Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0d7f006-4cef-357d-a90b-e1b80dc7216a.roa
File:                     a0d7f006-4cef-357d-a90b-e1b80dc7216a.roa (raw, json)
Hash identifier:          jChXAamILxgf+jdrgw/jnuCXLPYg49EXhSRdZRsLtFo=
Subject key identifier:   FD:6C:D4:1C:05:12:10:5C:01:BA:47:38:E5:2D:1F:39:20:6C:8D:81
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AE5BF
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0d7f006-4cef-357d-a90b-e1b80dc7216a.roa
Signing time:             Fri 30 Nov 2018 01:10:37 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:e5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=afc7fb72-2a7f-4cca-ab88-46e138c3f173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:bf:45:eb:79:8c:11:a5:70:c2:40:10:95:
                    25:7a:6b:f3:f2:6a:10:97:18:a3:e2:85:ec:eb:3f:
                    77:2f:05:49:70:da:88:52:ba:1c:d5:56:a1:07:7b:
                    b4:93:5c:ed:5d:57:0d:37:50:39:30:46:3c:7b:25:
                    f8:9d:da:55:b9:74:a0:69:b3:78:98:70:7c:e5:9e:
                    ea:79:9d:e8:2e:21:f1:a0:91:5e:18:8e:ff:af:48:
                    7e:ec:38:0e:e5:4f:51:0f:23:70:78:d0:3c:53:ad:
                    ef:d9:11:64:88:b4:a0:1d:6b:45:06:aa:e2:44:b7:
                    95:e5:6c:27:a8:1b:bc:97:23:c6:02:0d:92:86:73:
                    26:18:4d:a3:f6:82:c2:7f:6d:1c:ed:6a:dd:2c:d4:
                    5c:41:dc:d1:36:20:e8:5c:8d:4b:be:e9:e2:d9:1f:
                    fb:ff:e8:f7:6d:ab:e1:bc:8f:a9:57:90:7f:3d:13:
                    f0:d3:36:61:80:9a:7e:d0:f7:25:41:d5:35:05:79:
                    69:f7:69:86:2e:36:8f:d3:67:9c:ac:95:42:6d:8b:
                    dc:ed:c7:42:ea:95:79:d4:73:22:af:e5:05:bb:72:
                    34:77:8b:05:68:44:e6:9d:a8:84:27:72:e0:a7:ef:
                    9e:8d:c7:4e:42:d7:39:8e:48:1d:e3:40:ac:85:1e:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:D4:1C:05:12:10:5C:01:BA:47:38:E5:2D:1F:39:20:6C:8D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0d7f006-4cef-357d-a90b-e1b80dc7216a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:34:9f:a8:16:ff:90:a8:b0:94:d8:1e:e9:e4:84:17:f7:a4:
         fe:12:bb:11:d5:4d:a5:b1:8d:06:94:f0:ea:20:1e:67:e7:29:
         2a:a5:db:41:68:82:dd:35:19:e1:86:a8:4e:85:19:b1:07:32:
         8e:5a:1d:13:cf:67:7a:ea:39:9a:fc:d1:1e:57:56:27:4d:7e:
         f1:a1:d6:0a:fb:71:9c:77:77:4a:44:2f:ff:61:89:48:e2:39:
         7f:ff:65:11:c3:67:a2:73:91:b3:3d:a5:f3:d8:25:94:35:c2:
         33:16:bb:d3:82:c0:4b:e3:e7:2c:90:9e:c5:f8:80:58:e3:a9:
         e0:8d:ae:ec:f8:91:5d:e9:61:46:4a:60:a2:5f:88:60:47:dc:
         69:4b:fc:03:5e:ba:c0:1e:ce:0d:8f:d8:01:0f:f9:5a:80:1e:
         26:b3:d1:ad:9a:fa:5b:8d:23:dc:3f:fd:7a:ab:cf:ab:44:80:
         b2:d9:3e:ed:6b:41:36:10:c7:c1:f2:53:81:d0:4a:bf:29:20:
         6e:a3:3d:b5:8d:7b:42:d9:35:34:0c:98:d1:fd:4d:a9:75:00:
         34:c4:ac:8b:18:fc:0c:93:5d:be:04:41:45:4a:78:fe:8a:7d:
         10:71:ba:05:63:8d:01:1d:de:11:22:4a:b7:d3:f4:a8:e0:6c:
         53:d0:1b:53
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Iq5b8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGFm
YzdmYjcyLTJhN2YtNGNjYS1hYjg4LTQ2ZTEzOGMzZjE3MzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANSSv0XreYwRpXDCQBCVJXpr8/JqEJcYo+KF7Os/
dy8FSXDaiFK6HNVWoQd7tJNc7V1XDTdQOTBGPHsl+J3aVbl0oGmzeJhwfOWe6nmd
6C4h8aCRXhiO/69Ifuw4DuVPUQ8jcHjQPFOt79kRZIi0oB1rRQaq4kS3leVsJ6gb
vJcjxgINkoZzJhhNo/aCwn9tHO1q3SzUXEHc0TYg6FyNS77p4tkf+//o922r4byP
qVeQfz0T8NM2YYCaftD3JUHVNQV5afdphi42j9NnnKyVQm2L3O3HQuqVedRzIq/l
BbtyNHeLBWhE5p2ohCdy4Kfvno3HTkLXOY5IHeNArIUeFXECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT9bNQcBRIQXAG6RzjlLR85IGyNgTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2EwZDdmMDA2LTRjZWYtMzU3
ZC1hOTBiLWUxYjgwZGM3MjE2YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqKeVDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAQTSfqBb/kKiwlNge6eSEF/ek/hK7EdVNpbGNBpTw6iAeZ+cpKqXbQWiC3TUZ
4YaoToUZsQcyjlodE89neuo5mvzRHldWJ01+8aHWCvtxnHd3SkQv/2GJSOI5f/9l
EcNnonORsz2l89gllDXCMxa704LAS+PnLJCexfiAWOOp4I2u7PiRXelhRkpgol+I
YEfcaUv8A166wB7ODY/YAQ/5WoAeJrPRrZr6W40j3D/9eqvPq0SAstk+7WtBNhDH
wfJTgdBKvykgbqM9tY17Qtk1NAyY0f1NqXUANMSsixj8DJNdvgRBRUp4/op9EHG6
BWONAR3eESJKt9P0qOBsU9AbUw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:09 2024 by rpki-client on console-ams.rpki-client.org