Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34548b4b-f4f1-3994-86e0-f1f205b75b02.roa
File:                     34548b4b-f4f1-3994-86e0-f1f205b75b02.roa (raw, json)
Hash identifier:          r+pGyOuNpLu6Yr5KIM6VCPKd+XFXLfAT1OW5XvPMpEA=
Subject key identifier:   E5:EB:73:43:B6:61:E0:05:68:47:0E:8A:A7:E5:4A:BD:D8:48:CB:68
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A5D24
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34548b4b-f4f1-3994-86e0-f1f205b75b02.roa
Signing time:             Thu 02 Aug 2018 21:45:32 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.25.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:5d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=d3f29373-3195-4053-95e2-a5acbbc221b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:5c:80:5c:a3:01:a8:09:07:0d:09:de:3f:
                    fc:b8:f7:ed:63:89:9f:d4:79:5f:41:bd:90:11:01:
                    c0:a2:5e:15:7a:c0:c1:0c:bb:82:cf:27:10:7b:1b:
                    8e:19:5f:c0:22:72:cb:3f:32:9c:3d:56:4e:ee:f9:
                    3e:a5:ea:9f:3b:02:0d:22:74:ea:3d:63:6b:28:ae:
                    23:15:ec:97:c4:d1:fc:4a:8c:cc:02:37:3f:96:cb:
                    34:46:63:e0:1a:0c:55:9c:14:4a:b4:5f:3c:f1:86:
                    1b:40:13:75:f5:f1:e6:4c:16:f8:c4:be:bf:52:53:
                    3f:ff:47:ab:fb:09:e3:af:02:c5:db:76:1f:0f:74:
                    57:ba:9a:22:63:a5:8c:ef:7b:e5:c4:85:64:49:35:
                    0f:98:50:18:b5:4d:5d:2a:0c:59:bd:7a:bb:00:8a:
                    96:19:f8:f5:0f:22:e0:63:31:0e:76:47:f2:86:b0:
                    9b:cb:bf:be:6a:e3:5e:76:b6:d4:21:60:63:1c:55:
                    9d:62:74:7d:5e:78:c1:92:b8:0e:c5:3d:1c:36:a4:
                    32:7c:f5:0b:4b:05:85:dc:ca:44:2a:c2:66:4a:71:
                    d8:5a:1a:0f:90:f8:dc:43:7a:8c:2a:16:e1:01:d0:
                    78:53:a8:eb:0a:2e:77:1a:d6:d7:94:bb:df:c5:0d:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:73:43:B6:61:E0:05:68:47:0E:8A:A7:E5:4A:BD:D8:48:CB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34548b4b-f4f1-3994-86e0-f1f205b75b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:a4:19:6c:74:e0:d0:e6:14:eb:6c:27:ef:c3:3b:a1:db:50:
         48:5d:d1:a7:2d:4f:8e:2b:e1:9f:68:77:31:09:11:5d:de:ef:
         92:03:e2:22:36:48:b0:35:5c:ef:40:7e:82:9b:b8:d8:f8:21:
         06:86:00:34:b2:58:4b:29:44:0f:40:71:75:7f:d3:35:34:95:
         6c:32:bc:4c:5a:be:aa:0a:8f:e3:51:0a:ae:a6:8e:22:fc:b4:
         f6:66:c7:e5:65:cf:3c:fc:8f:83:4c:37:79:c8:bd:7c:2f:32:
         3a:2a:f0:c3:68:6d:f4:60:7e:76:5f:32:97:5a:65:64:0f:09:
         9f:52:a0:70:b3:ca:98:f6:88:d3:74:06:77:74:84:c6:08:7c:
         e6:24:6d:2d:ec:6b:98:47:3a:d4:df:06:95:c6:16:cd:42:bc:
         c1:ba:66:9e:62:1e:d9:81:dc:92:b4:07:9c:91:4a:cb:08:4d:
         f8:ad:46:1c:18:86:c9:2d:8c:05:f7:ec:5b:5b:90:b6:89:44:
         3d:26:ea:bd:55:95:79:4a:dc:e9:c7:ee:72:65:de:ea:15:92:
         4e:8c:86:38:ee:fa:95:ff:3f:01:d9:42:84:1e:72:4b:cc:a2:
         65:5b:3d:d6:98:f9:b4:56:ad:6d:b0:70:41:0c:e2:43:24:7d:
         df:24:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:38 2024 by rpki-client on console-fra.rpki-client.org