Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4cd6355-e0b5-3d4e-abf8-5192ff65a5de.roa
File:                     d4cd6355-e0b5-3d4e-abf8-5192ff65a5de.roa (raw, json)
Hash identifier:          FbavBaEcUqFc/s9DQ848tMFilWm+N8ZJ4LDPztt6yg8=
Subject key identifier:   ED:71:95:03:66:03:2B:45:5D:A5:F6:E2:21:E9:4A:BB:6F:85:E8:0C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AEA84
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4cd6355-e0b5-3d4e-abf8-5192ff65a5de.roa
Signing time:             Fri 30 Nov 2018 01:10:38 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:ea:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5c151f29-de4b-4a36-940e-1aa3aac5c805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:ab:c6:88:06:e5:9a:e1:de:00:9e:7a:fe:
                    28:60:28:4f:10:07:71:db:e1:6c:45:7e:e5:ce:71:
                    d6:cf:56:28:c1:47:4b:06:9d:3c:d2:d8:9d:6a:7b:
                    9d:b9:af:28:52:0a:f1:74:79:cd:b6:6f:aa:c6:0b:
                    68:ab:65:c4:9d:b3:2a:08:5a:b3:22:32:e1:34:b2:
                    7b:e7:86:af:b8:ac:9d:9f:68:64:15:2b:bf:02:07:
                    c4:c6:8f:06:e5:53:43:e5:1f:7d:f2:80:9b:ba:df:
                    85:73:25:5e:3c:26:de:ab:52:7e:75:b8:70:68:2e:
                    b3:7a:e3:22:ea:ad:f2:30:ec:71:0d:ba:29:ce:c7:
                    57:d2:b3:b5:f5:b1:e8:61:e9:0f:61:1e:22:f9:0c:
                    87:2d:4d:59:4f:b1:1f:72:f8:00:c7:fc:2d:53:ef:
                    8b:ae:96:c4:5d:3d:64:02:5f:ce:8d:d0:bd:e5:28:
                    a0:72:ad:56:8d:e4:70:d8:e3:f9:d6:4b:ac:3f:c9:
                    37:7d:f7:af:d5:01:09:27:82:c3:ad:92:fb:0f:58:
                    1b:cd:04:a9:c9:09:8c:a4:c2:c0:c8:83:4a:42:be:
                    75:c5:71:a2:af:f1:82:b7:21:a1:d3:e1:0c:6f:ac:
                    43:27:12:3b:82:46:4b:b2:b6:09:20:44:99:d9:b6:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:95:03:66:03:2B:45:5D:A5:F6:E2:21:E9:4A:BB:6F:85:E8:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4cd6355-e0b5-3d4e-abf8-5192ff65a5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:9b:da:ba:f7:8c:55:28:a1:0e:cb:0a:12:a0:92:b4:d2:
         61:e4:a2:29:f5:11:9b:8a:69:76:8d:fc:eb:18:57:fd:43:05:
         10:87:af:cf:3a:c4:34:1c:95:e2:aa:54:a2:c8:8c:13:77:cf:
         3e:99:a4:7d:85:94:bd:f0:42:e6:2c:d8:35:23:44:13:1d:21:
         11:c0:09:c8:b5:5e:b0:2c:ef:cb:9c:7b:63:cb:bc:d3:15:78:
         8d:26:6d:45:a2:cf:4a:62:cf:45:6b:11:8a:1b:05:87:8e:c4:
         9d:a6:5b:0c:23:c0:5d:1a:f0:4a:41:83:c5:15:ab:68:57:72:
         cf:7b:a8:a8:b1:04:b0:e4:f6:bb:c7:68:1f:3d:7a:8a:50:5a:
         11:07:c7:54:29:f8:e0:51:21:e5:8c:47:8d:ab:c3:06:97:35:
         1e:cd:db:56:17:9f:c3:b4:e7:04:5c:23:ae:df:fb:e1:88:f2:
         06:10:2b:2c:e5:3f:b7:27:ae:5b:ab:82:1e:75:9a:ee:00:fc:
         15:b9:f7:19:21:bb:47:f0:29:f6:22:f1:4b:c5:78:26:fa:28:
         bd:15:4d:dd:9c:fb:85:9d:d1:2e:be:e8:ba:1f:89:f2:e5:af:
         0f:91:5c:b5:6b:cd:c5:42:55:ef:83:68:08:a5:14:b6:50:b8:
         9e:02:2b:02
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Iq6oQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDVj
MTUxZjI5LWRlNGItNGEzNi05NDBlLTFhYTNhYWM1YzgwNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM/Kq8aIBuWa4d4Annr+KGAoTxAHcdvhbEV+5c5x
1s9WKMFHSwadPNLYnWp7nbmvKFIK8XR5zbZvqsYLaKtlxJ2zKghasyIy4TSye+eG
r7isnZ9oZBUrvwIHxMaPBuVTQ+UfffKAm7rfhXMlXjwm3qtSfnW4cGgus3rjIuqt
8jDscQ26Kc7HV9KztfWx6GHpD2EeIvkMhy1NWU+xH3L4AMf8LVPvi66WxF09ZAJf
zo3QveUooHKtVo3kcNjj+dZLrD/JN333r9UBCSeCw62S+w9YG80EqckJjKTCwMiD
SkK+dcVxoq/xgrchodPhDG+sQycSO4JGS7K2CSBEmdm2d4ECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTtcZUDZgMrRV2l9uIh6Uq7b4XoDDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2Q0Y2Q2MzU1LWUwYjUtM2Q0
ZS1hYmY4LTUxOTJmZjY1YTVkZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA6KeWDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEACW6b2rr3jFUooQ7LChKgkrTSYeSiKfURm4ppdo386xhX/UMFEIevzzrENByV
4qpUosiME3fPPpmkfYWUvfBC5izYNSNEEx0hEcAJyLVesCzvy5x7Y8u80xV4jSZt
RaLPSmLPRWsRihsFh47EnaZbDCPAXRrwSkGDxRWraFdyz3uoqLEEsOT2u8doHz16
ilBaEQfHVCn44FEh5YxHjavDBpc1Hs3bVhefw7TnBFwjrt/74YjyBhArLOU/tyeu
W6uCHnWa7gD8Fbn3GSG7R/Ap9iLxS8V4JvoovRVN3Zz7hZ3RLr7ouh+J8uWvD5Fc
tWvNxUJV74NoCKUUtlC4ngIrAg==
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:14 2024 by rpki-client on console-ams.rpki-client.org