Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d9fc7dd6-acec-329d-95b4-add3f9fc2479.roa
File:                     d9fc7dd6-acec-329d-95b4-add3f9fc2479.roa (raw, json)
Hash identifier:          xVYDNGpJMWr2F0w5e7al7Txzup6EZ2uz0aBBNilmZ7w=
Subject key identifier:   6E:8F:1C:C4:68:64:1B:7E:13:96:C9:D4:EC:12:71:F4:0D:4D:D5:DE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229FD6A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d9fc7dd6-acec-329d-95b4-add3f9fc2479.roa
Signing time:             Fri 30 Nov 2018 01:09:38 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:fd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=6e49b9fa-3a77-462c-b546-4e6df3c3f4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:69:28:da:de:46:a4:f1:67:de:17:4e:05:
                    ad:10:3c:f8:4d:ee:d6:64:db:55:94:32:ef:39:0d:
                    33:22:8c:b6:3d:65:ec:bb:5d:31:bc:d6:d8:bc:6e:
                    f2:f3:cb:23:57:36:79:e6:91:06:b0:04:c6:71:26:
                    b0:4e:3b:4d:19:33:fd:90:95:d0:b3:ac:5c:c6:58:
                    79:6c:b7:81:bf:a3:af:c6:34:25:34:41:28:19:5c:
                    55:62:24:d1:61:3b:13:27:8a:28:8d:4e:0c:58:b2:
                    cb:e6:96:51:55:c2:86:ef:28:df:b1:fd:15:14:fc:
                    73:c7:03:20:8b:19:26:39:04:f8:61:a4:3b:e0:1c:
                    f6:90:32:75:10:55:db:4a:ab:28:64:81:b2:97:ff:
                    68:b5:6a:db:42:53:98:06:93:d6:5d:0a:c2:b0:8a:
                    94:99:38:e8:aa:68:ba:a9:ad:8b:4c:b4:18:3b:47:
                    1a:ff:9a:42:a0:e9:e5:9b:8d:16:56:68:67:d9:d5:
                    96:2d:d9:70:6b:d8:ac:81:c2:c7:7e:3c:44:10:93:
                    bf:96:b7:73:7f:76:4d:6d:24:aa:aa:18:cd:20:d0:
                    1b:01:78:7f:60:ff:0f:b4:88:c7:d7:13:0f:b4:46:
                    77:91:30:3d:99:d7:73:b5:f9:8d:6f:4e:6f:5e:54:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:1C:C4:68:64:1B:7E:13:96:C9:D4:EC:12:71:F4:0D:4D:D5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d9fc7dd6-acec-329d-95b4-add3f9fc2479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:fb:b5:c1:7c:2f:53:fe:f5:56:8a:c5:ae:9e:f6:2f:03:
         27:1f:89:ba:2f:77:3f:71:07:94:01:02:ad:b8:5d:46:2a:66:
         08:56:84:73:02:12:2a:a7:99:c0:8f:88:81:d3:f9:d2:41:a1:
         93:9e:8f:af:aa:3a:06:e4:06:f5:87:53:7c:5a:b0:73:9d:95:
         52:ad:a4:48:89:5a:f5:d4:d9:9e:58:84:a3:74:af:4c:49:df:
         d7:4c:63:a1:4b:18:80:98:1e:c7:75:30:3b:54:6b:cb:cc:89:
         2b:a5:a2:ab:10:66:ab:68:1b:c7:19:e2:68:bc:31:04:26:e1:
         83:dd:df:92:5d:08:69:2f:fd:a8:92:0c:19:10:10:84:a1:d9:
         3a:6e:b3:0a:7a:e8:5a:e2:12:d3:b0:eb:48:88:15:e6:10:49:
         9c:0c:ee:91:7e:bd:cd:47:de:11:d5:78:a9:f6:ab:ab:81:2e:
         2f:ef:74:c5:23:e2:41:3c:1a:13:25:78:56:2e:57:6e:a5:da:
         7e:9c:30:24:99:59:47:4f:17:66:39:9c:d9:f6:ef:b1:0a:d8:
         31:29:bb:71:57:3c:0b:7f:60:0e:9d:1d:0b:07:fc:53:d3:79:
         1e:50:b5:0b:20:02:54:9c:b7:3d:d4:51:04:02:48:f0:dd:77:
         36:5f:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:10:06 2024 by rpki-client on console-ams.rpki-client.org