Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b33c704a-74c5-36c3-b36f-6d177358c9ea.roa
File:                     b33c704a-74c5-36c3-b36f-6d177358c9ea.roa (raw, json)
Hash identifier:          9c/n/HRrrGLNp8v9BTQl40ycvu0c22zcJtOvIydE8k4=
Subject key identifier:   61:0E:FC:1F:49:A2:FE:88:C2:AC:E2:BF:70:F5:6F:37:1B:79:A0:26
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229B062
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b33c704a-74c5-36c3-b36f-6d177358c9ea.roa
Signing time:             Fri 30 Nov 2018 01:09:18 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:b0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=712b712c-458e-47fc-9563-1f6f06b38785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:3a:da:62:c4:59:db:4b:cf:5a:29:41:79:
                    d9:62:17:b4:6d:77:8e:f4:d6:91:77:ed:1e:3b:81:
                    3b:61:63:ad:ac:cf:36:43:3c:ff:ee:76:6f:20:4c:
                    e6:1b:31:e8:e9:0f:62:62:51:db:2b:38:37:05:f0:
                    f6:d6:18:18:8b:47:fe:e8:fa:db:9f:1d:d7:6b:76:
                    a3:98:fd:f3:0a:ff:f0:d6:85:13:6a:6c:ff:ad:b2:
                    7a:ef:58:da:11:9a:c3:4e:b7:ff:19:e9:a0:ee:66:
                    0a:2b:30:1b:d1:ec:f4:1d:b4:c7:63:d5:6c:d4:45:
                    80:2d:c5:23:e0:fc:80:0b:fa:dc:14:d9:c9:4c:b1:
                    5f:af:dc:41:b9:73:52:1e:f3:37:c2:b1:9c:90:0c:
                    95:61:07:98:c5:11:17:ba:00:16:b4:69:f2:57:f6:
                    18:61:86:a2:1c:e0:44:c7:26:f7:8c:e0:af:43:89:
                    54:f9:93:65:af:06:de:99:6a:87:34:b5:3e:ed:82:
                    fc:7a:42:0c:bb:a3:4c:a9:d2:8b:b2:20:82:cc:26:
                    09:df:db:e7:d3:e3:54:22:6e:0a:7c:16:42:03:a8:
                    c0:2b:86:6b:21:6a:1d:14:a5:5e:34:1e:e7:32:68:
                    62:af:72:f7:04:bb:91:f6:3a:b4:33:28:96:76:18:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:FC:1F:49:A2:FE:88:C2:AC:E2:BF:70:F5:6F:37:1B:79:A0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b33c704a-74c5-36c3-b36f-6d177358c9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7b:19:27:b5:51:75:df:0f:16:07:35:2a:b7:33:89:c9:82:
         51:42:d4:0b:bc:54:42:c5:df:ff:86:3b:b1:f4:60:99:13:c2:
         37:71:33:e8:3b:34:34:aa:5d:58:ae:8e:28:8f:0f:26:b9:3a:
         db:54:3a:df:eb:27:76:f5:4e:3f:9a:d5:f6:29:ea:fa:88:63:
         dc:b6:4e:7a:63:52:18:94:ab:04:dc:50:9f:73:85:15:c9:6e:
         d1:55:05:45:a9:8c:60:30:1b:41:d1:29:f1:cf:92:76:bf:42:
         9f:87:48:a3:9a:43:60:02:78:bf:1e:a2:1c:11:d6:ac:10:26:
         1c:43:be:98:04:e5:d1:90:94:75:56:53:6c:44:c2:7f:22:14:
         ed:98:35:39:a7:78:ba:d4:70:e0:be:8a:ed:4a:0e:b7:43:fe:
         88:f8:ce:42:1c:07:c2:0f:6d:77:68:f3:11:ea:51:49:60:11:
         ac:98:ba:f0:85:e8:62:28:58:d1:84:05:9b:3b:8d:02:9a:9c:
         ec:df:54:0e:96:de:9e:d1:af:ee:3d:14:29:d8:c8:4d:6e:a5:
         87:1f:53:30:fd:fe:36:cd:53:27:73:9e:72:8e:90:42:07:08:
         49:c9:52:f0:ff:8f:f5:b1:94:a1:fa:74:36:6a:ca:5d:d1:ca:
         da:67:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:10 2024 by rpki-client on console-ams.rpki-client.org