Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aef4407d-0e5a-34d8-8126-37aa68d4334c.roa
File:                     aef4407d-0e5a-34d8-8126-37aa68d4334c.roa (raw, json)
Hash identifier:          NnU8BlliVLgqWvSefdXSZscMWqgehdSPU2PsY+iZS3Y=
Subject key identifier:   2A:4D:ED:EC:9C:69:11:5D:75:37:CD:4B:0D:D2:9D:AD:69:B1:F4:26
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228C248
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aef4407d-0e5a-34d8-8126-37aa68d4334c.roa
Signing time:             Fri 30 Nov 2018 01:08:17 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        198.41.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:c2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=ea3ea970-a9da-4781-80fd-a0cb9a36fe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:ce:04:a0:bd:cd:90:35:49:aa:be:fa:13:
                    da:6c:17:a9:d7:32:08:07:3b:f0:88:30:e6:9b:21:
                    70:80:b9:02:54:f1:b4:09:9c:b6:f9:9d:68:ae:d2:
                    de:e2:23:f4:8f:44:d3:38:99:e3:68:cc:7a:bf:58:
                    1d:4d:4e:ea:b1:bc:97:96:bd:cc:d2:9b:64:88:a2:
                    7f:f2:72:da:f2:cf:7b:82:67:0a:2e:48:97:37:36:
                    35:4e:b1:b7:d4:3a:4f:a7:22:54:3c:2a:7c:2d:75:
                    89:cb:0a:77:4b:34:9a:b8:79:cd:3a:58:0d:32:20:
                    78:d4:77:62:d7:68:3d:04:67:47:b6:45:6a:57:f1:
                    28:6b:79:2c:28:c2:26:ad:84:f1:57:d1:47:1a:73:
                    d9:15:3a:57:78:5b:dc:89:8a:b6:1c:76:f5:ea:63:
                    24:00:64:84:d6:96:49:38:ca:06:ec:b9:99:c7:9b:
                    7c:92:04:c4:60:69:ef:b4:31:fc:2b:91:80:0d:af:
                    37:48:51:88:5c:04:37:ec:ad:36:1b:98:7d:38:a1:
                    3d:9a:f4:5b:ed:96:37:21:d6:a7:5a:be:f0:ef:6d:
                    b2:8e:08:61:2d:aa:13:b3:6b:5e:90:39:3e:f9:40:
                    a5:7e:47:54:84:78:fe:64:fc:aa:24:88:d6:db:45:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:ED:EC:9C:69:11:5D:75:37:CD:4B:0D:D2:9D:AD:69:B1:F4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aef4407d-0e5a-34d8-8126-37aa68d4334c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:22:96:e8:8e:1e:64:03:df:44:94:af:c7:9f:94:62:4c:8b:
         55:e4:e9:32:d9:13:d7:ac:03:4a:b8:49:05:eb:24:91:37:df:
         80:4a:a0:93:4f:e5:76:a6:ba:8e:d7:c3:2f:70:38:fb:60:9d:
         09:ca:4c:c4:65:f1:c0:97:e6:c6:47:42:8b:07:14:e7:1d:2d:
         81:fc:7f:bf:24:fb:20:c8:59:e7:41:b8:aa:9a:9d:ba:34:2a:
         41:0d:50:c7:0b:11:32:29:4d:c9:ca:ff:24:55:30:f8:d8:33:
         cf:50:55:c9:9b:92:c0:92:d4:5b:1f:ab:03:24:39:8e:f6:7b:
         a2:c6:a1:a7:68:e0:b8:30:d0:bd:d6:5c:19:c3:45:ea:12:ec:
         b9:28:87:b4:d9:e2:97:19:e2:1f:07:fc:2b:12:b6:77:3c:cd:
         3a:b7:f7:ff:f3:bc:6c:c3:71:0d:38:e6:b8:60:90:05:94:e9:
         ad:b5:f3:57:01:f5:cc:aa:ec:77:b1:06:8b:ac:d1:94:1a:db:
         d4:ab:95:99:5c:17:d2:02:82:79:20:f7:87:3d:8c:ef:ad:6e:
         82:7a:91:94:94:98:7e:39:a9:c4:fa:99:15:38:ee:4a:4e:cd:
         8b:5e:48:8a:a5:30:2a:83:e0:a8:f8:dd:61:82:00:a0:63:dc:
         09:0d:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:13 2024 by rpki-client on console-ams.rpki-client.org