Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c35dc589-b7c9-3942-a039-d06c788295ce.roa
File:                     c35dc589-b7c9-3942-a039-d06c788295ce.roa (raw, json)
Hash identifier:          hMtIDHyBKVrtH7d/YNsk1k3FaHaDxEGzp2vycZJJtb0=
Subject key identifier:   58:65:C4:3F:02:A8:3F:54:8A:A6:8B:1C:8B:32:9A:9A:F4:E9:4C:96
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228F7EE
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c35dc589-b7c9-3942-a039-d06c788295ce.roa
Signing time:             Fri 30 Nov 2018 01:08:31 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.65.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:f7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=1c59faf6-d62e-4894-be5f-b287fd4fc9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:b4:77:47:91:be:25:a6:dd:20:8c:c9:82:
                    6e:95:46:8c:13:fc:d6:66:0e:aa:af:9f:85:cb:ee:
                    54:0f:f3:4c:2e:e7:43:50:2e:d5:0d:ac:c8:d6:f3:
                    bd:dd:e3:f1:ef:94:8b:b3:12:89:56:85:06:03:75:
                    61:75:1e:a8:3f:cf:df:da:d0:40:60:05:be:42:90:
                    5b:f0:c5:7a:d6:8a:2d:b6:3a:e7:83:0f:a6:01:a4:
                    3d:87:26:ac:4f:7e:ce:09:d9:59:f0:ad:bf:e6:9c:
                    c8:58:35:db:7e:9c:86:4d:3f:48:9e:ca:c5:2e:2c:
                    d3:5e:ad:1f:23:cc:85:15:5a:da:cc:7a:e2:0a:b1:
                    5b:55:69:c1:3a:5d:94:9b:9f:e6:ba:e3:11:4a:7b:
                    25:d5:a5:f2:b4:8a:ad:e7:a7:4d:e8:42:e5:40:11:
                    99:88:3e:e1:37:8b:3a:6d:75:20:0a:12:11:59:cb:
                    16:e3:ed:9c:1f:52:ec:df:a1:7b:e3:48:15:fe:f8:
                    47:57:9c:db:ba:b4:b4:19:77:60:e1:55:b5:7f:64:
                    37:1d:43:5c:05:10:8e:1b:93:95:4b:19:2a:59:f1:
                    4b:6b:1e:11:1e:fe:c9:99:8c:05:e5:d2:bf:a2:b5:
                    06:d0:ca:61:6a:e9:76:0a:44:63:76:9c:e7:1e:d7:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:65:C4:3F:02:A8:3F:54:8A:A6:8B:1C:8B:32:9A:9A:F4:E9:4C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c35dc589-b7c9-3942-a039-d06c788295ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:06:b7:89:64:38:f6:c5:85:6e:5c:8a:d8:f1:4b:14:20:c7:
         f5:45:e6:ac:05:12:27:6d:87:26:19:c6:28:01:3f:91:04:28:
         56:36:c2:f9:de:3a:d7:3e:e5:f8:0d:4d:21:e3:91:83:6c:c2:
         47:34:3d:bd:0f:96:3a:b8:a3:5c:a6:86:1b:b5:e5:32:50:24:
         e9:6f:64:15:6c:34:16:b9:1d:22:74:be:aa:95:36:cd:e0:3f:
         5b:49:05:28:c3:ce:39:8d:66:5e:da:70:1f:96:cf:0b:8e:43:
         a1:9a:dc:12:38:58:58:7f:2a:a6:d7:c8:7b:71:ad:4b:1e:74:
         de:cb:6c:30:73:ef:07:3e:de:e2:25:8a:56:96:70:9e:92:a8:
         a5:12:99:58:29:07:43:c7:92:23:84:a7:54:56:5f:7b:36:01:
         49:6d:25:46:54:d8:a5:b1:e5:42:87:b3:31:ac:42:1c:06:14:
         81:ab:0e:4a:e5:f6:c2:d1:13:2e:62:20:7e:8c:83:51:eb:c7:
         e7:15:d9:57:6c:8a:b4:bd:cc:4a:4d:40:40:e6:ef:8d:71:d5:
         50:5e:ca:5c:3f:07:30:e3:e9:cb:b0:1a:eb:92:91:60:d5:43:
         01:33:41:68:8e:14:18:fc:e8:26:32:66:c3:37:e8:62:49:6d:
         be:3f:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:10 2024 by rpki-client on console-ams.rpki-client.org