Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0d43391-73ed-3097-812d-16446801b5d2.roa
File:                     b0d43391-73ed-3097-812d-16446801b5d2.roa (raw, json)
Hash identifier:          Jp96+Ff7GDmqsS6D99gTkSI8rZj4Bgib5DEoYb+Espg=
Subject key identifier:   64:FA:E3:BD:AB:68:8E:56:C5:2E:B1:5B:99:01:3C:88:C1:D8:4F:FA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229F198
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0d43391-73ed-3097-812d-16446801b5d2.roa
Signing time:             Fri 30 Nov 2018 01:09:35 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:f1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=3d2f5a1e-4d26-485f-af4c-304085f8b3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:70:dd:43:69:e1:1b:78:4d:c6:58:5b:26:
                    0d:91:32:56:7e:3c:3c:8c:a4:29:8e:ee:1d:f7:85:
                    fa:a7:4d:25:c1:a0:fa:2b:8a:8e:40:81:ed:99:64:
                    b8:45:76:a5:77:2b:d8:5f:7e:36:63:25:ed:7e:74:
                    98:4f:77:66:ce:c8:a2:57:50:e6:15:14:b6:71:28:
                    dd:de:df:3a:16:7d:e9:93:d6:12:6d:70:6a:6e:71:
                    89:e6:0b:8a:dc:0e:27:a4:08:c8:4b:0a:c9:7e:8d:
                    a7:f5:cf:15:5d:b4:fe:11:c1:de:95:5b:f5:83:73:
                    89:2b:9c:4d:d6:f5:80:ec:7f:97:61:13:83:26:94:
                    e3:d6:05:12:fd:68:83:11:d0:0e:cd:0f:d5:42:dd:
                    b4:70:43:19:bf:a8:eb:90:7d:61:ba:ce:32:d3:3f:
                    2b:95:28:4f:6b:27:97:be:90:7d:73:53:a3:48:34:
                    79:d6:25:ed:8c:e3:85:b6:58:66:c9:10:57:72:49:
                    67:16:e7:1a:a9:ca:f5:ae:71:2e:38:6c:0d:e2:27:
                    0d:17:76:93:0d:46:ca:f9:64:da:1c:d3:46:fd:aa:
                    fe:61:d5:4d:d1:a2:4f:c2:be:f0:e2:96:29:5f:ac:
                    b5:a1:cc:d5:b4:ad:ff:db:e9:8e:12:ad:40:57:de:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FA:E3:BD:AB:68:8E:56:C5:2E:B1:5B:99:01:3C:88:C1:D8:4F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0d43391-73ed-3097-812d-16446801b5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:dd:a4:b9:c3:f9:e3:01:85:d7:e3:a8:86:3d:c1:c5:e4:
         20:05:98:b5:2a:62:c1:4d:74:e6:0e:2c:bc:4c:98:f2:9e:fc:
         38:bf:09:41:46:04:f8:68:54:06:18:9d:ab:1e:40:e0:50:7f:
         e1:4a:34:4c:9b:0f:6c:c1:51:aa:b0:e7:b3:cb:a7:d2:2e:e0:
         a4:05:e4:50:de:c0:13:ee:45:60:65:75:4d:53:37:e9:5a:eb:
         66:c9:ab:07:a2:a2:ff:b1:69:74:86:8a:7f:13:5d:1f:5c:b3:
         9a:a8:79:95:f4:fc:15:0a:5d:d1:97:5a:bb:00:8c:e1:20:fe:
         35:27:4a:16:a0:69:c4:fd:42:c5:b3:11:80:65:d2:8d:06:91:
         7f:78:b8:8b:e7:8e:bc:1b:93:d4:49:09:df:c5:6e:86:12:38:
         87:40:21:34:40:8e:e3:53:6c:f4:63:cc:2b:0f:46:90:a5:7d:
         eb:26:89:a1:27:bc:16:33:6a:bf:0a:37:3e:3a:02:a5:e7:ab:
         31:50:95:e1:9a:f8:7f:dd:f1:50:95:56:e8:d2:c6:ac:36:03:
         41:2b:2c:64:32:0c:c3:bd:75:6e:df:81:49:b1:a3:32:fa:f8:
         ea:75:84:1a:81:4c:25:63:67:09:16:c4:59:e4:15:17:39:65:
         9d:ff:db:67
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Ip8ZgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDNk
MmY1YTFlLTRkMjYtNDg1Zi1hZjRjLTMwNDA4NWY4YjNkOTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM0mcN1DaeEbeE3GWFsmDZEyVn48PIykKY7uHfeF
+qdNJcGg+iuKjkCB7ZlkuEV2pXcr2F9+NmMl7X50mE93Zs7IoldQ5hUUtnEo3d7f
OhZ96ZPWEm1wam5xieYLitwOJ6QIyEsKyX6Np/XPFV20/hHB3pVb9YNziSucTdb1
gOx/l2ETgyaU49YFEv1ogxHQDs0P1ULdtHBDGb+o65B9YbrOMtM/K5UoT2snl76Q
fXNTo0g0edYl7YzjhbZYZskQV3JJZxbnGqnK9a5xLjhsDeInDRd2kw1Gyvlk2hzT
Rv2q/mHVTdGiT8K+8OKWKV+staHM1bSt/9vpjhKtQFfeR2UCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRk+uO9q2iOVsUusVuZATyIwdhP+jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2IwZDQzMzkxLTczZWQtMzA5
Ny04MTJkLTE2NDQ2ODAxYjVkMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxEhDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAaKbdpLnD+eMBhdfjqIY9wcXkIAWYtSpiwU105g4svEyY8p78OL8JQUYE+GhU
Bhidqx5A4FB/4Uo0TJsPbMFRqrDns8un0i7gpAXkUN7AE+5FYGV1TVM36VrrZsmr
B6Ki/7FpdIaKfxNdH1yzmqh5lfT8FQpd0ZdauwCM4SD+NSdKFqBpxP1CxbMRgGXS
jQaRf3i4i+eOvBuT1EkJ38VuhhI4h0AhNECO41Ns9GPMKw9GkKV96yaJoSe8FjNq
vwo3PjoCpeerMVCV4Zr4f93xUJVW6NLGrDYDQSssZDIMw711bt+BSbGjMvr46nWE
GoFMJWNnCRbEWeQVFzllnf/bZw==
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:13 2024 by rpki-client on console-ams.rpki-client.org