpGUb925J6Bu+XBNfEujXODOyH+17Rmb78/a82lTkV5YEm4mojR
jC55TFEFN+W3BL0G9JhLbG/NaIyX1etSQDLltg2k/fODkjPwFG1oLBB0ZDmpVr7c
kkPB6SrhkXzTt04Xy+bCBaI0+g==
-----END CERTIFICATE-----
Generated at Sun May 12 02:11:14 2024 by rpki-client on console-ams.rpki-client.org