Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e221fc06-7868-3e5a-91f5-487f229f96a9.roa
File:                     e221fc06-7868-3e5a-91f5-487f229f96a9.roa (raw, json)
Hash identifier:          zQteQp5zaANClDKHP4UU7mydMyEQpMLPSUsZgpmxpOw=
Subject key identifier:   DE:57:36:4E:E0:D0:35:CD:7B:AA:0D:47:17:D3:54:40:16:15:56:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228D2CC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e221fc06-7868-3e5a-91f5-487f229f96a9.roa
Signing time:             Fri 30 Nov 2018 01:08:21 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.64.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:d2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=60b26657-220e-4a24-9e7c-6eafb8de0f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:f0:3d:8c:5f:ca:b9:56:ea:bf:3a:6a:b8:
                    60:61:6a:21:7b:78:cc:38:23:86:0d:10:0f:b5:7a:
                    15:02:d2:4b:f6:41:11:78:2e:f6:d1:5c:d6:71:bd:
                    99:c6:10:50:6c:e5:cb:4e:22:97:3c:db:05:d1:e2:
                    28:90:94:3a:8f:00:25:81:11:bc:d6:58:d4:7b:cf:
                    a4:4d:de:07:4d:79:d6:2e:ed:4f:ba:ec:bb:48:32:
                    22:d4:ce:28:96:0e:fb:43:44:72:23:b0:0a:9f:87:
                    cc:3a:09:87:b5:f5:65:5e:71:b8:6d:9d:38:78:06:
                    7c:84:c2:92:52:d9:01:e8:e6:56:4d:c0:2f:7d:49:
                    10:b1:4b:74:30:a2:b2:92:74:e2:8a:73:61:bc:d8:
                    69:00:0f:3c:7d:9a:6f:f9:fd:5e:47:91:01:e4:fb:
                    0f:74:b4:30:4c:c5:f5:75:3c:2e:68:46:c3:d6:a1:
                    ed:a9:ce:2e:58:d8:49:dd:5e:c1:10:02:d0:14:7f:
                    07:79:db:f9:70:d5:9d:c2:c1:ad:a7:70:7a:cd:cb:
                    ba:d7:70:6d:22:5c:1d:46:75:78:94:d5:72:f8:43:
                    d9:0b:63:06:be:c5:c5:cb:fa:c4:2f:6e:38:26:37:
                    03:00:5f:53:59:7d:28:00:7c:cd:c5:cf:e1:6d:7c:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:57:36:4E:E0:D0:35:CD:7B:AA:0D:47:17:D3:54:40:16:15:56:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e221fc06-7868-3e5a-91f5-487f229f96a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:07:d3:e3:df:ae:11:7a:00:69:13:5a:15:fa:b1:fe:11:
         ff:a9:d8:b9:4d:b2:d8:6b:5a:93:5a:f6:8f:07:82:19:76:b0:
         c4:07:b4:0f:2c:40:7a:66:0e:b7:30:39:4d:bc:68:36:dd:a3:
         76:e4:0d:e4:1e:87:17:4c:dd:17:7c:0f:3c:e8:39:d5:25:5b:
         74:b0:27:86:65:e4:80:91:5c:21:27:4f:13:5a:da:86:fd:4c:
         e5:f1:a6:f4:cb:f3:28:fe:b7:84:1d:4f:2e:23:aa:73:d3:6d:
         f3:61:eb:e7:fa:00:9f:be:05:ce:13:53:94:98:c4:b7:20:9d:
         33:a6:02:0c:10:fa:8c:86:95:47:81:df:32:5f:d8:b7:a5:f2:
         51:be:b4:df:9b:4b:5f:a4:77:f7:c2:05:0b:60:9e:4d:c7:68:
         78:a0:df:83:2d:95:16:7d:8d:10:b1:3c:43:59:7e:a2:94:67:
         48:d9:2a:94:d7:86:ba:7e:c6:02:51:19:1a:bc:6f:e7:0e:f2:
         c4:dc:3d:b6:e6:99:ca:1d:4a:0c:c1:39:00:82:c1:5a:d3:3d:
         0a:75:fe:91:fd:27:2a:5d:87:b5:19:e0:b2:ae:a7:10:0a:07:
         59:e9:11:e9:e5:59:e2:5f:32:62:2e:f0:88:e8:ae:12:97:0f:
         88:c3:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:12 2024 by rpki-client on console-fra.rpki-client.org