Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c33bc5a5-0c52-3d18-ac39-126c0d1ed888.roa
File:                     c33bc5a5-0c52-3d18-ac39-126c0d1ed888.roa (raw, json)
Hash identifier:          fNRm3xwhghUGSwHQcAvMOB5S1djDS1D/TRebVPIcMCM=
Subject key identifier:   EE:29:3C:88:34:04:89:0A:AD:90:0B:2A:01:E6:3F:1E:EC:C8:0E:66
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229E1A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c33bc5a5-0c52-3d18-ac39-126c0d1ed888.roa
Signing time:             Fri 30 Nov 2018 01:09:31 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=ede8ea05-4e30-4605-b310-48a50013933c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:d1:68:3a:1e:31:2c:b0:e3:62:3e:2b:c0:
                    9b:09:42:18:81:3e:c6:72:9c:b1:e4:18:00:1c:c9:
                    e0:20:ea:12:83:5b:a0:4d:21:26:00:69:cd:3b:32:
                    fd:e3:2d:9f:d6:58:02:bf:2e:1f:83:e8:5a:1e:00:
                    49:22:9e:64:de:3f:0c:57:35:2c:3d:f2:9c:e3:1e:
                    76:81:1e:5c:a4:a2:83:31:bc:f3:f6:93:f1:5b:8d:
                    7c:88:24:b5:51:a4:0c:2a:9d:a8:0b:6b:29:2a:0a:
                    41:00:2d:2d:85:72:1d:60:6d:2a:d4:40:72:e5:62:
                    e2:bc:43:9b:8a:b7:b0:ff:77:d0:62:2c:d0:41:ab:
                    c5:d9:15:8a:b9:6a:0f:03:6e:ed:d2:5a:9c:ea:96:
                    b0:a7:f6:0b:b1:5a:4b:af:da:ff:bd:b9:f3:70:0a:
                    ca:e9:6d:9b:d9:f5:12:43:42:a0:90:18:ca:f4:24:
                    7d:c6:65:d8:dc:06:9b:5d:63:3b:3c:c0:da:ec:af:
                    82:dd:46:f3:d4:50:9b:49:2d:20:39:be:f1:e1:ed:
                    7d:8f:56:0f:2b:80:f9:d1:fe:07:70:01:02:56:50:
                    68:79:1b:fb:97:99:dd:dd:a6:7d:10:8a:df:76:95:
                    5e:33:34:98:a4:32:a5:60:ab:f1:b6:06:2c:d0:00:
                    16:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:3C:88:34:04:89:0A:AD:90:0B:2A:01:E6:3F:1E:EC:C8:0E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c33bc5a5-0c52-3d18-ac39-126c0d1ed888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:39:c0:9e:1e:f3:0e:16:75:2f:ca:89:0c:59:6d:b6:e3:36:
         31:2a:68:be:28:78:c6:fd:f7:dc:00:26:41:ed:d8:15:1c:63:
         67:6a:89:c1:d5:3c:58:a2:65:fd:be:cd:3a:35:83:53:04:5e:
         c7:10:7f:96:39:ce:6f:a5:fe:98:04:08:09:c2:05:16:db:20:
         8b:03:4c:09:56:0e:57:67:be:81:3c:76:8b:78:40:67:3e:db:
         17:9e:45:0d:02:00:91:60:0a:fb:3a:29:45:04:86:27:d0:10:
         13:7a:74:50:12:ca:d5:a4:72:97:55:35:fd:01:be:4c:63:2a:
         01:cc:ac:34:85:81:90:18:7a:62:7b:62:8f:d1:9a:63:01:55:
         b0:d3:d9:35:2e:d3:4a:a6:8c:13:e6:92:96:b2:5b:fb:66:e4:
         6b:41:9c:8b:8e:d8:d4:ae:40:ca:f2:22:04:0e:53:b3:02:e2:
         2e:06:0f:05:18:63:e2:a5:6e:ca:e7:ca:1f:c7:1b:d0:50:f3:
         f0:92:29:16:20:5f:fd:a1:bc:e4:b5:37:a8:6a:74:5a:8a:0a:
         3c:e8:79:bd:0e:f9:82:df:a8:8a:44:ed:92:3d:a0:74:7e:b3:
         fc:42:75:4d:81:bb:e5:86:b3:bc:fd:cd:17:77:14:7f:b5:e2:
         a8:63:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:44 2024 by rpki-client on console-fra.rpki-client.org