Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03d34c26-7e5a-3ad0-bfee-fb076cf607aa.roa
File:                     03d34c26-7e5a-3ad0-bfee-fb076cf607aa.roa (raw, json)
Hash identifier:          jmUhDC3Z3+KDj7/qE100UaUoi0mvo7ezHDQvlxDmgvw=
Subject key identifier:   EC:11:A4:65:61:36:E7:73:F2:18:E1:98:4B:DA:6C:EC:1F:1D:82:23
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622863B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03d34c26-7e5a-3ad0-bfee-fb076cf607aa.roa
Signing time:             Fri 30 Nov 2018 01:07:53 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.20.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:63:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=b02fd551-9235-4564-874d-c6714a15c39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fd:2a:7a:8b:cd:65:1d:aa:38:31:fc:7a:41:
                    b3:ec:14:64:90:cc:55:8e:c4:9b:bb:67:c8:fe:5f:
                    71:bd:9a:ba:56:98:fd:0d:82:67:0e:f1:51:65:59:
                    df:b8:16:dd:7f:18:d9:0d:6a:5c:b6:31:ae:40:2c:
                    98:dd:35:2f:ed:01:8c:57:ef:1d:b2:99:c1:ad:98:
                    9e:e4:cc:3b:44:b5:29:45:12:0a:e9:7f:01:7a:2c:
                    72:80:e9:9a:d7:6c:7b:fe:4f:7d:86:fe:4c:40:33:
                    28:0a:74:06:16:b5:2b:35:73:7d:e1:71:c5:03:1b:
                    0e:62:8d:97:c4:c6:08:33:05:cd:11:c2:80:6a:fa:
                    f1:06:78:a7:98:f2:ff:b8:8c:e1:59:9d:b2:f6:4f:
                    29:d1:95:d6:c6:66:31:73:6d:8f:d2:d6:ec:1c:39:
                    2e:14:49:b1:77:32:09:38:79:c3:6d:1d:34:a2:3d:
                    37:ac:8b:1a:a0:45:01:d3:8b:50:9d:19:85:a0:18:
                    1c:52:23:1e:83:dc:61:47:72:f9:6c:12:09:78:51:
                    9b:97:2d:73:0f:22:c9:59:ad:a5:49:4f:65:57:e2:
                    f6:2b:9e:ed:d9:b5:e7:c2:13:4f:a1:53:87:66:54:
                    22:6c:50:c3:80:24:9d:83:42:ef:fa:25:dc:1c:ac:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:A4:65:61:36:E7:73:F2:18:E1:98:4B:DA:6C:EC:1F:1D:82:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03d34c26-7e5a-3ad0-bfee-fb076cf607aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:a8:9c:ac:26:88:c8:8c:9a:8a:b2:bd:01:86:8c:a6:19:
         bd:d6:b4:ad:f0:02:c6:7b:8d:88:59:5e:fc:b7:98:df:1c:8f:
         54:ba:d8:80:72:14:a5:a3:e4:67:78:31:0b:ab:2a:95:df:69:
         51:2b:80:cb:ab:5a:4d:c9:f6:2a:40:da:9d:67:76:4b:a2:97:
         08:a5:a5:59:f8:aa:24:e1:d9:3c:bc:3b:4f:b8:42:74:b2:11:
         0c:67:03:21:51:bf:ba:fc:19:c6:87:af:b0:ce:52:5f:2b:34:
         bc:4c:4d:66:2f:69:dd:7d:5c:87:51:4f:aa:82:7d:dd:c8:4b:
         24:b5:33:8b:44:06:f9:ee:86:8e:9f:06:ab:93:5f:42:00:32:
         6f:e0:62:59:10:4a:74:dd:a2:59:ea:b3:5a:a5:82:3c:5f:65:
         c5:0a:36:8e:f7:e8:fc:78:5d:51:10:1e:98:3f:cb:ee:f3:4c:
         0e:9a:c8:09:90:45:c9:57:b2:3f:30:74:63:1f:21:64:4b:e2:
         6b:69:cc:b7:05:e9:50:77:30:3d:3a:32:0f:0e:45:b7:b8:26:
         f1:a3:0a:8d:4c:b5:52:aa:78:4e:7f:75:fb:06:0b:cd:a4:d7:
         f5:cf:82:82:c3:46:66:d0:79:13:6b:1d:9f:51:b9:be:cc:a0:
         fd:7b:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:03 2024 by rpki-client on console-ams.rpki-client.org