Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc83daa9-5ad3-32e0-b43b-4477c7b3d332.roa
File:                     dc83daa9-5ad3-32e0-b43b-4477c7b3d332.roa (raw, json)
Hash identifier:          d31hyE2HtfSSn2OFr8qYrzvxwqYRuO3lUmR0VMsBeDM=
Subject key identifier:   52:EF:60:55:92:E4:EF:FA:F5:C5:0E:A8:64:3B:F1:1B:50:CB:60:EB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A4C0D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc83daa9-5ad3-32e0-b43b-4477c7b3d332.roa
Signing time:             Fri 30 Nov 2018 01:09:58 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0b2a08c3-80d7-47ed-8c68-2aac0fb98584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:ea:ae:b1:0f:d1:9a:48:07:ab:cc:e3:86:
                    77:10:a8:ed:73:77:50:4f:fc:d2:4d:0e:31:12:4f:
                    8f:16:b7:16:19:6e:68:a1:13:34:be:5e:a5:7a:b4:
                    72:ce:ac:23:dc:a3:0f:bb:73:88:85:0b:b7:70:2a:
                    d1:91:f8:1d:70:5d:65:fd:28:29:dd:36:41:13:aa:
                    13:9e:93:4c:cc:4a:68:d7:cd:12:af:e4:fc:19:da:
                    d9:ce:cd:f8:15:bb:af:73:92:82:e0:12:05:18:b0:
                    29:fd:f3:4c:da:ac:04:62:e2:35:ec:4a:25:8c:12:
                    06:bb:40:7c:a8:8f:db:62:f1:83:c4:ef:17:f1:ce:
                    3d:d8:53:49:69:9b:1e:fe:66:7f:49:a3:a8:c0:ff:
                    12:f1:15:2a:53:46:11:35:2e:6e:3e:48:72:59:86:
                    38:ea:a9:6d:59:9c:2b:7e:5b:b5:c2:08:1d:eb:41:
                    16:ff:e8:8c:65:cf:0d:b3:c6:ba:2c:79:af:a3:76:
                    c7:c5:cf:21:47:a1:f6:a1:6d:41:6b:31:7b:be:30:
                    59:a8:ea:ad:bf:10:91:8c:39:d4:17:7c:7d:f7:12:
                    d1:4a:31:07:24:37:ab:4a:02:2e:dd:ad:88:32:52:
                    97:79:c2:f9:b9:5d:98:8d:a4:18:b2:63:eb:a5:b4:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:60:55:92:E4:EF:FA:F5:C5:0E:A8:64:3B:F1:1B:50:CB:60:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc83daa9-5ad3-32e0-b43b-4477c7b3d332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:91:5f:a9:c0:95:63:bc:69:28:79:fc:2a:69:ea:0c:3f:
         ea:15:6f:fd:ce:18:f1:81:e2:27:1c:fb:32:be:72:06:b6:48:
         55:f1:06:fc:72:cf:77:e1:a0:90:80:f5:42:84:98:2c:1b:0d:
         25:87:c1:ad:cb:fc:82:f3:33:5e:82:2e:c4:e3:f7:b4:40:14:
         4a:72:f9:4f:1d:c8:97:2c:82:56:6d:d6:25:f5:2e:f8:5b:1b:
         51:80:da:be:ac:ce:7f:8a:b2:af:96:c6:1d:c5:41:71:d3:9c:
         6a:8f:e4:ea:ac:81:8d:ec:72:16:bf:82:57:8c:c5:99:1d:39:
         fb:0d:19:67:b1:60:eb:fb:23:c4:fc:e9:ec:a1:57:3f:ff:e6:
         99:5f:33:a3:af:b3:46:34:cf:50:5a:82:51:90:b7:4b:52:77:
         e1:61:ba:ff:31:76:b5:51:f3:18:1d:8d:64:57:22:1d:b2:18:
         f4:51:8e:e2:67:1e:41:e4:da:ab:8b:b3:43:1b:ce:a5:7c:76:
         17:12:2b:84:c7:8c:98:4e:6d:f1:79:60:21:36:f1:de:18:c9:
         0b:01:90:fe:e5:b0:09:7f:01:a2:17:a0:98:bc:b7:ec:7e:6c:
         cf:4e:c6:c4:1f:28:68:ce:7f:f8:92:38:a1:8d:4d:0c:97:5f:
         92:cb:14:27
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IqTA0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDBi
MmEwOGMzLTgwZDctNDdlZC04YzY4LTJhYWMwZmI5ODU4NDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKdK6q6xD9GaSAerzOOGdxCo7XN3UE/80k0OMRJP
jxa3FhluaKETNL5epXq0cs6sI9yjD7tziIULt3Aq0ZH4HXBdZf0oKd02QROqE56T
TMxKaNfNEq/k/Bna2c7N+BW7r3OSguASBRiwKf3zTNqsBGLiNexKJYwSBrtAfKiP
22Lxg8TvF/HOPdhTSWmbHv5mf0mjqMD/EvEVKlNGETUubj5IclmGOOqpbVmcK35b
tcIIHetBFv/ojGXPDbPGuix5r6N2x8XPIUeh9qFtQWsxe74wWajqrb8QkYw51Bd8
ffcS0UoxByQ3q0oCLt2tiDJSl3nC+bldmI2kGLJj66W0YtECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRS72BVkuTv+vXFDqhkO/EbUMtg6zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2RjODNkYWE5LTVhZDMtMzJl
MC1iNDNiLTQ0NzdjN2IzZDMzMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxFhDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAhcORX6nAlWO8aSh5/Cpp6gw/6hVv/c4Y8YHiJxz7Mr5yBrZIVfEG/HLPd+Gg
kID1QoSYLBsNJYfBrcv8gvMzXoIuxOP3tEAUSnL5Tx3IlyyCVm3WJfUu+FsbUYDa
vqzOf4qyr5bGHcVBcdOcao/k6qyBjexyFr+CV4zFmR05+w0ZZ7Fg6/sjxPzp7KFX
P//mmV8zo6+zRjTPUFqCUZC3S1J34WG6/zF2tVHzGB2NZFciHbIY9FGO4mceQeTa
q4uzQxvOpXx2FxIrhMeMmE5t8XlgITbx3hjJCwGQ/uWwCX8BohegmLy37H5sz07G
xB8oaM5/+JI4oY1NDJdfkssUJw==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:12 2024 by rpki-client on console-fra.rpki-client.org