Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd337fe4-cb26-3175-9bf7-dbbdfa4aadb9.roa
File:                     fd337fe4-cb26-3175-9bf7-dbbdfa4aadb9.roa (raw, json)
Hash identifier:          KqHu1aIXpnCLqxSGUzG2hwdjmoqjQ6y8LTY2oR2OO+E=
Subject key identifier:   50:1E:DE:47:05:91:42:C8:49:D0:5B:05:0F:CA:F9:22:19:4D:62:E2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164F6CB8332
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd337fe4-cb26-3175-9bf7-dbbdfa4aadb9.roa
Signing time:             Wed 01 Aug 2018 18:41:29 +0000
ROA not before:           Wed 01 Aug 2018 04:00:00 +0000
ROA not after:            Fri 30 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.64.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:f6:cb:83:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  1 04:00:00 2018 GMT
            Not After : Jul 30 04:00:00 2027 GMT
        Subject: CN=1990b701-ec5f-47ca-a623-abb15bfb789b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:df:3b:36:a6:58:8c:c4:87:c7:ce:3c:bd:
                    db:43:65:d5:18:d7:3f:b5:53:e4:99:64:da:7c:81:
                    c3:f8:7d:f9:93:a9:34:e9:dc:51:72:81:89:e3:f7:
                    49:cf:55:d5:c9:6c:9a:f9:55:99:c0:ea:56:9e:7d:
                    99:f3:8e:12:97:7c:ef:55:04:c4:cc:84:95:0f:8c:
                    83:1a:0a:bb:ef:8b:5e:62:ea:96:c2:a8:17:f7:30:
                    82:b5:50:0b:ab:a0:da:dd:8b:06:af:9c:41:98:c5:
                    a0:a0:06:88:1f:d1:91:12:0d:5e:76:ee:ef:a3:04:
                    09:50:86:64:38:c9:45:8f:f6:08:7d:f9:5d:bd:71:
                    7f:09:2a:f1:11:9c:42:a0:27:62:fb:30:7a:bb:24:
                    f7:f7:f8:bb:56:31:9b:85:1e:0d:a6:9d:55:ad:5d:
                    92:66:b0:9c:db:13:02:31:ec:b5:42:ab:0a:34:65:
                    10:cd:3d:18:b8:2a:e9:da:fc:66:4b:55:95:d8:0f:
                    a8:3c:6e:54:7c:53:74:07:c8:1c:0b:a9:fa:bc:3e:
                    9d:21:23:73:74:0b:5a:30:c6:58:4a:09:74:b2:95:
                    b1:2f:be:f3:67:21:32:c0:4f:e6:21:fd:60:2e:38:
                    ef:90:9e:d0:62:09:24:ea:fe:18:a5:25:43:3d:c4:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1E:DE:47:05:91:42:C8:49:D0:5B:05:0F:CA:F9:22:19:4D:62:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd337fe4-cb26-3175-9bf7-dbbdfa4aadb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:24:92:0a:c3:1d:02:bd:71:bb:36:b8:b4:f5:2d:d3:aa:1a:
         34:07:09:00:e3:e8:03:d3:e1:4b:10:94:67:43:d6:a8:40:60:
         be:4a:95:6b:7c:b7:21:76:6f:62:12:cb:3b:bf:c7:99:24:51:
         8c:c7:0b:ba:89:58:fb:0e:b9:52:b0:4a:2d:c9:48:b6:82:f7:
         ef:e0:57:05:b3:94:0e:80:91:a2:df:66:e4:8e:98:75:0d:a1:
         9a:08:31:a1:44:4a:23:67:a9:b3:60:62:cc:9e:e2:bc:61:3d:
         cf:75:85:fc:0e:69:03:ff:b7:ad:73:d5:2f:b9:83:0e:00:26:
         c6:72:6d:bd:e6:14:c3:3f:e2:da:05:44:3c:86:7c:94:7e:98:
         dc:f1:35:2a:e2:17:cf:00:dd:12:b1:3a:14:59:3c:b6:86:c0:
         c2:5a:f9:fa:dc:c9:d2:39:08:56:4d:ff:d2:61:be:a1:59:dd:
         fc:da:62:5f:08:e6:d6:2f:52:1f:fa:23:52:69:ba:6f:0e:8b:
         72:9d:5f:19:0f:17:e1:37:5a:16:1a:94:bf:79:87:dd:d7:3d:
         1c:c3:9c:52:92:0f:71:c8:86:69:37:eb:96:10:85:38:74:b3:
         f5:09:3b:5b:58:6a:df:6a:e5:43:00:28:7c:f0:df:54:03:a3:
         99:9b:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:17 2024 by rpki-client on console-ams.rpki-client.org