Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a97828a3-c1da-3a38-b26c-428a57690b82.roa
File:                     a97828a3-c1da-3a38-b26c-428a57690b82.roa (raw, json)
Hash identifier:          sdlyr39dYPBniAL+ZbYNHiHF+9/+i6iTMhrxUBDaXrA=
Subject key identifier:   45:70:08:70:BF:F7:37:9B:C9:6B:F7:CE:D5:DF:6F:65:42:7E:41:74
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229DA5F
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a97828a3-c1da-3a38-b26c-428a57690b82.roa
Signing time:             Fri 30 Nov 2018 01:09:29 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:da:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=4372ff3a-32e9-407a-aac4-278c0e861d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:14:dc:86:52:ee:aa:ca:7b:56:0a:df:17:
                    35:1e:43:74:18:f6:d0:3e:0f:cd:a3:4a:d4:0c:15:
                    e0:af:41:35:cc:eb:ae:e1:6d:5c:98:9d:d0:ac:d2:
                    1b:42:ae:51:0d:79:a0:87:cc:b0:d0:1c:1f:23:35:
                    1f:29:05:e1:96:27:d4:ee:f6:42:93:7f:91:c0:8b:
                    06:ae:97:85:e5:df:92:d6:70:c2:ee:8a:41:56:ab:
                    be:37:ee:3e:33:fd:b7:27:2e:16:fd:73:64:ec:5b:
                    b0:54:c4:96:43:a9:b9:2d:d7:37:b0:af:9d:8a:63:
                    d6:5e:c3:fa:6f:35:30:a3:bf:d2:af:ff:fc:e3:cc:
                    ba:4d:f8:50:90:65:12:c4:f1:e0:3d:fc:3c:7c:09:
                    31:b0:e8:31:fe:38:4b:89:9c:0a:57:0b:32:2f:5a:
                    da:e1:d8:f2:01:db:c8:29:9e:16:3c:5b:c1:0c:32:
                    8d:dc:18:bb:32:0e:0a:1b:0a:80:75:00:ca:61:fb:
                    c3:09:c0:3a:ef:63:f8:7e:70:ab:ba:43:27:8b:67:
                    df:dd:2a:e5:1b:c7:da:ad:57:84:23:6c:13:e0:47:
                    e8:62:dc:8e:62:4d:4e:96:45:ab:c4:63:47:86:46:
                    12:40:ec:a3:dd:ab:f6:5e:a5:4e:fc:32:65:05:a0:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:08:70:BF:F7:37:9B:C9:6B:F7:CE:D5:DF:6F:65:42:7E:41:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a97828a3-c1da-3a38-b26c-428a57690b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:2e:ef:88:a0:cf:dd:d5:c2:88:31:e9:ac:d3:86:50:4d:
         e8:d5:50:55:e1:10:16:1e:3e:89:ae:e3:c0:9d:a3:06:6b:f3:
         fe:f5:b6:75:f7:0b:59:02:5b:05:78:89:74:bf:c9:34:ab:66:
         71:46:0b:b4:58:f7:00:d9:7e:73:aa:8f:92:78:4b:3a:6b:2a:
         63:50:b4:d5:ca:3c:3a:fa:b2:48:18:51:9a:fc:90:98:d9:5d:
         ba:a5:0c:e5:88:88:52:0d:5a:f5:d7:5e:f5:b3:35:b5:42:13:
         b3:3c:cb:6c:c8:ff:2e:5b:59:40:4b:05:b7:88:17:81:a6:2a:
         19:bc:f0:69:0a:1c:06:44:24:1a:b4:a0:c7:cf:94:22:de:15:
         14:f2:9b:ae:2e:55:05:9b:df:91:48:29:00:41:be:a3:83:cf:
         f7:d9:bf:61:af:1f:10:ef:f8:bc:43:8d:13:a3:04:9f:e2:28:
         80:37:ad:68:79:58:e9:61:0e:5d:6d:51:43:46:aa:d9:80:89:
         aa:53:41:17:36:2b:a1:2b:5f:9f:91:18:41:f2:28:79:45:dd:
         39:a8:95:49:36:f8:3a:9b:ee:af:63:08:9d:08:bc:fa:64:ea:
         de:92:19:91:2d:f5:fc:d6:31:4f:ca:9f:6b:8a:bb:4f:16:9c:
         03:cc:cc:8f
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Ip2l8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDQz
NzJmZjNhLTMyZTktNDA3YS1hYWM0LTI3OGMwZTg2MWQwMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANkvFNyGUu6qyntWCt8XNR5DdBj20D4PzaNK1AwV
4K9BNczrruFtXJid0KzSG0KuUQ15oIfMsNAcHyM1HykF4ZYn1O72QpN/kcCLBq6X
heXfktZwwu6KQVarvjfuPjP9tycuFv1zZOxbsFTElkOpuS3XN7CvnYpj1l7D+m81
MKO/0q///OPMuk34UJBlEsTx4D38PHwJMbDoMf44S4mcClcLMi9a2uHY8gHbyCme
FjxbwQwyjdwYuzIOChsKgHUAymH7wwnAOu9j+H5wq7pDJ4tn390q5RvH2q1XhCNs
E+BH6GLcjmJNTpZFq8RjR4ZGEkDso92r9l6lTvwyZQWgOEsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRFcAhwv/c3m8lr987V329lQn5BdDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2E5NzgyOGEzLWMxZGEtM2Ez
OC1iMjZjLTQyOGE1NzY5MGI4Mi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKeYDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEADZEu74igz93Vwogx6azThlBN6NVQVeEQFh4+ia7jwJ2jBmvz/vW2dfcLWQJb
BXiJdL/JNKtmcUYLtFj3ANl+c6qPknhLOmsqY1C01co8OvqySBhRmvyQmNlduqUM
5YiIUg1a9dde9bM1tUITszzLbMj/LltZQEsFt4gXgaYqGbzwaQocBkQkGrSgx8+U
It4VFPKbri5VBZvfkUgpAEG+o4PP99m/Ya8fEO/4vEONE6MEn+IogDetaHlY6WEO
XW1RQ0aq2YCJqlNBFzYroStfn5EYQfIoeUXdOaiVSTb4Opvur2MInQi8+mTq3pIZ
kS31/NYxT8qfa4q7TxacA8zMjw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:04 2024 by rpki-client on console-fra.rpki-client.org