Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35d7d844-f8e4-34b7-9791-8c9c46e091a2.roa
File:                     35d7d844-f8e4-34b7-9791-8c9c46e091a2.roa (raw, json)
Hash identifier:          T0FWBlYgd3utQEkOSNPWy2T9gti+BURe4Zm3KaSYavk=
Subject key identifier:   04:05:3F:0F:2F:79:B2:6A:DE:2E:5C:D6:03:F2:0D:AA:5A:29:12:63
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762289CC9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35d7d844-f8e4-34b7-9791-8c9c46e091a2.roa
Signing time:             Fri 30 Nov 2018 01:08:08 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.17.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:9c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0d8c850b-1a9f-4a6d-9e67-8bf430e8211b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:fe:0a:fe:a5:ca:c0:76:73:06:f2:16:51:
                    b6:b1:9a:5f:8c:fc:5b:38:a3:30:31:ec:fb:17:d6:
                    29:53:61:d9:f1:93:b6:05:27:af:8f:08:c7:c8:1d:
                    d7:a8:69:6b:31:d6:fa:8e:3a:3b:7f:ce:93:42:b2:
                    ea:42:be:aa:28:f1:61:fb:8c:0c:9b:fb:f8:e8:c8:
                    41:f6:5f:df:65:56:c0:3e:bc:2d:df:d5:ae:82:62:
                    52:30:ba:13:9e:3f:cd:e5:a6:49:5b:cd:b4:cd:99:
                    78:bd:9a:c7:c4:27:c0:4a:10:67:d6:6a:70:2b:7b:
                    a2:9e:20:86:87:2c:da:f9:b9:a6:5a:67:87:58:a4:
                    83:51:1b:f2:30:b5:72:53:34:9b:6d:55:80:cc:8f:
                    9c:c2:2b:d6:43:b0:22:a8:c0:40:6c:1d:e3:7c:3b:
                    7c:8f:b1:01:97:ca:a2:b3:ea:f7:7c:c6:f0:f0:8d:
                    14:d8:5a:ef:ca:d9:a5:d2:4a:19:93:59:22:e2:c2:
                    9b:e7:f5:28:1c:a7:4d:fe:c4:b9:3c:24:9b:28:e2:
                    df:7f:5f:65:1b:93:2b:54:d1:b8:f7:05:2f:81:86:
                    7c:8a:46:a1:03:8d:24:50:5e:b3:cd:81:59:7a:d7:
                    08:01:41:1c:35:cc:38:50:dd:9e:00:57:6e:7e:7c:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:05:3F:0F:2F:79:B2:6A:DE:2E:5C:D6:03:F2:0D:AA:5A:29:12:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35d7d844-f8e4-34b7-9791-8c9c46e091a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6d:c4:63:18:f5:0e:dd:63:91:2e:f5:61:a5:1d:99:30:bf:
         6f:cf:40:08:26:7a:ea:33:a8:ac:c6:d9:b0:80:e5:d7:88:ea:
         fb:3e:34:c7:a2:dd:4f:d2:92:b9:b4:b9:4b:d3:ca:7b:91:06:
         70:9e:9e:c9:1c:74:3a:4a:ba:c6:41:d0:13:76:95:93:69:f0:
         ff:c8:29:21:4a:a6:a9:aa:0a:53:32:eb:c0:81:d6:c4:b3:38:
         79:5f:40:7f:e4:bf:78:33:cf:c2:7a:15:d6:46:66:f1:fe:47:
         2f:21:f3:69:ab:ad:b1:01:00:84:68:70:2d:23:00:2e:87:b0:
         45:1a:00:96:66:c9:17:17:45:2f:7b:17:e4:fb:bb:a1:5d:9a:
         33:82:65:7b:4c:e0:a3:8f:f0:af:ac:a7:7b:1a:5a:06:b7:cf:
         c6:19:f2:16:e6:b1:ec:88:59:4d:b6:27:33:34:80:60:89:07:
         a4:87:45:05:36:c0:f8:04:f6:04:48:9c:f6:99:b6:83:18:d2:
         0b:b5:71:51:05:a9:c9:a1:18:fe:c0:c2:8c:76:22:d1:d8:22:
         5e:dc:5b:c3:96:3c:0e:a4:37:dd:ef:6b:ee:3a:84:9b:b5:fa:
         fc:3f:d4:55:87:c4:7a:6d:aa:53:17:da:11:28:95:96:13:2a:
         4a:12:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:38 2024 by rpki-client on console-fra.rpki-client.org