Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8104db8-4814-31b3-80e9-4b377472faa1.roa
File:                     e8104db8-4814-31b3-80e9-4b377472faa1.roa (raw, json)
Hash identifier:          6oq4JexPTnmAyyBxAxb5mXxvRjgU6M7Jl6FkqwuDf9o=
Subject key identifier:   B2:40:ED:04:73:92:FE:F9:61:B1:0B:27:EB:FD:83:5C:54:16:0E:B5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622923DF
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8104db8-4814-31b3-80e9-4b377472faa1.roa
Signing time:             Fri 30 Nov 2018 01:08:42 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        108.162.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:23:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=ec93b41c-52c8-4caa-8e14-c7435a7454b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:34:5c:f5:98:38:13:8d:f9:5a:93:92:11:
                    26:e0:39:6f:80:5e:a0:24:a2:47:4c:d1:b8:30:91:
                    1c:fb:5b:6a:ba:84:8c:8c:9a:85:d0:9b:fd:4f:18:
                    e8:cf:fe:05:4a:3b:4e:37:9c:5d:df:d5:23:0e:ab:
                    4b:1d:af:4b:7f:43:65:70:89:56:a4:f1:ae:37:b9:
                    d4:29:73:21:f5:a8:23:25:07:6c:42:3b:66:5a:07:
                    f2:df:09:fd:60:56:ca:5d:ff:15:a4:1e:3f:d2:87:
                    b3:75:dc:8f:74:b3:97:0f:68:af:ad:99:2d:79:60:
                    5b:e9:3e:84:98:6e:c7:b4:2b:83:3e:f2:e2:1c:58:
                    b2:9f:44:3f:bf:9d:d8:e9:b2:2b:59:07:ae:24:f3:
                    79:9a:e2:92:20:36:70:67:bd:94:1f:1c:90:de:1e:
                    1d:92:84:37:30:1d:f6:2a:39:c0:6a:e4:19:e9:3f:
                    10:1b:e8:75:85:12:17:09:36:b8:83:f5:d8:cb:cb:
                    4a:bb:40:ff:21:e1:bb:53:bf:99:bf:bf:41:78:86:
                    12:15:5f:3c:fa:f5:95:08:01:b6:ec:ff:3b:1e:b2:
                    b9:79:4b:3b:1a:26:1b:5d:a4:80:57:41:de:2e:f6:
                    4a:07:a8:d8:e2:40:e0:bd:8e:e3:c5:c7:a6:56:79:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:40:ED:04:73:92:FE:F9:61:B1:0B:27:EB:FD:83:5C:54:16:0E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8104db8-4814-31b3-80e9-4b377472faa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:62:84:b1:92:68:db:63:fe:e7:4c:2a:ff:51:c7:0f:a9:ed:
         4d:20:ff:5f:ab:6d:7a:ef:52:6e:62:3e:9c:64:49:ea:d3:39:
         c8:51:8e:ba:c1:93:38:2b:49:b1:63:3a:a7:f8:3a:3c:58:95:
         28:70:3d:78:97:6c:86:4d:6a:f4:b9:d6:fe:20:60:f9:4c:3f:
         43:47:97:eb:ed:0f:23:a6:87:cf:20:93:41:65:f6:21:9d:39:
         3e:ec:59:c4:0f:3c:54:94:83:b6:7d:9a:4e:ed:0d:59:ce:8c:
         66:c6:95:3a:ed:41:a2:e8:80:19:f6:2e:b7:19:d7:c2:1d:93:
         03:5e:0b:a6:cb:3b:72:1f:d9:9f:a9:40:22:d4:b2:f8:7d:ac:
         ef:ad:96:42:3a:ca:e5:bd:1f:2f:00:a4:cb:d5:59:f9:ce:5f:
         3e:82:de:59:67:c9:20:68:93:f0:7c:5c:f9:2d:78:df:4b:15:
         70:4a:0f:77:47:f7:e0:d0:5c:ad:56:ee:3d:1f:41:54:68:20:
         51:02:a8:be:88:92:21:08:f9:df:7a:c6:7b:ed:85:db:f6:42:
         6e:4d:1e:26:b0:fd:9d:f6:7f:23:1d:22:39:b7:75:c5:2d:2b:
         21:11:93:49:38:b7:53:3c:b5:fe:f6:b7:b1:a3:cc:29:d4:2d:
         c1:1f:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:08 2024 by rpki-client on console-fra.rpki-client.org