Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fe3b0a-b4e0-3bae-bcd2-5f991bd897db.roa
File:                     b7fe3b0a-b4e0-3bae-bcd2-5f991bd897db.roa (raw, json)
Hash identifier:          9kYfXjkbCEPeZG3b2aBdjPWGteCRLmT7Ep7ZzWy4UHI=
Subject key identifier:   96:25:4B:16:AB:24:65:24:C8:4C:FC:26:0A:A5:42:BD:7E:9F:3C:97
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AC950
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fe3b0a-b4e0-3bae-bcd2-5f991bd897db.roa
Signing time:             Fri 30 Nov 2018 01:10:30 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.64.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=739b85ac-5b9c-4ff8-81c6-62371444decb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:52:80:3a:54:ec:ad:18:15:d0:e8:ce:c7:
                    da:6b:d3:3e:dd:cd:88:a9:04:94:a1:1d:d7:96:ed:
                    8d:27:e5:1e:e9:78:91:e4:61:d8:e5:90:10:8b:7e:
                    72:26:7c:31:29:3c:4b:5f:cf:c2:95:15:b4:e9:c6:
                    8a:84:e9:31:69:e6:91:96:c0:39:d2:d4:fe:a0:a5:
                    66:d6:a4:89:68:cb:d0:72:d5:10:f6:5f:17:75:f2:
                    01:e1:ec:eb:80:e4:9e:81:45:e4:e6:f8:26:ce:ae:
                    6e:b6:30:fb:8d:f2:02:0e:5e:8c:88:a5:85:b1:22:
                    6e:ff:2b:37:f7:6c:d3:f7:84:f7:fe:b0:92:ff:4a:
                    60:c0:ef:d3:5c:08:b9:b4:ac:b0:bc:50:4d:92:e8:
                    55:56:4f:dd:84:6a:2c:e4:58:ae:79:14:09:96:c7:
                    d6:af:7e:3f:a5:b2:fd:97:85:07:4f:48:59:a5:44:
                    76:8d:4b:b8:58:84:6e:b0:5c:61:16:29:a7:10:a1:
                    44:02:4b:0c:45:c3:de:db:22:fd:0b:02:61:ad:5c:
                    77:f7:48:50:af:17:6f:70:fd:f8:78:b9:5e:96:cf:
                    3b:ee:bd:6b:39:5c:1c:cd:93:29:ab:d0:ed:93:81:
                    a8:83:b5:90:84:35:99:61:f6:b0:4e:00:9d:cc:f3:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:4B:16:AB:24:65:24:C8:4C:FC:26:0A:A5:42:BD:7E:9F:3C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fe3b0a-b4e0-3bae-bcd2-5f991bd897db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fc:da:95:8c:79:77:3f:1c:fd:35:62:49:87:db:12:4e:a0:
         4b:a7:03:0a:04:b5:19:df:52:7c:38:37:3e:d5:9f:a0:ba:cc:
         8a:cb:5f:f9:ba:9b:d3:98:64:ce:aa:3e:55:7c:56:3c:73:e3:
         7a:c4:50:29:fc:a5:30:91:14:44:62:28:98:05:b2:f8:f1:f3:
         a1:9f:af:dc:ab:81:24:9f:37:65:db:46:0f:1d:68:6b:49:d6:
         d9:ff:f2:f0:16:53:37:dd:02:aa:40:4d:b3:74:26:5c:9e:2e:
         83:cb:15:9a:4a:cb:29:03:04:05:92:03:66:0b:42:ad:44:63:
         1f:03:dd:6c:68:c9:6f:40:19:41:b1:c7:4b:ad:42:c9:bf:af:
         42:f5:b3:15:35:4c:05:4e:8d:25:f1:d2:88:cd:1b:4c:af:a7:
         c4:6f:35:06:33:87:d1:d8:9b:5f:23:32:b4:b2:89:05:6c:2e:
         c5:2d:81:f3:6d:e8:f5:f0:10:f5:3f:5b:be:07:f4:5c:fd:de:
         e1:f1:e0:7b:0f:2d:e4:e8:1e:be:59:51:30:4f:1f:d8:d5:07:
         d3:3b:8e:df:ea:7c:0b:2c:b5:00:65:5b:06:a3:79:b2:0d:00:
         85:02:b4:a2:e3:d7:c7:69:51:3c:cb:35:7f:52:c2:25:43:14:
         f5:67:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:05 2024 by rpki-client on console-fra.rpki-client.org