Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7502a47-2aaf-3c08-8054-b17386053f82.roa
File:                     b7502a47-2aaf-3c08-8054-b17386053f82.roa (raw, json)
Hash identifier:          hRHkIexWz6g1YCSp8QjPiRKodmfQ4Q9PryKZtvFGaz4=
Subject key identifier:   AC:98:69:9C:6A:F3:96:34:77:3A:04:02:5A:A7:3E:A4:42:EE:18:A9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A9BD5
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7502a47-2aaf-3c08-8054-b17386053f82.roa
Signing time:             Fri 30 Nov 2018 01:10:18 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        198.41.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:9b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=da5bbc19-9d3a-470f-a1f4-7db8fb7edd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:dc:f4:af:e9:d1:ac:ae:80:86:f3:7b:5f:
                    aa:25:59:3e:18:f0:c8:71:dc:8e:e2:56:0b:b9:27:
                    e2:f8:4a:86:76:00:c4:1d:8b:f6:1b:02:5b:3f:64:
                    92:04:d9:90:a1:39:f4:46:36:b4:69:44:dc:b7:07:
                    44:bd:aa:31:15:36:20:e5:8e:69:93:66:e7:19:64:
                    13:b4:a1:8b:e3:b8:60:02:af:11:41:de:bd:64:62:
                    e6:46:d2:01:ac:74:de:dd:8e:c7:ac:1c:14:3c:77:
                    5a:c9:8b:c3:eb:11:0e:35:93:7f:c4:09:8a:86:53:
                    f5:37:88:13:2f:f6:81:18:e8:0d:9e:07:ad:20:30:
                    03:de:13:8d:02:18:91:d5:75:7d:c2:91:a2:47:60:
                    ff:3c:43:eb:c7:39:c4:2f:ca:3e:91:93:2e:8d:df:
                    e3:53:52:db:16:eb:0b:a5:b5:63:37:d2:47:b6:4f:
                    c4:6c:e4:39:10:6f:85:d8:7f:fb:60:09:a4:c6:fb:
                    b0:ad:c6:8c:72:f5:d9:e7:26:7c:a3:3b:60:85:7a:
                    c1:7a:73:94:14:f9:12:f9:31:26:d8:94:13:dd:4c:
                    bf:a7:12:e6:f3:45:97:f7:c1:23:2f:3d:ad:33:6e:
                    46:2a:01:c1:ca:54:d6:90:a8:41:72:8f:1a:10:52:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:69:9C:6A:F3:96:34:77:3A:04:02:5A:A7:3E:A4:42:EE:18:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7502a47-2aaf-3c08-8054-b17386053f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:d6:79:c0:83:71:94:d9:05:b5:6d:f8:ce:36:cb:52:91:fe:
         f5:9e:cb:44:73:85:ae:09:5f:40:0b:67:6a:5a:3f:29:71:f6:
         f6:49:5f:2f:ff:fd:ef:01:c9:6e:3b:3d:49:8c:ef:40:dd:bf:
         84:fe:2c:b7:ac:77:81:b7:b4:3b:2d:71:42:c8:30:00:28:84:
         0d:df:98:7b:43:13:42:43:80:67:f0:fe:bb:40:ca:39:e4:c5:
         9c:9d:f7:0c:00:b2:5e:3d:de:ec:72:3a:4f:24:a7:25:4d:eb:
         fa:32:d0:03:3a:e3:62:87:79:18:9d:df:7c:83:9a:ca:78:9b:
         03:70:55:4a:f6:c4:b9:45:c2:97:a1:7a:fc:cf:9d:2e:fe:52:
         25:a9:9f:37:b3:f5:25:1b:70:85:3f:4a:9a:49:d1:95:da:cd:
         d1:b7:f8:ae:0e:e7:69:25:3d:ad:fc:67:09:55:ef:15:8f:bc:
         d3:72:0a:72:7d:24:d2:0e:a6:c1:3b:01:07:a0:c5:46:c8:59:
         fd:01:59:38:3c:96:51:21:79:f2:a8:80:86:13:45:bf:42:47:
         22:57:05:a5:04:41:45:4d:36:8b:a2:a3:91:c7:43:e9:49:21:
         f9:fb:5d:94:02:bf:42:6e:05:e8:20:19:fa:3c:3b:e8:7d:dc:
         8b:ff:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:10 2024 by rpki-client on console-ams.rpki-client.org