Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20e940d3-b09a-35c5-a6a8-2482d07dad97.roa
File:                     20e940d3-b09a-35c5-a6a8-2482d07dad97.roa (raw, json)
Hash identifier:          QblgGh2UAQK9fNrx+4YIsDnwuCM7poEMd9fgZV1+se8=
Subject key identifier:   4D:5C:F7:0F:5E:BD:45:5D:2D:09:4C:B0:19:01:A2:83:95:41:AA:C3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762287ED9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20e940d3-b09a-35c5-a6a8-2482d07dad97.roa
Signing time:             Fri 30 Nov 2018 01:08:00 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.16.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:7e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=35729172-156d-451f-b67c-aa3039d1f3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:d6:20:04:ee:78:b9:73:09:02:9a:fd:73:
                    33:28:70:1e:2c:09:b9:51:db:c1:c6:b0:ef:ec:a2:
                    1e:b5:f4:04:b4:f4:73:49:ea:c5:1f:7b:c7:8c:7d:
                    ff:e8:fb:c2:e6:3d:75:05:b2:01:1b:95:64:4e:4d:
                    24:64:1e:a5:6e:a5:6d:5f:8b:59:8d:9f:22:9c:5b:
                    16:1f:d0:96:79:53:c2:ac:8b:74:2f:55:3a:35:df:
                    ab:7d:fe:db:43:84:b6:05:c3:54:5b:59:f4:ce:a6:
                    33:e4:51:6c:5a:48:93:69:a8:c7:35:83:93:58:fd:
                    eb:cc:2b:28:9a:fa:83:85:fd:de:3d:ea:40:93:11:
                    01:58:7d:0c:4b:23:22:13:1c:a7:cc:a9:71:66:c5:
                    9c:c7:c9:1a:65:76:c1:0f:7d:38:1a:5a:99:9e:e8:
                    68:a3:2b:23:c2:ee:f8:b2:01:e7:96:05:78:cb:f0:
                    c1:26:f0:f5:04:f8:c9:21:ca:fb:c4:0a:dc:d1:5f:
                    bd:3b:41:7e:a8:2d:01:2b:f0:86:64:a5:a5:2b:1a:
                    88:e7:84:54:d1:2e:ad:a2:4f:83:8e:b5:f1:f0:db:
                    af:c6:61:72:13:10:a0:95:67:bf:64:64:75:93:eb:
                    51:22:9f:72:e2:86:28:4d:a8:ec:84:bd:57:89:a0:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5C:F7:0F:5E:BD:45:5D:2D:09:4C:B0:19:01:A2:83:95:41:AA:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20e940d3-b09a-35c5-a6a8-2482d07dad97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e7:c3:99:34:2a:fb:89:b2:51:5c:5a:2c:8f:f7:0f:aa:96:
         2a:e2:a2:e7:8e:90:9c:2e:42:04:af:b6:fa:cb:b8:fa:30:38:
         cd:5f:e6:ef:74:a1:e3:f9:8d:b7:d8:d5:f7:0b:58:93:78:93:
         62:7e:56:0a:3b:5f:98:f6:37:d5:0b:bb:31:38:d7:c6:e1:43:
         a0:df:26:24:aa:c6:cd:d5:05:f0:25:61:50:75:55:99:21:a6:
         2d:48:fb:f1:be:b4:4e:67:c7:f5:48:45:50:26:31:c6:4d:3d:
         f1:30:32:27:56:4a:44:eb:a1:5a:5c:4c:ce:26:82:8a:ab:1e:
         97:01:73:1f:49:6c:45:c2:3c:43:a4:f3:97:33:64:41:e3:26:
         a7:c9:fa:f6:79:4e:39:60:5d:25:dc:0e:0a:ba:45:9d:32:21:
         79:48:c5:de:bb:17:11:1d:86:57:e6:dc:a1:63:e5:49:d9:8f:
         e9:d8:33:59:38:04:ec:99:75:c7:70:be:07:69:7a:f8:a0:f6:
         f7:f0:12:36:5e:90:5e:13:96:bd:14:d4:c4:c6:e4:97:cf:39:
         c0:48:74:92:cb:a5:49:5e:f3:7b:56:67:0c:21:86:f4:6a:3d:
         28:f9:75:7a:53:04:d2:31:87:96:c1:16:16:0c:91:f2:95:13:
         0c:72:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:55 2024 by rpki-client on console-fra.rpki-client.org