Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/334ac687-2927-3602-9f99-a78d0efb10e3.roa
File:                     334ac687-2927-3602-9f99-a78d0efb10e3.roa (raw, json)
Hash identifier:          QxtkXHAFbRsvLkE9C62XJsdJA+JZw6iHwjHjea7VGn8=
Subject key identifier:   80:34:77:38:2C:2C:C6:A5:AD:C9:85:7A:D4:38:A4:E1:57:09:67:ED
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A805A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/334ac687-2927-3602-9f99-a78d0efb10e3.roa
Signing time:             Thu 02 Aug 2018 21:45:41 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.27.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:80:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=71ca6997-583f-4016-90c9-e8a233795b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:59:8d:94:39:2a:33:ca:a4:13:ad:a3:94:
                    a3:b5:9d:4e:19:1c:75:11:a0:d5:d8:ee:59:e8:35:
                    ea:9e:7d:c3:5b:65:d9:e9:65:70:c4:5b:66:3e:69:
                    e0:29:29:61:15:5a:db:2e:9c:b2:42:2d:33:71:e4:
                    e2:be:4e:bd:a8:e6:c8:b9:e9:b2:45:0a:95:52:bc:
                    81:c9:24:a7:c1:f8:27:b7:38:e9:ad:0b:90:b8:ea:
                    da:62:2f:9f:94:aa:2c:1b:1e:28:3d:30:8c:c4:4f:
                    73:2e:19:6a:72:ba:4e:9b:1c:98:5c:e8:be:28:15:
                    f4:7e:8c:1b:a4:0f:76:54:35:d9:0d:20:c2:aa:1f:
                    fe:36:3a:14:5f:9e:72:33:34:7a:2f:c2:df:32:ad:
                    6f:09:13:6e:ee:3e:de:36:2e:0a:ac:83:eb:15:d2:
                    cc:90:64:f7:a6:42:9b:0b:e2:46:96:71:28:48:1e:
                    ae:d4:62:75:cd:88:f9:74:d2:12:df:05:c7:02:fa:
                    e9:25:30:88:48:2c:28:6e:5d:c4:90:45:6d:33:28:
                    7a:a3:60:3b:c1:16:93:a1:98:8f:99:b8:97:c4:de:
                    9a:c1:fb:d2:3c:3b:56:7f:c5:52:9f:8a:36:86:74:
                    3a:09:58:c4:88:08:37:33:f4:24:89:12:c6:30:32:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:77:38:2C:2C:C6:A5:AD:C9:85:7A:D4:38:A4:E1:57:09:67:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/334ac687-2927-3602-9f99-a78d0efb10e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:ef:9b:9b:74:42:e4:3e:5f:9e:c9:8d:5b:e9:08:fe:64:
         b0:28:9d:79:21:26:f9:3b:74:49:95:23:4f:7b:73:be:98:e1:
         4c:59:7b:4a:7d:4a:66:88:1e:12:f5:d1:58:eb:bd:1a:db:83:
         f1:13:ce:a4:57:f8:69:3e:ca:59:0e:68:ae:11:ad:c0:4e:87:
         53:55:bc:6c:5f:92:b3:f9:3b:18:10:d1:d7:16:5e:ba:17:40:
         9e:50:7a:d7:1d:62:cf:79:f1:a3:88:38:21:0b:5c:c0:18:d1:
         15:3a:06:ef:81:f2:ea:e7:3c:92:0b:64:30:94:8a:b6:7d:2a:
         44:cb:6e:2e:81:f7:e8:c8:8d:71:87:29:6e:f9:d2:45:2d:94:
         aa:22:96:cc:92:92:04:c8:d8:01:d0:43:89:57:92:1b:51:48:
         df:b8:97:c5:5a:ba:f0:c1:d8:25:e1:ca:a2:87:04:b5:34:3d:
         32:78:f3:dd:82:09:87:27:67:20:21:2a:3e:ba:54:db:17:0c:
         88:4b:77:6b:a7:9e:02:4d:6c:69:43:65:a0:a2:59:8f:92:16:
         ca:d7:3b:3e:13:ac:b6:6a:e9:17:3e:66:fb:08:81:97:cd:9d:
         82:04:c2:55:e9:26:dc:ef:c9:91:d1:17:52:41:d2:be:0f:bc:
         82:ef:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:53 2024 by rpki-client on console-ams.rpki-client.org