Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9672dc-5083-31b7-b5b4-e40b1e37b394.roa
File:                     dc9672dc-5083-31b7-b5b4-e40b1e37b394.roa (raw, json)
Hash identifier:          9UEn4Tkz6IMotu5cn0ptbpkJKHaZQC9fskBMM8Zzijk=
Subject key identifier:   3F:10:2D:AC:68:39:88:3C:E2:E6:AB:67:A4:B5:FB:F9:D4:DD:D5:DE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762292F41
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9672dc-5083-31b7-b5b4-e40b1e37b394.roa
Signing time:             Fri 30 Nov 2018 01:08:45 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:2f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0f71b3f0-4a44-48d2-83d3-d03ad54b9b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:77:8c:d5:66:a3:00:58:2c:75:f4:31:5e:
                    6b:ce:24:39:93:f9:d3:b3:9a:ca:be:ac:a8:a3:66:
                    b3:d7:f3:b0:5e:18:a6:5c:f1:8d:3b:6d:56:6b:80:
                    d5:25:4a:ef:c3:82:23:33:42:30:d9:f9:f1:60:1a:
                    92:cd:d0:d9:3e:9e:79:14:15:7a:16:e5:24:c2:15:
                    ea:de:b4:cf:5b:e2:40:e3:05:d5:11:73:5d:92:a2:
                    9f:ac:b9:ec:99:de:6a:97:b4:6f:d6:d0:c4:0f:02:
                    1a:0b:3d:49:ef:90:2c:3e:04:9f:0c:5c:20:71:45:
                    d8:31:74:74:b4:c0:57:0b:4a:3f:55:e1:cd:a5:41:
                    79:67:83:05:82:3c:c2:2d:12:2f:8f:51:ce:69:c7:
                    ec:b4:86:c1:3b:1c:f4:cb:ef:c6:b7:e0:cc:98:98:
                    c7:3d:d6:f5:a4:b0:0d:a8:6f:c2:e8:20:d3:22:39:
                    1b:22:a2:e0:0f:cb:a3:a8:f8:97:f0:70:c2:a0:ec:
                    38:a7:31:05:35:99:f4:d1:e7:43:80:35:8d:13:d3:
                    33:cf:8a:a8:af:4d:39:1a:22:a4:d7:4b:38:03:86:
                    f4:ca:66:5b:17:e8:92:b1:36:a1:84:c9:f9:0c:39:
                    b2:a4:93:2d:b9:0f:ec:e9:b3:b7:51:91:5f:b7:f0:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:2D:AC:68:39:88:3C:E2:E6:AB:67:A4:B5:FB:F9:D4:DD:D5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9672dc-5083-31b7-b5b4-e40b1e37b394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:c7:1b:eb:43:d6:13:8f:c5:5f:03:96:9e:7a:fa:e9:ae:
         09:bf:be:22:3b:c2:e5:3f:c6:ca:23:65:5e:7a:af:4c:1d:3f:
         7e:50:15:85:73:ad:30:eb:3c:1c:3f:d8:e3:89:ce:75:35:a7:
         d5:35:fa:45:96:72:ae:21:12:a9:ee:ff:6b:68:69:d3:7a:2f:
         52:d4:b0:af:b3:1d:1a:92:ef:6e:bd:55:e9:8e:92:40:3f:d2:
         2d:c2:37:7c:a4:d1:94:9d:a8:90:31:64:45:5a:95:5c:69:61:
         b7:84:9f:41:a6:36:80:0c:ae:d5:c1:b7:f8:57:ed:ca:f9:1d:
         38:13:b5:7b:11:0b:a3:0d:6e:15:d6:f6:39:fb:ae:2e:0a:50:
         23:1e:5a:cf:60:3c:ac:28:17:82:af:4f:14:d5:e4:54:ac:e6:
         b1:04:95:63:4d:06:0f:c3:3a:0f:16:3d:2e:a8:28:ec:89:2b:
         29:f0:71:6b:52:44:51:9c:c7:dc:6f:7b:bb:68:f0:e5:a6:9c:
         86:b9:22:9c:6e:8a:3a:ec:8d:d0:a6:99:e3:f7:53:b0:6d:19:
         88:0b:78:b9:f2:0c:43:69:db:e6:6c:b2:14:fe:1b:e2:6f:09:
         63:a3:b7:ca:61:22:91:54:23:20:af:07:f2:9d:6e:45:43:a3:
         39:f8:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:15 2024 by rpki-client on console-ams.rpki-client.org