Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0f33d25-f927-32b8-9536-61e4f3ff2616.roa
File:                     e0f33d25-f927-32b8-9536-61e4f3ff2616.roa (raw, json)
Hash identifier:          njEigItDq5nJmVSyIOhrQtsMx9UUs2DPn72zRmOegC4=
Subject key identifier:   F2:43:9A:5E:5E:67:BA:51:91:D5:4E:6D:4D:80:10:73:85:DC:31:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715D5468CC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0f33d25-f927-32b8-9536-61e4f3ff2616.roa
Signing time:             Thu 09 Apr 2020 05:05:45 +0000
ROA not before:           Thu 09 Apr 2020 04:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        108.162.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5d:54:68:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=5bb3df8c-bc01-46e1-b4fc-672ce9db40fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:04:08:4e:e3:08:44:c0:d9:d9:25:78:65:
                    21:6c:f1:f1:1b:d4:83:b0:85:c6:54:ea:f2:04:f8:
                    c0:28:8f:70:ad:2c:c3:9c:13:e2:83:ce:c8:d0:a4:
                    3c:05:19:7d:5b:15:47:d6:7f:67:d2:c5:fd:17:80:
                    e2:44:9a:47:ff:a2:6c:f5:ef:3a:7f:77:1c:83:e3:
                    94:a5:47:eb:d3:b2:4f:1d:06:6e:4d:07:2b:fe:e4:
                    06:72:e4:d0:d6:91:b7:bf:6a:e6:b4:ed:a5:b5:ea:
                    3f:9c:6d:5d:fd:66:6f:2b:ae:37:e3:ff:ff:80:07:
                    cd:41:2f:5e:73:c2:24:1b:1b:f4:0d:95:f1:76:85:
                    8b:4b:72:6a:2a:9a:b9:cd:4a:b4:a6:c3:7d:58:dd:
                    df:83:ef:ed:84:11:07:f2:95:9c:66:f6:78:a6:b7:
                    0a:93:84:bd:f0:fa:ef:61:1b:10:ca:98:96:e7:6a:
                    7d:e1:1e:5c:8e:49:bf:99:d9:b0:63:c7:d3:be:d2:
                    9a:6e:89:0c:1a:60:e9:6a:cc:a3:8e:d5:f9:e7:3a:
                    d5:0b:39:c7:1b:1f:42:fe:43:8f:d9:20:f5:42:c8:
                    1f:3f:37:08:e2:61:cf:4a:37:fe:46:53:b9:ad:3b:
                    fe:6b:ac:d5:00:43:57:81:36:5b:f7:2e:f8:a1:66:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:43:9A:5E:5E:67:BA:51:91:D5:4E:6D:4D:80:10:73:85:DC:31:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0f33d25-f927-32b8-9536-61e4f3ff2616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:81:a7:73:2f:b8:2c:c6:58:d9:73:c3:40:87:51:38:82:
         57:8d:9b:d2:5f:08:de:17:44:6a:43:83:6b:a9:48:56:d4:5f:
         05:c2:9b:91:2c:05:3b:4c:df:34:85:f9:4b:b0:aa:51:71:e2:
         c3:a9:ee:78:73:2f:ac:6b:99:a3:ad:cd:c1:d8:2a:a9:91:43:
         c4:b0:a0:76:e2:0f:de:57:66:14:7f:dc:fc:97:90:8b:cd:b8:
         de:a9:61:34:f7:48:d3:bd:3f:d2:f5:23:d7:eb:63:90:a7:7c:
         6b:77:25:82:04:17:01:5b:a4:b1:7e:fb:21:6c:22:35:0a:40:
         1e:e7:9f:3e:5b:8a:88:06:1c:38:2a:5c:d1:f6:5e:97:d6:de:
         15:15:54:b4:3e:1f:83:bc:da:01:36:ad:8a:10:e5:44:7a:ae:
         2a:c6:d8:6f:6e:f8:43:b2:7d:5e:79:de:db:87:47:b8:43:bf:
         38:82:d2:b6:fa:4b:30:bd:88:63:f9:dc:79:a1:2c:62:52:82:
         a7:9b:35:b1:af:4d:2c:95:12:e2:dc:58:25:29:ef:65:e5:bf:
         e1:3f:b5:9a:03:8d:9c:5b:00:a0:2d:b2:f6:49:90:08:49:fe:
         46:56:19:00:fc:04:d5:74:fa:13:76:9a:ce:a7:ce:db:82:35:
         21:e1:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:47 2024 by rpki-client on console-fra.rpki-client.org