Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfdb7d86-a65c-30db-94f8-8db3ef9ef330.roa
File:                     cfdb7d86-a65c-30db-94f8-8db3ef9ef330.roa (raw, json)
Hash identifier:          w1zKPdvwbvw1iLpf/tQAcK/HAX44Q1vHEKwqKiO8+k0=
Subject key identifier:   86:2F:90:74:B2:FC:47:51:00:8A:32:CD:61:A7:3A:45:FC:C5:B5:B2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229CC01
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfdb7d86-a65c-30db-94f8-8db3ef9ef330.roa
Signing time:             Fri 30 Nov 2018 01:09:25 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:cc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=e0ced5c8-a15b-4966-9885-cc4c237bbc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:99:d5:5a:be:61:de:d1:eb:b8:3a:47:29:
                    b4:ff:99:09:e8:ea:18:8e:14:34:de:68:2f:a7:f4:
                    54:b4:75:87:26:c4:7a:d1:be:fb:5b:23:28:d8:d2:
                    a5:12:71:fc:16:d5:c8:4b:0d:53:79:93:06:ff:fa:
                    06:d4:b5:de:4f:3b:2b:7d:fb:cc:f6:7d:48:4c:41:
                    e3:eb:7b:5c:84:89:c7:ab:0f:d5:b6:85:6b:25:06:
                    e6:57:61:a6:38:69:3c:51:b0:a4:26:f9:1f:ab:31:
                    f9:b2:9f:a7:33:14:18:f4:ce:ad:4c:41:1e:e6:d5:
                    68:1e:d2:fe:2d:8d:6a:1c:eb:5e:11:18:0d:22:52:
                    48:44:de:c6:b5:b4:7b:8e:ee:09:4a:13:d9:8d:a0:
                    fc:07:9f:aa:a9:69:b7:32:a9:c2:38:a8:c7:a5:fb:
                    a8:25:0c:b4:42:1a:b5:cc:67:fe:6c:01:88:cd:3a:
                    a9:25:cd:11:63:fe:d7:41:e7:fc:23:cf:6f:fa:e6:
                    40:fd:dd:13:ac:bc:23:db:e8:c6:de:d3:8a:1e:c0:
                    a4:7c:b6:fa:45:2d:4e:25:f0:47:cf:b6:d1:41:c5:
                    08:d5:3e:ce:b1:02:c1:98:e9:6c:87:77:0a:d2:d2:
                    91:46:a6:7b:4c:6f:2d:f3:f6:8b:6d:8d:e6:c1:cf:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2F:90:74:B2:FC:47:51:00:8A:32:CD:61:A7:3A:45:FC:C5:B5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfdb7d86-a65c-30db-94f8-8db3ef9ef330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:c7:ff:02:60:a5:36:58:0c:75:55:7c:74:04:29:27:0a:
         9b:c9:37:81:ba:c4:5a:f4:82:f6:ab:64:91:88:0a:5c:ef:d4:
         04:a5:7f:c5:13:49:b1:61:87:a5:54:64:e5:25:1b:20:80:81:
         9c:e2:a5:2d:cc:4a:47:27:7d:81:b3:70:e4:9f:65:0e:97:63:
         e4:c2:a2:fb:f4:a9:6b:a8:e0:f1:ba:66:3a:1f:ca:6d:58:ee:
         ff:1b:ce:5f:22:53:c7:ef:37:15:24:53:21:ed:5b:fe:3d:61:
         4c:0d:8e:2c:c4:f7:07:9b:97:c5:ec:b2:a3:23:4a:06:fd:9f:
         15:9f:28:0f:8d:f4:d6:bf:a2:8d:a9:65:0e:4d:8b:cd:14:e6:
         f2:05:0d:90:09:d2:f6:74:4e:e9:5a:6b:7b:b7:91:99:1b:06:
         a8:18:8a:6d:a5:5f:d9:0d:ce:dc:00:7f:d7:11:b4:ab:69:25:
         e0:ce:7c:3f:48:06:02:5f:cb:07:cf:4c:bb:af:ce:92:4a:56:
         21:a0:eb:88:5f:f5:75:77:c4:d5:17:05:84:08:32:14:3e:5c:
         3c:81:f3:a1:6e:9d:28:dc:cd:66:c3:a3:78:42:ae:66:61:20:
         72:81:65:f4:e0:3d:1d:f6:9e:7c:0a:ee:a8:de:2d:f8:69:9c:
         98:cb:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:06 2024 by rpki-client on console-fra.rpki-client.org