Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/fde9efb8-2aee-39af-ae37-e5472e3c4c09.roa
File:                     fde9efb8-2aee-39af-ae37-e5472e3c4c09.roa (raw, json)
Hash identifier:          2oF2qutT/VuAg2tlUSx6mqveEn1rz64RKGQA1V1D+YA=
Subject key identifier:   A4:08:EE:3B:E3:7C:86:EE:60:5A:5B:5F:BC:91:8E:7A:CF:32:80:1A
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E35DEB800
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/fde9efb8-2aee-39af-ae37-e5472e3c4c09.roa
Signing time:             Mon 04 Nov 2019 10:03:38 +0000
ROA not before:           Mon 04 Nov 2019 05:00:00 +0000
ROA not after:            Mon 04 Nov 2024 05:00:00 +0000
asID:                     16276
IP address blocks:        167.114.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:35:de:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Nov  4 05:00:00 2019 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=b3448442-cd5b-426b-810e-adfcfc024f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:4d:d3:9a:37:6b:ee:9f:68:26:a0:19:cb:
                    e2:45:ed:01:ad:4d:fa:cc:ba:12:f5:d4:ab:55:00:
                    7f:08:b8:e5:09:3e:aa:e5:c2:97:bd:ef:9d:db:b8:
                    03:85:8d:fd:16:0b:f9:96:bd:8f:3c:60:f0:c2:c4:
                    40:c8:29:29:44:87:b9:e0:4a:e8:e4:3a:fd:69:59:
                    5d:6e:5e:0a:c8:4b:2b:bb:f0:be:2a:51:70:62:db:
                    9c:1a:33:f1:fa:39:72:e2:d5:2f:b8:bd:3d:0b:e5:
                    82:ec:cb:82:0d:c9:6c:bb:7b:51:0b:14:cd:97:b3:
                    bf:b7:7c:a5:c5:58:04:1d:84:dd:5e:b2:d8:58:20:
                    78:16:57:72:03:72:f2:8e:01:7b:1a:6d:64:26:4f:
                    55:94:82:74:fd:9f:e4:f8:1a:ca:8c:d1:12:da:60:
                    99:e9:44:49:f5:ce:a3:60:eb:e0:df:73:c8:ff:29:
                    b7:36:37:fc:82:c5:76:3f:a3:c6:5b:f4:66:4e:86:
                    2d:5f:ab:85:02:d2:3b:6e:04:86:52:ec:e6:20:f5:
                    94:fc:41:77:6e:5c:46:be:9b:b6:89:a3:82:93:a7:
                    ac:16:4a:11:d7:85:ca:70:74:2e:67:35:2d:71:66:
                    57:43:fb:e7:0b:0e:10:e3:82:1c:39:6c:47:62:b0:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:EE:3B:E3:7C:86:EE:60:5A:5B:5F:BC:91:8E:7A:CF:32:80:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/fde9efb8-2aee-39af-ae37-e5472e3c4c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.114.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6f:a8:9b:d0:80:35:7f:30:b0:87:d1:cf:e9:12:ff:e9:9e:
         0c:f2:a0:05:ba:0d:79:5a:2a:2a:32:85:0c:b8:38:d7:72:f0:
         c6:fe:3d:2b:df:4d:73:9c:00:f4:8d:4a:a1:c2:1a:4c:58:9b:
         18:9a:3b:20:3e:5d:75:07:f4:16:74:aa:6d:a7:62:32:54:be:
         26:e9:5d:f7:2b:0b:d0:2f:98:eb:53:59:26:7a:76:e2:fc:f4:
         2d:e0:0b:94:96:48:34:1b:2a:38:bb:76:a0:90:7d:2d:99:e1:
         04:8d:80:f7:18:22:83:b2:6a:5e:c7:bb:b3:71:29:9f:d7:42:
         59:d6:f1:ea:aa:32:7c:4e:e8:a9:46:0d:31:1d:52:3d:67:77:
         42:47:07:52:7f:4e:2e:5f:21:ad:ca:78:f9:6f:89:86:a9:2d:
         bb:52:be:5f:1d:d9:8e:95:31:c6:20:dd:3e:16:c2:3f:60:fa:
         15:f0:42:98:6a:5a:a4:17:21:92:b8:ae:e8:8f:cd:1e:92:bb:
         3b:a5:79:c5:3b:b2:00:e6:73:63:41:49:d6:d3:db:03:d0:f7:
         34:05:82:67:cd:a7:38:21:31:9f:cf:49:d9:ef:0c:6b:8f:19:
         8a:fc:f2:27:d2:ca:12:91:3e:6a:f8:e3:01:e9:5d:36:bf:98:
         4d:c1:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:24:10 2024 by rpki-client on console-fra.rpki-client.org