Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f621bb0-2f09-3b33-b7d8-8002e9b225f2.roa
File:                     2f621bb0-2f09-3b33-b7d8-8002e9b225f2.roa (raw, json)
Hash identifier:          GHXXzZzieeWPsOadILGjY0vI7zHThWcHgwauGdsKZtE=
Subject key identifier:   62:76:26:28:9A:AB:D7:D5:2C:B6:5B:A9:16:AC:B6:A4:D9:63:A9:4F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762288524
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f621bb0-2f09-3b33-b7d8-8002e9b225f2.roa
Signing time:             Fri 30 Nov 2018 01:08:01 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.16.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:85:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=d206e09f-af59-47f0-823c-6e9c5a62614e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:01:e0:be:58:8c:8a:0e:4c:e8:f2:55:a8:ff:
                    0a:af:b8:03:40:3b:4e:70:13:06:15:73:77:a1:d0:
                    45:9a:72:3d:b4:89:ba:62:48:6d:3d:fe:d8:48:8f:
                    a3:cb:8a:14:d1:5f:29:cc:e0:78:d0:df:29:b0:e0:
                    d4:ab:16:ce:83:55:b0:94:15:69:68:ca:b4:85:f4:
                    0b:dc:da:b4:c8:0a:7c:85:91:cd:e7:3e:27:6a:10:
                    c5:3a:13:c8:a4:a9:60:df:c9:bc:00:1b:77:e2:45:
                    88:a9:82:f1:ef:fc:71:6b:97:a7:d6:90:c1:96:b4:
                    88:fa:d2:37:91:4d:bc:10:30:c8:31:12:5c:a7:b3:
                    6b:ee:7d:f6:77:52:b9:3a:2c:ed:09:6c:81:35:ff:
                    0e:43:2c:79:76:73:fd:c5:db:42:da:34:f0:bc:e8:
                    79:ef:43:52:52:ac:12:90:1e:16:05:c5:12:a1:8d:
                    45:fd:e3:bd:8e:71:61:f8:52:10:0e:bd:dd:1b:0e:
                    c2:55:81:e2:ed:42:0d:41:cd:7b:71:ea:0d:7c:15:
                    16:70:71:e7:cf:2c:13:b9:c7:72:10:ba:fb:f7:86:
                    9f:b6:60:df:ae:77:45:bc:dd:32:69:80:d7:ff:f4:
                    7a:ad:08:8f:9c:be:ee:f8:02:a1:67:f3:6c:c9:b0:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:26:28:9A:AB:D7:D5:2C:B6:5B:A9:16:AC:B6:A4:D9:63:A9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f621bb0-2f09-3b33-b7d8-8002e9b225f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:31:93:33:88:08:93:59:d9:83:cf:60:ef:70:34:43:ef:5a:
         f7:92:c2:fc:66:f6:ac:38:85:8a:42:5c:2a:66:34:12:f6:08:
         38:e6:94:6e:27:8e:ed:76:2b:be:1a:31:36:ea:7b:87:36:18:
         20:2b:06:cc:20:ee:de:74:61:15:2c:a3:ea:80:96:06:a9:b5:
         b4:ff:30:7e:05:d0:90:bb:2d:29:50:c9:14:29:46:59:80:4d:
         36:ec:7e:fb:74:00:d7:ac:6f:c0:33:6e:d8:51:09:93:d0:2a:
         89:d2:f1:f3:12:84:fd:7c:27:52:e0:13:6e:0d:2a:06:9f:ab:
         80:a4:87:d1:c8:78:5c:68:af:f2:de:90:ca:e2:89:b2:5f:54:
         39:5d:40:c8:68:aa:67:45:b5:43:0e:e0:25:ca:86:2a:00:aa:
         c2:13:fe:3c:30:19:0f:66:8f:54:bc:5a:1d:bb:59:bd:50:7c:
         ce:cd:75:7c:c7:a3:5f:9d:30:68:6f:9d:41:e7:32:58:99:f2:
         75:e3:c0:96:a8:ec:3c:49:f9:4c:a7:fc:b8:45:d5:d1:3d:d6:
         91:8a:4e:c7:5c:5e:a8:d9:64:73:57:1c:4e:6f:26:f8:d4:8a:
         84:4e:de:de:33:75:39:dc:3e:a9:72:6b:0b:34:60:59:69:d7:
         09:56:27:49
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IohSQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGQy
MDZlMDlmLWFmNTktNDdmMC04MjNjLTZlOWM1YTYyNjE0ZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOAB4L5YjIoOTOjyVaj/Cq+4A0A7TnATBhVzd6HQ
RZpyPbSJumJIbT3+2EiPo8uKFNFfKczgeNDfKbDg1KsWzoNVsJQVaWjKtIX0C9za
tMgKfIWRzec+J2oQxToTyKSpYN/JvAAbd+JFiKmC8e/8cWuXp9aQwZa0iPrSN5FN
vBAwyDESXKeza+599ndSuTos7QlsgTX/DkMseXZz/cXbQto08Lzoee9DUlKsEpAe
FgXFEqGNRf3jvY5xYfhSEA693RsOwlWB4u1CDUHNe3HqDXwVFnBx588sE7nHchC6
+/eGn7Zg3653RbzdMmmA1//0eq0Ij5y+7vgCoWfzbMmw7JcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRidiYomqvX1Sy2W6kWrLak2WOpTzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzJmNjIxYmIwLTJmMDktM2Iz
My1iN2Q4LTgwMDJlOWIyMjVmMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgQQDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAVjGTM4gIk1nZg89g73A0Q+9a95LC/Gb2rDiFikJcKmY0EvYIOOaUbieO7XYr
vhoxNup7hzYYICsGzCDu3nRhFSyj6oCWBqm1tP8wfgXQkLstKVDJFClGWYBNNux+
+3QA16xvwDNu2FEJk9AqidLx8xKE/XwnUuATbg0qBp+rgKSH0ch4XGiv8t6QyuKJ
sl9UOV1AyGiqZ0W1Qw7gJcqGKgCqwhP+PDAZD2aPVLxaHbtZvVB8zs11fMejX50w
aG+dQecyWJnydePAlqjsPEn5TKf8uEXV0T3WkYpOx1xeqNlkc1ccTm8m+NSKhE7e
3jN1Odw+qXJrCzRgWWnXCVYnSQ==
-----END CERTIFICATE-----
Generated at Sun May 12 03:26:00 2024 by rpki-client on console-fra.rpki-client.org