Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4fc8351-b759-32f2-9ea2-571254e16d63.roa
File:                     d4fc8351-b759-32f2-9ea2-571254e16d63.roa (raw, json)
Hash identifier:          YO1oyx5TmuikdNqv9+dCYL+hSyvac02LUNa/+a1DvUg=
Subject key identifier:   91:21:75:75:F3:67:90:6D:84:66:03:5B:17:DE:1D:0D:BE:38:78:97
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762298CE8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4fc8351-b759-32f2-9ea2-571254e16d63.roa
Signing time:             Fri 30 Nov 2018 01:09:09 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:8c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=dcc87e8c-0158-4afb-9ae6-9577bf6ffe87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:62:06:4c:d9:eb:77:d1:b7:c8:1d:13:cd:
                    a9:55:ab:09:f3:48:05:90:9c:0d:fd:a3:68:3a:68:
                    79:dd:2a:90:cb:e7:ec:5e:86:c7:7e:c7:16:7b:92:
                    e2:f9:36:33:3b:55:89:81:e0:8d:1a:3a:bd:d1:9a:
                    b5:0c:32:7a:b8:07:78:53:8d:a3:20:07:44:82:a3:
                    d1:3e:c0:66:a2:5b:6b:94:1c:24:86:a7:9f:23:18:
                    bd:d6:51:fa:1e:57:49:63:aa:1c:71:c1:97:01:7e:
                    1c:d9:bb:77:af:7d:da:af:7f:5a:49:ab:69:62:91:
                    5d:d1:76:fc:4c:d1:4b:44:e0:a5:92:ac:be:93:15:
                    ec:14:e0:d7:81:a7:c0:f8:db:78:1e:80:25:73:48:
                    b5:4f:1f:49:03:42:f2:13:cd:e4:ba:ea:06:7c:10:
                    e0:95:34:3a:54:4c:08:0e:4d:10:f9:64:38:11:c6:
                    62:9a:ad:3b:14:a1:db:bd:90:1c:9a:23:87:4b:b3:
                    12:67:75:e6:ad:4c:45:6e:0a:2a:8e:c7:29:6a:e4:
                    42:be:c3:f1:2c:0f:10:2f:1f:e7:33:50:c0:29:a7:
                    92:5f:b8:2c:fd:a4:90:46:39:b9:d8:04:f4:1e:e3:
                    83:22:01:16:a4:b6:72:77:4c:00:93:c3:09:90:41:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:75:75:F3:67:90:6D:84:66:03:5B:17:DE:1D:0D:BE:38:78:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4fc8351-b759-32f2-9ea2-571254e16d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bc:f4:1b:18:dd:cb:5f:a6:42:53:57:af:68:77:07:98:32:
         1a:fb:76:c8:ae:c6:82:39:27:79:3a:c2:57:1e:0b:9a:27:a2:
         d3:f3:27:f0:0c:6b:6c:f5:27:37:e5:0c:ef:16:ef:fe:da:ee:
         b4:c4:df:64:14:d6:7e:4f:6f:04:cf:f1:6e:27:6b:a6:03:a9:
         6e:43:a4:77:af:ab:06:1d:31:cd:2f:ef:2d:12:27:3e:ed:18:
         aa:05:ad:41:a3:e3:e5:53:f7:90:16:bf:1e:0d:ea:37:fa:ca:
         ea:0f:ec:48:9c:3b:c6:88:1a:29:55:be:e4:37:66:aa:a4:b1:
         f1:11:f4:76:1b:eb:64:8d:23:ed:c2:c5:62:a2:e5:df:f0:79:
         b3:16:16:39:87:01:74:a6:f9:66:c5:cf:db:26:0f:b9:e9:fd:
         88:7b:d2:4f:5f:cb:86:7a:21:51:d9:9c:54:14:e5:7e:95:97:
         16:37:ed:cf:fb:75:6a:12:21:9a:d6:43:30:d3:bc:b4:ab:61:
         3c:96:65:15:41:3f:02:b9:27:f6:bc:88:e1:39:bc:04:e6:46:
         ea:cb:94:42:0f:9e:6b:36:90:44:42:b1:99:c2:6d:9e:31:99:
         8e:e5:14:8c:72:ec:ac:bd:f5:69:2a:8c:41:16:02:27:72:c5:
         ea:97:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:12 2024 by rpki-client on console-fra.rpki-client.org