Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3fbdbe4-1f91-3b2c-a31c-9fbf5115f4e2.roa
File:                     a3fbdbe4-1f91-3b2c-a31c-9fbf5115f4e2.roa (raw, json)
Hash identifier:          eUEQrYmJvC4Z9gNjxi+FF+tIAgz4aoHG33RyinpPzOg=
Subject key identifier:   49:14:B3:3A:7D:D2:30:E7:2C:6B:99:53:77:CC:5D:75:C2:37:9C:C9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229474F
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3fbdbe4-1f91-3b2c-a31c-9fbf5115f4e2.roa
Signing time:             Fri 30 Nov 2018 01:08:51 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:47:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=6c209573-d80f-4805-b357-d4af6742048b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:eb:16:1c:ed:5e:b0:d1:ae:d2:9b:d4:99:
                    0c:d4:e7:e1:ab:4a:26:ea:32:db:51:c4:08:ef:d9:
                    e6:9c:b0:d1:79:40:41:68:09:2d:51:49:29:bd:80:
                    c4:fd:41:00:88:18:91:8e:ea:21:7c:b4:f4:49:5f:
                    a8:5e:5b:c1:c6:3b:be:63:37:b1:b5:3c:0c:2f:72:
                    d4:d5:99:55:46:ed:ec:01:d7:be:39:ce:d6:b8:9a:
                    15:1c:e2:b0:a3:3b:cd:aa:a8:a5:20:83:79:89:f8:
                    79:de:f4:2a:14:21:ba:b0:1a:e3:81:17:ad:6b:0d:
                    70:a5:80:1e:a2:01:db:13:83:61:2d:26:3b:7f:ca:
                    aa:cc:34:db:15:46:1a:58:67:7f:17:5e:19:0f:95:
                    86:4a:12:00:2d:28:ac:79:71:b7:85:29:87:ac:f3:
                    61:21:8d:18:5f:bd:c8:7f:15:a8:03:76:fe:f4:06:
                    ec:f0:3f:c0:5c:a0:32:09:04:64:81:c6:ba:aa:24:
                    d3:59:62:db:6b:5e:a2:de:2b:75:02:e4:67:fa:44:
                    8c:cf:fc:2b:62:f2:4f:bc:b3:1b:2d:bb:28:8e:64:
                    3d:2d:3d:43:56:47:d8:65:da:65:e3:c4:cc:fc:ae:
                    40:ec:83:f6:f8:cc:35:7d:af:2e:f3:64:41:a0:4c:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:B3:3A:7D:D2:30:E7:2C:6B:99:53:77:CC:5D:75:C2:37:9C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3fbdbe4-1f91-3b2c-a31c-9fbf5115f4e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:64:f7:1b:fc:05:7c:0d:06:a3:a2:e8:9d:fd:59:e8:97:49:
         a9:a1:6a:ca:ca:44:17:ac:8d:7a:b0:fb:ad:1a:a7:36:2c:31:
         c2:76:46:83:f0:0d:ed:44:b0:24:cd:52:57:04:d0:8e:d1:93:
         c5:a4:8d:3f:71:15:5e:28:ad:d5:22:00:0f:30:81:a0:8d:c6:
         1a:d0:a3:b9:57:5e:7f:da:8a:70:30:6c:21:20:87:15:f0:cb:
         d5:ce:5a:8f:e9:cb:6b:96:cc:e6:ef:ad:7d:f7:0b:b6:95:57:
         41:25:76:a9:26:37:d0:f1:dd:57:ce:de:fd:a1:e8:e4:fe:e8:
         a7:f5:22:de:fe:1b:b7:c9:c5:4e:d4:1c:b1:db:e8:f0:92:6c:
         8b:6b:e1:91:a3:ca:30:0e:4c:63:d8:ab:73:96:c7:07:77:7f:
         c2:4c:28:c6:40:4c:73:2e:ea:28:2e:38:04:47:d5:23:89:dd:
         2d:58:26:6e:0f:b6:ff:55:00:a6:1d:e9:c2:80:66:e4:c3:e8:
         8b:6c:02:8c:a1:ad:66:db:71:0f:86:be:1f:4f:5e:5e:64:1f:
         23:12:f3:f4:2c:08:24:28:b7:d3:40:5b:7d:93:4f:ec:67:5e:
         7d:65:e4:7e:42:fd:a9:88:a7:ec:6e:27:8c:0b:d4:05:50:c6:
         b8:a2:21:ec
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IpR08wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDZj
MjA5NTczLWQ4MGYtNDgwNS1iMzU3LWQ0YWY2NzQyMDQ4YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALxt6xYc7V6w0a7Sm9SZDNTn4atKJuoy21HECO/Z
5pyw0XlAQWgJLVFJKb2AxP1BAIgYkY7qIXy09ElfqF5bwcY7vmM3sbU8DC9y1NWZ
VUbt7AHXvjnO1riaFRzisKM7zaqopSCDeYn4ed70KhQhurAa44EXrWsNcKWAHqIB
2xODYS0mO3/Kqsw02xVGGlhnfxdeGQ+VhkoSAC0orHlxt4Uph6zzYSGNGF+9yH8V
qAN2/vQG7PA/wFygMgkEZIHGuqok01li22teot4rdQLkZ/pEjM/8K2LyT7yzGy27
KI5kPS09Q1ZH2GXaZePEzPyuQOyD9vjMNX2vLvNkQaBMCh0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRJFLM6fdIw5yxrmVN3zF11wjecyTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2EzZmJkYmU0LTFmOTEtM2Iy
Yy1hMzFjLTlmYmY1MTE1ZjRlMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKeczBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAGWT3G/wFfA0Go6Lonf1Z6JdJqaFqyspEF6yNerD7rRqnNiwxwnZGg/AN7USw
JM1SVwTQjtGTxaSNP3EVXiit1SIADzCBoI3GGtCjuVdef9qKcDBsISCHFfDL1c5a
j+nLa5bM5u+tffcLtpVXQSV2qSY30PHdV87e/aHo5P7op/Ui3v4bt8nFTtQcsdvo
8JJsi2vhkaPKMA5MY9irc5bHB3d/wkwoxkBMcy7qKC44BEfVI4ndLVgmbg+2/1UA
ph3pwoBm5MPoi2wCjKGtZttxD4a+H09eXmQfIxLz9CwIJCi300BbfZNP7GdefWXk
fkL9qYin7G4njAvUBVDGuKIh7A==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:10 2024 by rpki-client on console-fra.rpki-client.org