Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb96a5e8-75e5-3365-a876-734bc822ee2a.roa
File:                     fb96a5e8-75e5-3365-a876-734bc822ee2a.roa (raw, json)
Hash identifier:          6i65CUiZEhGNBQqk8frKC/gIoZa6w9NW+cKuf9kRmyw=
Subject key identifier:   19:E6:D0:DB:23:59:E1:51:66:6D:A1:1D:5D:86:C6:50:53:BE:FB:D2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229EEB9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb96a5e8-75e5-3365-a876-734bc822ee2a.roa
Signing time:             Fri 30 Nov 2018 01:09:34 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:ee:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=e5aff9b5-c2a5-4f11-bbc8-e07c748d31d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:ed:ba:50:9f:e7:0a:48:53:2d:3d:5d:49:
                    51:e9:09:51:86:f1:a5:bb:03:f8:6a:4e:95:92:03:
                    ec:9c:33:52:1e:85:7d:41:2a:bc:72:6b:29:ed:83:
                    65:b8:c7:d1:e3:ae:e1:3a:a6:73:99:2b:0d:29:42:
                    27:aa:86:bd:1f:c1:72:87:c5:6c:1a:82:34:56:57:
                    d6:31:3d:6e:40:31:90:37:54:aa:19:a2:9b:b7:83:
                    7c:55:d4:82:6d:5f:ef:bc:7b:1a:88:c9:39:af:82:
                    6c:d9:28:c6:3b:19:d3:26:e7:b9:4b:40:8b:00:e0:
                    f0:ef:20:fb:8b:f9:b9:b9:bf:bf:41:c7:e4:30:c0:
                    af:f3:35:35:4c:90:a1:cc:02:1e:33:a8:7a:32:33:
                    27:d6:46:4b:d5:5a:0d:8b:1a:b0:62:83:af:20:1f:
                    a3:ae:b1:a3:62:b6:33:04:03:ac:32:34:49:83:87:
                    b5:d3:4e:a3:0d:4b:b9:9f:f3:9d:66:43:e8:3c:82:
                    f8:4b:5e:f6:9b:f5:26:e1:45:b3:dc:83:38:f4:2f:
                    dc:86:8e:36:8e:62:72:50:a1:be:da:92:36:0b:79:
                    30:01:92:31:cd:66:75:36:97:b2:4f:40:fe:38:fc:
                    d5:44:42:a0:57:ac:ac:bd:7f:ce:9f:26:99:62:7d:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E6:D0:DB:23:59:E1:51:66:6D:A1:1D:5D:86:C6:50:53:BE:FB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb96a5e8-75e5-3365-a876-734bc822ee2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:63:6a:8d:c3:f4:7a:46:0f:02:5d:c2:6f:24:7c:4c:a9:31:
         95:ab:ea:6a:1c:58:71:6d:2c:b2:7b:4d:de:fd:dc:5c:bf:e8:
         5b:c5:ab:75:e6:fa:44:ea:4b:b1:4a:f7:dd:d0:93:ca:21:88:
         8c:61:43:0e:9f:42:4f:24:f2:a5:fe:41:bc:14:35:6f:2f:d4:
         07:d7:32:28:01:71:d8:15:3c:11:05:26:79:95:08:23:45:4b:
         c1:17:f0:dd:19:29:1a:71:11:b2:10:4f:16:76:29:b1:37:88:
         ac:6d:c9:53:c6:6a:64:12:46:73:dd:2b:02:09:e6:0a:60:d3:
         e2:f1:fd:2a:39:2f:65:d6:0a:ee:26:a3:27:43:38:0a:27:dd:
         b4:30:e6:32:2f:e4:ff:da:94:e7:49:2d:74:58:92:ad:b1:15:
         e3:c5:0a:d5:e9:b6:41:65:8f:43:47:8e:3c:d7:66:7e:23:e7:
         f9:8a:2c:b3:d5:ee:0f:31:2a:cc:66:60:11:18:bc:44:c8:fb:
         b4:8e:86:73:8a:d5:bc:1b:f3:31:61:f5:e8:ed:c4:9b:a0:0b:
         b7:ac:95:10:42:e8:8b:3a:4a:9c:c5:07:b9:82:81:56:54:0a:
         16:35:71:1c:16:21:94:23:00:f1:fe:a3:c0:cd:3f:e5:fd:e6:
         57:2b:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:16 2024 by rpki-client on console-ams.rpki-client.org