Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddd39d76-02f8-31b5-bec9-2e2c76de4b98.roa
File:                     ddd39d76-02f8-31b5-bec9-2e2c76de4b98.roa (raw, json)
Hash identifier:          /Xryr6QstyBn5uQUAENJMUxF9NOMj/+dhPIraWBoYV8=
Subject key identifier:   1C:B3:BD:EE:03:65:A0:EE:FE:87:29:A9:84:F8:8F:49:AC:E0:1E:5E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1731531FC64
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddd39d76-02f8-31b5-bec9-2e2c76de4b98.roa
Signing time:             Fri 03 Jul 2020 15:01:04 +0000
ROA not before:           Fri 03 Jul 2020 04:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        162.158.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:15:31:fc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  3 04:00:00 2020 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=b94b9886-4f7e-4ac9-887b-1c18e9d657db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:45:42:f2:bf:c9:2e:4d:e1:0d:71:17:ce:
                    df:d8:a7:dd:ff:69:79:74:e0:6f:14:28:9e:7c:cb:
                    85:27:e7:5e:1e:c1:6b:44:2e:a9:d1:61:62:7a:bc:
                    59:8e:e2:ef:da:5a:95:c7:a6:6d:73:07:04:b1:90:
                    e2:d1:90:99:8c:87:be:b8:04:13:68:3d:bc:03:20:
                    00:73:b8:4b:b4:b9:fa:64:18:a9:c0:f9:3d:74:61:
                    f0:8a:90:18:77:7d:61:74:81:5b:d5:d0:98:b9:12:
                    64:90:49:bc:49:c8:aa:b2:9e:8d:61:81:e4:19:29:
                    a3:39:5c:ab:44:b9:2f:0c:86:4f:e1:54:fe:81:8c:
                    c1:81:20:09:32:0b:51:a5:3c:15:41:95:ff:de:bc:
                    6a:fc:59:cf:69:4c:4a:79:7f:8d:ab:4d:34:81:0d:
                    5f:6f:16:46:ac:98:00:d4:b3:f3:ab:8c:b1:6a:b6:
                    11:e3:5a:57:3a:ce:b3:e4:cf:93:ac:4f:39:a9:48:
                    26:0e:27:61:b5:5f:f5:e8:f7:3a:57:31:ee:79:d8:
                    fa:39:84:27:4b:86:81:aa:e2:90:07:f3:d1:50:07:
                    81:68:89:d5:36:c0:80:dd:d3:4f:ce:55:fe:fc:b9:
                    05:8b:72:d8:3b:64:56:75:0d:87:fe:ca:8c:86:38:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B3:BD:EE:03:65:A0:EE:FE:87:29:A9:84:F8:8F:49:AC:E0:1E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddd39d76-02f8-31b5-bec9-2e2c76de4b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:6c:f0:c3:bb:9f:a1:13:44:f5:9f:d2:0c:94:b0:c7:a6:
         62:ec:e1:1e:be:27:b4:b5:03:de:2d:b7:df:d9:90:43:90:8b:
         65:52:ba:b1:67:66:6f:0a:c4:94:bf:ca:61:de:fd:9f:55:c8:
         51:3e:60:e6:2d:43:cf:63:f7:90:b1:67:b2:55:46:98:68:e3:
         88:80:10:64:0c:4a:3e:cf:54:a0:58:16:30:8c:f4:33:5c:52:
         bc:04:a0:1f:70:01:44:c8:e3:3a:13:2e:81:1f:c5:c9:41:5d:
         29:c9:fa:5c:26:98:88:c1:42:33:d4:0c:0c:78:1a:2f:4a:b5:
         a9:fe:ab:a2:d0:ae:88:3b:10:82:c0:ec:39:04:35:39:9e:6c:
         3a:9d:ff:93:44:53:a6:97:9e:f9:26:3e:07:c4:d3:99:e2:b7:
         f8:da:ef:07:e7:ea:25:a0:3f:86:a1:72:64:2c:03:f0:92:b9:
         1a:64:22:a9:e5:74:2f:b7:09:14:08:c8:5d:13:d0:5c:9a:26:
         18:8d:cf:88:c7:e2:ca:d1:1f:35:b8:cd:2b:2f:aa:c7:58:26:
         0d:f3:78:df:5c:f8:1b:08:54:79:84:46:0e:34:77:2a:01:83:
         23:e4:ee:bb:87:5e:e1:61:2b:f0:1e:f5:8d:48:e9:63:ed:e1:
         66:48:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:15 2024 by rpki-client on console-ams.rpki-client.org