Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05880a23-15bf-30ae-8aab-30f93dd58ba4.roa
File:                     05880a23-15bf-30ae-8aab-30f93dd58ba4.roa (raw, json)
Hash identifier:          FUkhmLhQe+/+BJKr4cyJrXCOUJgGMM1eHNGYp0gnK9M=
Subject key identifier:   67:BC:7E:99:27:E3:4D:89:39:7F:A4:64:5E:B8:8A:9A:55:42:27:83
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164F6CB97F7
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05880a23-15bf-30ae-8aab-30f93dd58ba4.roa
Signing time:             Wed 01 Aug 2018 18:41:35 +0000
ROA not before:           Wed 01 Aug 2018 04:00:00 +0000
ROA not after:            Fri 30 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.31.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:f6:cb:97:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  1 04:00:00 2018 GMT
            Not After : Jul 30 04:00:00 2027 GMT
        Subject: CN=5ca4ccac-c81f-4a71-8ad2-b2dc5b64cbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:76:f1:1c:21:02:06:48:b4:e7:b7:eb:2c:
                    22:68:3f:11:fb:47:69:3f:05:84:38:06:65:2b:9d:
                    e5:5f:92:5b:82:48:ba:db:c0:48:24:d7:58:4d:ae:
                    c5:41:05:03:db:4f:f3:b1:87:74:14:38:2b:77:37:
                    fc:51:cf:e9:4d:18:64:d9:3c:2b:e1:a4:47:aa:f9:
                    33:5c:99:7b:fa:3e:37:d2:76:40:b0:b3:71:03:9e:
                    82:a5:62:d9:f7:37:6b:33:3a:7b:2a:1f:76:93:69:
                    8d:a3:11:d5:6d:8f:91:fc:d4:d5:c5:41:c7:fa:e9:
                    f9:ff:d2:44:42:c0:a3:c7:2c:02:c5:1c:3c:3b:2d:
                    c5:cd:c2:fb:72:b3:58:48:ff:27:5c:30:09:7d:c0:
                    77:5c:cc:3d:fc:cf:76:61:b8:c9:2e:f1:13:50:6a:
                    ff:5d:e6:a4:61:94:dc:45:fa:7d:36:c2:57:f5:1c:
                    fd:76:86:e8:d6:cd:24:21:66:73:cc:c7:59:9e:57:
                    9b:8b:31:aa:9b:fc:39:e9:e0:d5:dd:6e:db:2c:47:
                    78:4b:3f:10:28:18:6a:ee:f7:bf:e1:45:44:cf:c4:
                    58:53:ed:56:6e:82:bf:95:7e:b9:3a:37:c8:50:43:
                    75:f5:1f:32:6d:76:fe:90:6e:04:40:29:de:ed:c0:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:7E:99:27:E3:4D:89:39:7F:A4:64:5E:B8:8A:9A:55:42:27:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05880a23-15bf-30ae-8aab-30f93dd58ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6c:2d:c4:77:f2:01:a6:21:e0:94:a4:39:54:cb:48:39:df:
         25:99:d4:dd:3d:78:6f:ed:e4:32:4c:a4:32:f8:38:e3:fd:9c:
         f6:ee:2a:9f:a3:be:85:1a:f4:93:11:d7:4d:75:94:2e:03:36:
         68:5c:cf:3b:89:ef:8c:4c:dc:39:1d:02:8a:98:1a:42:ba:7c:
         42:0b:bd:69:a4:a9:2a:41:42:3c:b8:83:f3:6d:68:f6:b6:02:
         17:80:a3:e4:39:d7:8d:0d:e2:21:40:73:5d:77:39:17:9f:ce:
         6c:96:5f:4c:3f:ec:25:1d:37:f6:74:4e:bb:24:a8:45:64:16:
         95:07:53:05:f8:0e:c9:f8:09:f9:d9:38:67:11:fe:1c:60:73:
         11:07:7e:70:c6:ef:39:42:49:a8:bc:85:e4:f8:31:56:e2:89:
         38:35:bd:dd:88:e6:3a:d2:29:95:f9:f2:b3:81:fa:ff:10:f8:
         b6:30:ae:d9:ed:05:28:1f:c3:57:e5:1c:8b:f4:82:df:21:16:
         ed:2c:35:83:03:7a:aa:c3:96:2a:eb:d8:e4:19:74:aa:cf:3d:
         6c:32:92:7d:63:9c:97:26:3c:7c:79:70:15:73:6c:4a:c5:0e:
         18:5d:f0:bb:ed:54:8e:84:e6:0c:79:cd:fb:f0:ce:e6:34:95:
         9c:64:e5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:58 2024 by rpki-client on console-ams.rpki-client.org