Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d41152f-e85a-3936-afe4-1766a95438fa.roa
File:                     2d41152f-e85a-3936-afe4-1766a95438fa.roa (raw, json)
Hash identifier:          g/DuYVdqLuM9fWWAWVa1L6MkxrIq3NVwlTB5oR4uG6A=
Subject key identifier:   67:63:9E:C6:A7:36:73:5B:DF:EE:74:66:9B:3A:26:9F:27:B2:6D:4F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164F6CB40E8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d41152f-e85a-3936-afe4-1766a95438fa.roa
Signing time:             Wed 01 Aug 2018 18:41:12 +0000
ROA not before:           Wed 01 Aug 2018 04:00:00 +0000
ROA not after:            Fri 30 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.24.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:f6:cb:40:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  1 04:00:00 2018 GMT
            Not After : Jul 30 04:00:00 2027 GMT
        Subject: CN=81d59890-9267-4848-825c-4ade4e231ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:c1:15:8a:f5:9c:61:95:fc:0c:33:6b:80:
                    b6:02:cc:9a:da:55:73:1f:62:87:07:81:34:09:83:
                    e8:4a:50:d7:e1:16:7b:a4:47:4b:17:23:02:77:65:
                    f6:da:a0:99:c2:9a:2e:0b:a0:fd:b4:b5:77:23:24:
                    83:2e:4b:df:bb:92:df:b9:4e:1d:e9:de:c4:40:cd:
                    9a:4f:df:87:fc:17:a3:cf:9c:52:de:fa:c3:08:d6:
                    7a:0f:a3:c1:25:49:c8:7a:bd:02:c2:60:3f:6d:d4:
                    c1:91:65:be:22:2b:63:08:64:1e:19:37:84:d5:94:
                    61:d9:13:2b:b2:89:fe:12:7c:95:f7:72:8d:6d:08:
                    df:45:a0:dc:70:e1:9f:7c:93:2d:fb:d9:7c:11:a9:
                    5e:8d:07:dc:e8:36:e2:c5:d3:d9:58:40:e8:41:e2:
                    9a:8f:ec:a7:15:a3:bf:2e:a8:be:53:d4:e1:87:8a:
                    25:26:e4:08:78:f3:4a:16:28:47:cb:51:7d:cc:56:
                    a8:f2:f6:02:27:9d:88:34:22:33:13:ad:9e:5d:4b:
                    ae:a4:2a:80:3f:16:a8:7d:49:dd:a4:47:0e:60:21:
                    78:2f:f1:86:7c:be:67:b3:2f:39:a0:b8:ae:f5:ff:
                    f0:e9:d1:7a:0d:20:f6:24:c4:03:01:13:a3:19:3a:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:9E:C6:A7:36:73:5B:DF:EE:74:66:9B:3A:26:9F:27:B2:6D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d41152f-e85a-3936-afe4-1766a95438fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:f7:21:4b:b0:62:04:54:07:0f:3f:0f:84:53:06:a1:27:
         0e:15:f0:fa:b0:b2:b6:13:ac:c3:96:61:59:1b:c0:3f:24:5c:
         3d:77:3b:ff:55:06:c5:1d:e7:8d:e4:e3:88:4b:de:3e:4f:34:
         e5:c8:64:f2:8d:aa:fe:65:1b:c1:09:58:b6:38:e0:1d:3a:67:
         10:2a:3a:0c:c1:60:df:1b:bd:3a:58:ac:98:98:54:7a:06:90:
         0d:17:b1:4c:f7:f4:5d:1e:6a:27:b0:23:91:d7:a4:03:36:0a:
         b2:73:2a:b2:7c:18:c5:82:b3:8b:5c:3b:e2:45:da:e6:ea:9a:
         87:aa:b4:b0:a2:96:79:a6:76:e6:37:86:22:db:de:b4:13:57:
         27:5b:4c:45:88:d3:4d:db:f1:3c:5f:ca:20:bb:02:23:07:61:
         d4:87:f7:3c:7b:33:e6:d9:52:0e:c5:c4:f4:37:08:9e:54:a5:
         95:68:00:b2:5d:b1:6b:1c:85:9c:86:9a:64:88:50:1b:8d:e3:
         78:12:ed:3d:d0:3d:0c:d2:45:a5:e1:c8:83:03:7a:cf:f0:6c:
         8d:de:d9:d9:e3:81:69:30:37:f3:29:4c:6c:44:d9:b2:f4:1c:
         7f:a8:40:2f:03:80:bd:f5:d5:3c:31:76:d8:4a:cf:57:08:3b:
         f6:70:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:37 2024 by rpki-client on console-fra.rpki-client.org