Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa84b7fb-dbda-34c2-961e-38b2a9b9f8cf.roa
File:                     fa84b7fb-dbda-34c2-961e-38b2a9b9f8cf.roa (raw, json)
Hash identifier:          gRELxMt7vR0RBFfcSjMX+0cGGo57G4ganYAm51nDWGw=
Subject key identifier:   51:9E:40:BB:06:0F:9A:CF:6B:AD:81:FF:7D:60:A3:81:01:FA:BE:57
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A31F5A377
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa84b7fb-dbda-34c2-961e-38b2a9b9f8cf.roa
Signing time:             Thu 18 Apr 2019 19:39:02 +0000
ROA not before:           Thu 18 Apr 2019 04:00:00 +0000
ROA not after:            Mon 05 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        162.158.248.0/23 maxlen: 23
                          162.158.250.0/23 maxlen: 23
                          172.69.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:31:f5:a3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 18 04:00:00 2019 GMT
            Not After : Jul  5 04:00:00 2027 GMT
        Subject: CN=553c6dcf-c08a-4146-a831-b2ab275ff462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:c4:1e:94:c9:15:3f:be:e4:8e:5a:57:33:
                    06:b5:79:18:78:d8:7e:35:aa:1c:a2:3b:35:88:b8:
                    1f:99:aa:1c:60:b5:1a:e7:35:1a:80:1f:91:bc:fc:
                    ab:fa:14:99:93:62:0b:b0:73:1b:49:89:5d:cc:a3:
                    54:c6:17:45:3a:d3:bf:2b:b9:3a:45:d3:a9:8d:38:
                    e9:03:7c:16:fb:11:6a:4c:cb:6d:ff:3c:f9:bf:9d:
                    37:63:6f:52:6f:0f:31:0e:e4:3a:c6:35:43:ab:54:
                    5d:7c:3c:2f:bf:34:8d:ac:e1:9a:cd:be:84:5b:1c:
                    5f:9b:fc:b3:38:45:ed:21:e2:38:64:6a:22:31:50:
                    3a:16:89:8c:df:20:db:cc:e5:6b:2f:6a:1c:32:b5:
                    60:cd:5d:45:05:71:06:b0:cd:15:14:b9:d5:e1:6d:
                    5a:a4:c3:14:fc:bc:d4:32:9c:4e:fb:3c:1f:b4:18:
                    de:24:10:ce:5f:45:7c:7c:85:57:7c:44:dd:18:bc:
                    c0:d5:5a:8a:7c:e9:09:ea:7c:b2:a6:a6:e1:86:2e:
                    5d:78:a8:56:0a:c2:f0:0c:04:7f:c2:eb:96:61:1c:
                    d0:ad:19:33:a6:b2:fe:5a:b0:8b:5f:12:62:52:08:
                    99:92:22:9d:90:87:84:bf:c3:c0:97:37:e1:18:ea:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:40:BB:06:0F:9A:CF:6B:AD:81:FF:7D:60:A3:81:01:FA:BE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa84b7fb-dbda-34c2-961e-38b2a9b9f8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.248.0/22
                  172.69.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:5d:17:1a:83:1f:5c:29:8d:aa:9a:a9:18:8e:e6:94:44:
         ae:f7:a4:85:99:1a:8a:21:61:cd:6a:29:58:2f:6b:12:4e:7c:
         6e:d1:1f:c5:53:d0:f7:c0:b9:8f:f7:a1:13:9b:a1:e6:52:49:
         05:bf:05:5d:3c:7f:a5:7f:d0:09:37:9f:da:75:22:8f:c4:ff:
         46:88:34:59:88:84:b7:02:26:75:8a:81:eb:50:00:7b:ba:db:
         bb:02:62:82:f4:36:42:2c:f9:b7:ad:41:c1:43:a2:c8:c9:fe:
         90:5c:28:9f:37:d0:5b:0c:f9:38:97:7f:bc:b9:7c:bc:82:74:
         cb:c1:94:fa:ec:56:2b:c8:d6:6c:bd:a7:04:1a:d7:9d:18:7b:
         2e:99:18:1f:ff:0e:b8:e9:26:3c:01:82:a1:cb:03:6b:aa:c8:
         47:cb:95:06:2e:75:d1:6a:01:04:0e:3a:dc:ef:9b:f4:74:ae:
         12:0e:55:4a:ea:7e:e7:46:71:f0:be:af:29:b9:b7:27:1b:ad:
         67:18:76:d6:15:af:21:17:a7:ea:b5:84:49:2a:8f:4f:b9:28:
         01:3a:28:33:21:09:1a:55:9c:39:e6:2e:0d:1f:10:95:93:c4:
         4c:b3:7e:a6:6d:4d:ad:b5:1e:30:1b:d2:a9:3c:35:26:ea:b8:
         48:18:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:13 2024 by rpki-client on console-fra.rpki-client.org