Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd435937-97f6-3fab-99d6-7770b4f4c658.roa
File:                     dd435937-97f6-3fab-99d6-7770b4f4c658.roa (raw, json)
Hash identifier:          u5MFhiwsr9mCf8CnUOo8/1JWMb8T1tWnWlvfUm6T7mA=
Subject key identifier:   13:8F:9C:EF:EE:B1:86:57:DA:31:F2:E3:72:01:AD:D3:50:C6:B9:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A2ED3
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd435937-97f6-3fab-99d6-7770b4f4c658.roa
Signing time:             Fri 30 Nov 2018 01:09:50 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:2e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=04b54957-e5e0-4148-9798-061175b9e133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:f9:c3:89:d4:84:30:76:fd:ad:23:1b:1b:
                    7a:10:0d:d1:c9:e0:30:99:41:45:84:3f:58:be:8a:
                    94:b1:65:d4:4a:c2:b5:a3:a4:48:33:78:b9:8f:43:
                    5b:e9:8d:b7:11:09:68:80:b0:54:c5:b8:4e:d0:d2:
                    a6:18:02:06:c1:04:2f:47:00:74:0f:cd:b8:08:b1:
                    ee:97:50:b6:3e:80:0f:c4:95:e1:61:42:34:8c:00:
                    85:ad:87:45:9d:ff:d8:af:90:20:1e:d9:22:f5:d0:
                    46:44:20:a2:65:2d:fd:b5:9e:2a:26:f5:fd:14:b0:
                    3a:1c:b6:d4:60:eb:64:8c:a2:21:59:d8:62:d2:5b:
                    8c:30:05:88:f6:45:43:66:1e:08:e7:71:1b:63:de:
                    a4:94:c3:8d:49:00:7f:01:98:ab:9d:ce:82:6e:ac:
                    85:0f:f1:e4:b8:03:53:8f:96:75:ef:22:66:6c:34:
                    26:ec:4b:dd:9b:95:91:37:a1:7f:10:d7:ed:7b:94:
                    bf:a1:e6:3b:5f:16:a3:15:73:58:b0:ec:9c:e9:57:
                    82:79:b6:4d:65:83:c1:c4:86:a3:1d:0a:8f:96:ab:
                    8e:91:5a:d8:fe:92:c7:60:60:22:fe:f3:7a:f1:52:
                    c4:ad:59:a8:cf:ee:b5:40:6f:19:7a:b1:07:34:f6:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:9C:EF:EE:B1:86:57:DA:31:F2:E3:72:01:AD:D3:50:C6:B9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd435937-97f6-3fab-99d6-7770b4f4c658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:5d:0c:cc:20:7b:a7:70:7c:83:e9:37:22:ec:bd:d7:46:
         3d:e5:dc:22:a3:27:ce:fa:3c:a0:65:c7:8c:4f:9f:7d:6a:81:
         bd:a7:79:80:2a:9f:71:fb:82:90:17:58:d8:62:4d:cc:24:a3:
         f3:87:ef:aa:9f:67:2b:ae:52:c2:04:98:69:e8:fa:26:f9:75:
         53:78:00:92:81:e1:8a:87:db:c2:4a:bd:a4:26:4e:d1:2e:64:
         e7:ef:3f:38:bf:e0:0e:16:11:f0:87:86:58:86:17:9f:82:46:
         86:ff:7c:fa:8e:70:79:07:0b:aa:43:95:f0:de:4d:a3:a4:c4:
         cf:89:78:54:62:a2:d4:0f:1c:92:ad:05:75:aa:f7:60:97:8e:
         37:bf:34:9f:c3:5b:23:fd:c4:93:23:18:70:0b:af:c0:93:5b:
         c0:e8:4d:cb:67:09:2d:eb:14:d6:cc:f3:f8:94:4d:ce:5a:d8:
         f0:0e:0a:43:79:77:6c:f0:a3:44:7a:a7:ff:46:b6:54:c3:99:
         a1:26:d8:70:19:ed:44:45:1d:2a:8f:5b:51:ed:9a:29:d2:8c:
         44:45:31:3b:92:ca:e4:77:9b:f2:a5:7c:6d:d3:1c:3a:a1:19:
         b7:50:ec:c7:78:0c:72:15:7d:5c:25:98:74:b8:4d:c7:8a:89:
         d8:de:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:15 2024 by rpki-client on console-ams.rpki-client.org