Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8ea9014-35cc-334f-9086-2b9369185ddf.roa
File:                     a8ea9014-35cc-334f-9086-2b9369185ddf.roa (raw, json)
Hash identifier:          L4kv4bptooWbWShKKviXb7BtS97wSRsIFzGKfvME0Hk=
Subject key identifier:   E8:49:A8:6D:9D:BC:4B:71:EE:3C:26:81:C1:EC:80:7A:D6:A4:0E:D4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762296AB4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8ea9014-35cc-334f-9086-2b9369185ddf.roa
Signing time:             Fri 30 Nov 2018 01:09:00 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:6a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=dec7e198-263e-443c-9394-2a47481d5eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d6:a9:31:64:bb:86:41:e4:56:f5:2b:c4:4d:
                    f3:91:55:f7:d2:10:45:1c:97:90:e5:fb:e9:0d:52:
                    29:46:45:ae:2e:ab:c3:93:52:92:e5:91:fb:43:70:
                    e1:33:0d:a4:d9:b1:3b:09:21:41:f8:99:c1:b4:88:
                    0e:c2:76:bf:ce:fa:39:b4:4a:3c:0b:47:2c:ad:00:
                    2b:37:49:40:0f:c6:ca:78:1e:a9:2e:78:76:0f:58:
                    2d:3d:fb:7d:8a:70:d7:11:ae:e0:ab:62:67:01:f6:
                    04:ba:44:5a:ca:bc:6a:81:13:25:e5:16:f3:d8:fd:
                    9a:db:e5:5b:21:0b:b8:ae:fe:c1:8e:ae:39:30:48:
                    d5:4a:6f:3f:98:f6:25:27:7b:d6:a2:55:fa:0e:e9:
                    fd:fe:4f:90:67:df:29:b6:62:40:a9:11:a9:83:f0:
                    90:57:7c:94:cb:58:c7:88:10:8c:76:e3:ab:15:7d:
                    46:07:39:4f:8d:62:55:8a:86:c3:11:3b:4e:f3:59:
                    f5:34:5e:14:78:1b:63:60:b6:07:4f:86:68:41:d5:
                    1b:86:96:0e:5c:c5:4a:c6:5c:60:f0:12:91:c2:47:
                    af:fe:94:b1:a2:b5:b0:49:43:d3:fd:23:e3:69:26:
                    fa:cd:dd:a2:91:a9:af:29:cf:e5:59:50:5a:34:92:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:49:A8:6D:9D:BC:4B:71:EE:3C:26:81:C1:EC:80:7A:D6:A4:0E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8ea9014-35cc-334f-9086-2b9369185ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:81:6b:64:71:6b:88:9e:af:52:cc:61:4b:c9:fc:09:99:22:
         84:2f:5e:64:23:e8:d2:96:c1:26:48:57:5f:82:b8:29:96:a3:
         22:ff:45:cd:43:ae:0c:c1:f9:3f:0b:32:ea:66:1e:fb:df:a9:
         9d:cd:d2:54:a3:80:40:04:67:de:aa:5b:dc:a9:44:8f:a5:24:
         3a:d9:f2:af:f7:3b:ca:40:cd:14:32:8f:40:1b:26:f8:5d:31:
         94:ed:c9:0d:a0:83:58:1e:ee:a2:43:9d:8a:59:21:90:0c:11:
         68:9f:50:94:0b:d4:bf:a7:ae:f2:be:61:fe:89:56:1f:54:f4:
         89:e3:f7:20:72:38:dd:d4:07:3f:21:d1:a1:03:2d:f7:b3:71:
         d3:e6:2c:b4:f9:e7:ec:37:16:78:60:b5:ad:1a:49:ad:0f:d1:
         16:c5:73:ac:1f:76:d6:e6:36:f6:d6:26:9f:b5:31:b3:a2:2a:
         da:97:9e:d5:cc:e1:61:65:94:39:a6:1c:95:33:1d:2c:72:61:
         f0:dc:62:7d:a7:bd:ab:28:9b:bf:ff:9b:6d:cb:57:3e:42:61:
         29:98:5c:d0:7d:5d:37:76:2c:af:16:e1:70:8c:22:a1:59:78:
         e7:54:c8:65:5a:6c:7e:5b:96:aa:e7:05:7b:5d:a4:db:3d:04:
         34:38:5f:e5
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IparQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGRl
YzdlMTk4LTI2M2UtNDQzYy05Mzk0LTJhNDc0ODFkNWVhYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPHWqTFku4ZB5Fb1K8RN85FV99IQRRyXkOX76Q1S
KUZFri6rw5NSkuWR+0Nw4TMNpNmxOwkhQfiZwbSIDsJ2v876ObRKPAtHLK0AKzdJ
QA/GyngeqS54dg9YLT37fYpw1xGu4KtiZwH2BLpEWsq8aoETJeUW89j9mtvlWyEL
uK7+wY6uOTBI1UpvP5j2JSd71qJV+g7p/f5PkGffKbZiQKkRqYPwkFd8lMtYx4gQ
jHbjqxV9Rgc5T41iVYqGwxE7TvNZ9TReFHgbY2C2B0+GaEHVG4aWDlzFSsZcYPAS
kcJHr/6UsaK1sElD0/0j42km+s3dopGprynP5VlQWjSSb6MCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBToSahtnbxLce48JoHB7IB61qQO1DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2E4ZWE5MDE0LTM1Y2MtMzM0
Zi05MDg2LTJiOTM2OTE4NWRkZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqKemDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAAoFrZHFriJ6vUsxhS8n8CZkihC9eZCPo0pbBJkhXX4K4KZajIv9FzUOuDMH5
Pwsy6mYe+9+pnc3SVKOAQARn3qpb3KlEj6UkOtnyr/c7ykDNFDKPQBsm+F0xlO3J
DaCDWB7uokOdilkhkAwRaJ9QlAvUv6eu8r5h/olWH1T0ieP3IHI43dQHPyHRoQMt
97Nx0+YstPnn7DcWeGC1rRpJrQ/RFsVzrB921uY29tYmn7Uxs6Iq2pee1czhYWWU
OaYclTMdLHJh8Nxifae9qyibv/+bbctXPkJhKZhc0H1dN3YsrxbhcIwioVl451TI
ZVpsfluWqucFe12k2z0ENDhf5Q==
-----END CERTIFICATE-----
Generated at Sun May 12 03:26:02 2024 by rpki-client on console-fra.rpki-client.org