Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c59fb1-2a22-3d3f-8a02-f95ac7505606.roa
File:                     b3c59fb1-2a22-3d3f-8a02-f95ac7505606.roa (raw, json)
Hash identifier:          r8NPlWX5WnvNPDJ1j7VLGF/ZIoKZ84juLRc7tJpi+Ow=
Subject key identifier:   20:D5:E6:89:FA:80:E3:93:1D:0E:72:89:42:1E:EB:9D:1D:AD:04:56
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622ACD0D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c59fb1-2a22-3d3f-8a02-f95ac7505606.roa
Signing time:             Fri 30 Nov 2018 01:10:31 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.64.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:cd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=8c711d21-0923-48ec-a093-347047dfd93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:92:e7:09:9d:c9:b8:4a:d4:83:9f:e0:eb:
                    87:b2:6c:95:bb:53:a8:49:fa:a6:83:ef:c9:71:08:
                    04:68:d4:9c:9f:92:dd:52:6d:23:92:86:cd:07:7b:
                    13:bf:c4:f3:83:2e:91:84:19:8a:42:65:67:f2:e7:
                    48:f6:1d:de:b1:02:c0:4b:c5:12:87:d7:6b:0b:10:
                    6e:3b:a0:fc:c2:87:93:0f:79:16:7c:d8:de:24:df:
                    2f:ea:e1:a2:a9:03:cc:d8:64:76:4c:d0:e8:b1:21:
                    62:2a:1a:74:86:ca:c3:73:d7:fb:bb:26:64:22:62:
                    71:34:24:de:9c:84:2e:84:f5:f2:f0:18:f2:ff:c5:
                    69:7a:31:7b:77:ac:1d:21:cb:7a:3d:98:b8:9e:fb:
                    1a:a3:64:8e:a0:76:a6:aa:20:26:49:e9:d3:05:ef:
                    9e:81:7b:f5:ff:bf:79:42:43:bf:c9:8a:3c:cc:8f:
                    80:fd:16:d5:26:a1:6c:c8:ad:0d:2e:2b:cb:0f:21:
                    b1:b3:c6:ce:c3:44:7f:90:1a:71:a9:27:84:5e:4f:
                    de:84:4d:04:82:72:d5:4b:6d:ce:9b:67:e9:3b:0c:
                    f7:69:76:10:28:6a:9e:ce:97:fb:79:b9:00:66:ca:
                    bc:26:39:4b:8b:b8:5b:be:d4:2d:fd:72:7d:37:bf:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D5:E6:89:FA:80:E3:93:1D:0E:72:89:42:1E:EB:9D:1D:AD:04:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c59fb1-2a22-3d3f-8a02-f95ac7505606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:60:ae:43:51:00:3d:98:6f:d6:de:98:ac:6d:b4:ab:f6:a5:
         03:37:fd:93:2c:e3:a4:24:7f:f6:6c:9d:ed:73:69:a6:6f:5c:
         95:5c:24:c5:ac:5d:c1:44:a1:9e:40:f8:56:a4:ff:27:20:8f:
         ae:df:56:69:f5:6b:ef:be:c2:4e:89:a2:ec:51:8c:0f:e5:77:
         b4:3d:10:db:f0:4f:c8:f9:4a:0c:e9:36:44:76:b9:2b:ea:5a:
         e9:30:12:eb:2f:b5:aa:6a:01:2e:dd:3f:24:5f:ad:f6:5b:43:
         44:f2:d7:fc:5a:18:42:f8:5b:b2:5a:74:26:75:a4:74:55:e9:
         1f:ea:3b:93:ae:8e:4e:6c:cd:81:b8:77:65:5f:3c:09:b7:fb:
         03:9e:b0:c8:7e:8c:3e:33:12:ea:cc:f9:dd:30:8e:10:19:1a:
         04:b6:4f:3d:44:99:7e:fb:75:97:b6:22:05:36:6b:4d:d5:9a:
         a4:68:2f:68:68:48:b6:bc:55:92:77:7e:fb:e6:a9:e7:7b:d4:
         81:2f:a9:90:45:b9:92:c0:68:86:4a:ac:66:23:34:31:73:eb:
         70:a2:f9:e4:04:76:6c:07:8d:2b:a2:ae:9b:b2:9d:62:eb:73:
         b1:7e:b4:28:e7:97:45:57:0e:a6:0f:fd:4c:57:95:71:3c:32:
         35:11:cb:21
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IqzQ0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDhj
NzExZDIxLTA5MjMtNDhlYy1hMDkzLTM0NzA0N2RmZDkzYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANyzkucJncm4StSDn+Drh7JslbtTqEn6poPvyXEI
BGjUnJ+S3VJtI5KGzQd7E7/E84MukYQZikJlZ/LnSPYd3rECwEvFEofXawsQbjug
/MKHkw95FnzY3iTfL+rhoqkDzNhkdkzQ6LEhYioadIbKw3PX+7smZCJicTQk3pyE
LoT18vAY8v/FaXoxe3esHSHLej2YuJ77GqNkjqB2pqogJknp0wXvnoF79f+/eUJD
v8mKPMyPgP0W1SahbMitDS4ryw8hsbPGzsNEf5AacaknhF5P3oRNBIJy1Uttzptn
6TsM92l2EChqns6X+3m5AGbKvCY5S4u4W77ULf1yfTe/D6sCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQg1eaJ+oDjkx0OcolCHuudHa0EVjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2IzYzU5ZmIxLTJhMjItM2Qz
Zi04YTAyLWY5NWFjNzUwNTYwNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBKxA0DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAomCuQ1EAPZhv1t6YrG20q/alAzf9kyzjpCR/9myd7XNppm9clVwkxaxdwUSh
nkD4VqT/JyCPrt9WafVr777CTomi7FGMD+V3tD0Q2/BPyPlKDOk2RHa5K+pa6TAS
6y+1qmoBLt0/JF+t9ltDRPLX/FoYQvhbslp0JnWkdFXpH+o7k66OTmzNgbh3ZV88
Cbf7A56wyH6MPjMS6sz53TCOEBkaBLZPPUSZfvt1l7YiBTZrTdWapGgvaGhItrxV
knd+++ap53vUgS+pkEW5ksBohkqsZiM0MXPrcKL55AR2bAeNK6Kum7KdYutzsX60
KOeXRVcOpg/9TFeVcTwyNRHLIQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:11 2024 by rpki-client on console-ams.rpki-client.org