Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d73daf5e-8690-3434-b94e-40cd7118187d.roa
File:                     d73daf5e-8690-3434-b94e-40cd7118187d.roa (raw, json)
Hash identifier:          dpV9gTSsaAPzG5Ij+plT/vzMmMkUtNE8tEGFsO38Gro=
Subject key identifier:   CC:9C:3D:38:EC:78:26:37:84:96:A2:7B:97:CE:02:C5:7E:2E:A7:8A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228BCDB
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d73daf5e-8690-3434-b94e-40cd7118187d.roa
Signing time:             Fri 30 Nov 2018 01:08:16 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.159.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=b2724c25-21c5-449d-8522-0d251969f69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:47:03:1e:3b:ea:68:a8:ba:fc:16:b1:b6:
                    21:99:91:59:77:ab:24:c8:a0:05:d9:97:06:69:f2:
                    dd:91:bb:33:60:8e:43:f5:73:69:cb:61:10:37:dd:
                    78:62:6c:a7:b2:0a:ed:8b:08:80:dc:02:a3:a0:6a:
                    e4:3d:ee:25:7b:db:95:9e:96:b9:e2:30:11:81:73:
                    0d:b0:74:0e:2d:85:0e:b3:bf:20:57:60:89:45:d9:
                    e7:43:72:a2:3a:67:8b:52:e4:3d:f0:39:cd:21:78:
                    70:62:11:75:fe:7e:12:cf:36:96:67:85:f6:b9:8c:
                    ef:ab:d8:19:d6:91:f2:41:41:8c:94:dd:f9:60:ef:
                    56:70:3a:1b:89:cf:1f:f9:9b:1b:48:aa:c2:fe:40:
                    46:ff:5c:91:fd:aa:c9:fd:3d:f9:fd:e9:d3:41:ed:
                    aa:02:5f:38:37:7d:3f:33:8d:0e:20:ca:13:d6:6a:
                    bc:e2:64:ca:0e:bd:a3:46:55:19:f8:4e:64:32:7d:
                    57:03:89:e6:71:25:20:78:67:96:08:a7:93:8f:d0:
                    19:66:70:4a:3b:b8:17:5d:c0:c1:0b:09:8b:9b:76:
                    ad:72:c3:fd:78:b8:82:1f:f4:8b:cc:b9:92:65:59:
                    50:cc:96:e8:c1:22:ca:a9:a5:3e:dd:c8:af:29:fb:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:3D:38:EC:78:26:37:84:96:A2:7B:97:CE:02:C5:7E:2E:A7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d73daf5e-8690-3434-b94e-40cd7118187d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ae:3f:d4:e7:0f:88:cd:eb:be:ff:8e:13:9f:d5:ca:a8:93:
         a4:e9:2b:2e:e4:74:19:57:ef:d0:6c:2d:a7:2d:ed:b6:05:a3:
         ad:26:32:85:0c:da:ba:8b:01:0e:78:52:dd:10:aa:74:77:a5:
         f4:56:6b:4a:e4:9e:b4:1b:c4:32:0c:d8:4a:c0:b3:c9:f4:a5:
         1f:f7:c9:77:39:7d:43:cb:a1:dd:94:ba:1c:23:4e:f7:47:cc:
         40:4c:7f:52:39:51:d7:40:19:ff:aa:d6:20:92:13:69:d4:93:
         1b:4b:19:cc:39:71:2b:83:41:bc:6e:90:a7:53:55:d2:d5:bd:
         ba:0e:af:b9:ac:98:04:47:30:e2:a6:aa:f0:04:0e:ea:57:4b:
         32:3b:53:9c:8d:b8:81:db:da:0e:43:84:eb:22:a2:bd:7f:87:
         c6:6b:b7:f3:4f:7f:16:04:1f:c7:54:a5:2b:a0:f4:c0:43:13:
         3f:44:60:55:b1:43:89:1b:b2:97:9a:66:1b:9a:2f:61:f0:1a:
         99:20:56:86:6e:37:31:6c:ae:9f:16:ae:5d:8a:6a:9c:e1:42:
         89:76:1a:eb:37:0e:1c:fa:e7:6a:27:23:b1:26:54:3f:a1:63:
         c8:42:4b:2f:84:75:98:83:28:25:d9:27:27:64:41:ef:d8:31:
         e1:e5:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:45 2024 by rpki-client on console-fra.rpki-client.org