Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08acde7a-056a-3723-8ce3-febef0e95875.roa
File:                     08acde7a-056a-3723-8ce3-febef0e95875.roa (raw, json)
Hash identifier:          N8Yxivm2dM4cn1eFaimv0xInReo4fZTaVKQSSiOBZJE=
Subject key identifier:   96:85:AC:E8:4C:CB:65:E2:D5:57:AD:CA:D4:01:40:3E:06:40:9E:39
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164F6CB733D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08acde7a-056a-3723-8ce3-febef0e95875.roa
Signing time:             Wed 01 Aug 2018 18:41:25 +0000
ROA not before:           Wed 01 Aug 2018 04:00:00 +0000
ROA not after:            Fri 30 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.31.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:f6:cb:73:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  1 04:00:00 2018 GMT
            Not After : Jul 30 04:00:00 2027 GMT
        Subject: CN=deaf6a95-c14b-4f69-9fa1-2c3774221a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:66:b2:e3:d0:b9:96:57:ce:5c:7b:70:82:
                    84:52:d2:ec:ff:3a:1d:44:f5:7c:9e:a9:05:75:02:
                    66:75:de:bb:1c:25:9a:d8:f2:59:ad:95:f1:77:c9:
                    fc:5b:4e:34:c1:a8:c5:06:e1:71:94:5f:ca:d8:a3:
                    27:ca:e9:bc:93:7e:c1:0d:5d:17:1c:c9:76:09:9c:
                    db:53:82:d2:1c:cd:b6:f8:0c:d3:17:9f:ab:d9:d1:
                    4e:b5:d3:a4:5d:35:46:2e:db:d2:3f:56:64:9a:f1:
                    26:c4:16:6a:66:34:4f:2d:45:8f:d3:55:4c:be:b8:
                    2f:75:30:66:58:94:80:c2:78:4e:91:d1:fc:a9:91:
                    77:ad:ac:82:34:bf:6b:a4:8f:0e:3b:75:b0:4b:a2:
                    50:2b:ad:03:b3:1a:f5:a1:f7:d5:80:8c:33:ca:2c:
                    e0:f0:56:3f:51:cb:48:b7:38:5a:1e:5c:e8:21:c2:
                    b0:8b:8a:c9:50:57:63:38:e6:0b:29:e0:44:57:88:
                    46:04:2a:42:d3:de:0f:c8:90:34:b4:03:b2:36:a9:
                    b5:a0:f5:2d:55:a9:19:0c:f4:30:8a:f7:46:0c:ab:
                    97:5a:05:9b:db:0e:fa:e3:2c:9c:4d:b6:46:ec:97:
                    9c:65:91:49:e0:34:6c:f5:c2:cf:08:62:96:a2:53:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:85:AC:E8:4C:CB:65:E2:D5:57:AD:CA:D4:01:40:3E:06:40:9E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08acde7a-056a-3723-8ce3-febef0e95875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:29:06:f7:f9:a9:bb:e1:06:b4:1f:1a:36:6d:18:bf:49:1d:
         56:58:10:f4:08:c7:32:d7:9a:7e:c7:33:1f:a1:cc:0f:01:2f:
         2d:21:20:bd:8c:c3:cd:ef:85:86:3a:18:46:3d:18:95:b3:46:
         df:cd:ba:e5:a6:fe:59:03:dd:c3:7b:1c:a5:0e:57:e7:40:6d:
         25:20:2e:0b:88:c9:90:f5:07:41:40:3b:4c:ae:96:57:1a:3d:
         f9:f1:b0:35:33:14:79:55:80:1d:21:ff:be:10:0d:a9:f5:89:
         89:24:00:11:ba:b8:4f:9b:f1:b3:28:7e:69:2d:66:ec:dd:15:
         69:28:79:12:0b:1c:fd:be:26:20:1a:7e:21:f3:f6:10:ba:a1:
         90:b4:06:63:ab:48:d9:b5:0a:69:8b:b6:2e:2f:0c:9f:df:7a:
         db:6a:4c:d0:00:d4:c0:ca:81:5f:a5:4a:87:2a:ed:d5:25:c2:
         cd:97:55:af:6f:7c:88:06:a5:84:b5:a3:dd:93:5a:9f:15:00:
         93:31:b7:a6:8f:f2:38:94:6d:66:fe:b3:7e:b3:3f:49:80:c1:
         d5:04:42:23:3a:6a:4a:1e:9d:69:e6:ba:74:84:d1:93:3a:bb:
         07:4c:04:d4:bd:3b:30:d9:a5:f0:ba:35:9c:4b:5c:ef:80:96:
         33:23:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:52 2024 by rpki-client on console-fra.rpki-client.org