Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8ce5678-9a45-3b26-9813-0d9bf19de4e9.roa
File:                     d8ce5678-9a45-3b26-9813-0d9bf19de4e9.roa (raw, json)
Hash identifier:          TVF0aBTM0Neqo8JFSDTtz+40uZeq6pge3iU6XGpvhlg=
Subject key identifier:   00:A5:4B:5B:38:69:47:E9:F0:CE:52:23:94:59:99:DF:F1:64:74:2A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622AF89F
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8ce5678-9a45-3b26-9813-0d9bf19de4e9.roa
Signing time:             Fri 30 Nov 2018 01:10:42 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:f8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=45d6f449-efe9-4fa4-aaf6-a3f6511ceb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:7a:30:3b:d3:84:9f:f5:e0:83:72:d1:1c:
                    b8:d9:3b:e1:8c:5e:b4:54:86:50:c6:99:7d:58:5b:
                    b6:39:b8:dc:98:3b:ae:77:8c:a4:ff:51:bd:04:2f:
                    61:30:6f:9c:0d:fa:21:3c:1d:98:ea:82:e9:97:0f:
                    76:28:97:94:a0:47:d4:64:a1:be:bf:f7:42:38:6b:
                    bc:99:aa:0a:5a:57:a2:ed:37:f0:7b:b7:5a:ec:c4:
                    c9:32:ef:4e:5c:e3:40:56:f4:f2:b8:3b:da:2c:0f:
                    48:42:6c:17:eb:d7:6c:70:97:56:37:a8:3a:79:6c:
                    d8:20:40:40:6b:8a:6f:c7:42:a8:49:76:c6:37:09:
                    07:b7:69:66:8f:d7:3a:5e:2c:ef:bd:82:84:59:f4:
                    5e:58:7f:4d:24:2c:98:1f:c5:69:e9:ab:67:cd:54:
                    92:c5:ff:0b:ba:ea:ac:de:26:c3:e5:6b:40:b0:e6:
                    ad:f3:e0:e4:30:4e:11:34:6c:3d:e4:73:8c:f2:57:
                    ca:70:7f:d7:c5:a3:b0:c5:2a:07:b1:7b:5a:ba:be:
                    a2:ad:84:8c:74:0e:c1:b2:de:27:92:9e:ca:4d:81:
                    78:43:c4:dd:0f:db:1d:27:46:44:5b:58:0e:d0:59:
                    d1:c6:34:23:21:8c:4c:d3:3b:8b:f8:0c:5a:0f:88:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:4B:5B:38:69:47:E9:F0:CE:52:23:94:59:99:DF:F1:64:74:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8ce5678-9a45-3b26-9813-0d9bf19de4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:b7:a7:d3:15:c8:2d:04:cc:09:0e:ab:b7:51:af:4c:d5:
         d7:d7:af:aa:5c:a6:b1:8b:e0:41:66:80:e1:09:a1:0b:e6:90:
         98:87:2c:39:e7:16:1b:2e:13:42:3a:3d:a7:ae:21:1d:0f:ca:
         5a:7d:cb:b9:b3:ab:dd:85:27:34:bc:33:cc:02:6b:5c:69:fd:
         3d:7c:63:b5:14:64:89:bc:1a:ec:0d:8e:4d:21:b6:1d:23:3e:
         2b:53:9a:a6:90:a4:7d:40:65:23:30:45:0d:fc:54:77:66:c0:
         91:ca:80:db:81:dc:4a:f9:5c:1a:58:5f:23:1e:94:4a:16:d0:
         08:4f:e3:61:9d:f3:1d:ac:9e:33:c4:68:ff:b6:6c:fa:5d:dc:
         85:f4:15:3d:f3:6b:0c:14:17:74:20:8e:8a:99:27:c5:da:4b:
         15:a5:bf:23:68:46:8a:50:50:b8:b8:40:6e:62:72:ee:7f:92:
         bd:f8:bb:85:13:84:0e:60:0a:6d:50:11:bc:1a:18:84:5f:8b:
         72:4a:06:8a:f9:9d:52:8b:f7:22:e4:76:1f:d5:9d:76:de:cb:
         fb:dc:c1:fd:b1:ac:91:ae:a7:9f:46:9e:15:0c:d9:f3:d8:f8:
         9a:70:82:54:32:b0:cd:c9:54:6f:61:87:a4:06:d6:bf:27:bc:
         2f:e0:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:12 2024 by rpki-client on console-fra.rpki-client.org