Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36083f61-821d-3c38-8ff3-38b3fe116012.roa
File:                     36083f61-821d-3c38-8ff3-38b3fe116012.roa (raw, json)
Hash identifier:          EVdnuWbaiJYkayh/O2n109UvGzvFxp6Rmb1P61BNGc4=
Subject key identifier:   17:8D:20:DD:C9:DF:F3:42:EF:FC:C5:C0:09:10:C0:0F:3C:59:E9:99
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228C8D5
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36083f61-821d-3c38-8ff3-38b3fe116012.roa
Signing time:             Fri 30 Nov 2018 01:08:19 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.23.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:c8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=c24f0fbb-b37b-4792-b307-62e76fd1944d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:12:20:d3:ed:f7:8f:eb:b5:d6:61:7c:8c:
                    c8:ef:ce:f1:9f:ae:df:30:ba:55:86:97:f8:ae:c6:
                    7f:7a:bf:d6:03:46:d4:76:b8:83:e6:43:51:ed:bc:
                    a8:b3:e1:06:ba:71:aa:c6:36:78:06:51:66:62:70:
                    12:45:80:07:50:fd:99:20:da:19:1e:c0:95:9e:05:
                    e0:25:40:de:ae:a0:ee:ca:ca:22:71:6f:32:2f:ff:
                    0e:df:c1:cc:cf:c3:09:d4:e0:97:df:91:25:2a:54:
                    be:00:f8:ad:2a:d9:e4:c6:a6:3f:67:a8:3f:bc:2f:
                    e0:ab:dc:27:1c:68:0f:04:8e:36:b8:2d:5e:68:be:
                    71:ff:ae:bd:6f:78:e0:df:b9:2b:03:4f:e4:aa:16:
                    45:74:14:9b:92:92:02:7d:c6:6a:31:51:8d:14:4e:
                    6d:e0:9e:12:31:c3:1f:e5:b6:dc:f1:fc:9d:4c:6f:
                    3c:c6:6f:98:c8:9b:06:eb:91:97:72:bd:02:05:97:
                    11:bd:66:6f:ee:8d:26:76:2e:87:64:13:f0:c0:8b:
                    d5:0a:00:3c:56:22:d4:c0:e1:f0:03:8e:c5:83:24:
                    ac:b6:16:3e:16:98:e3:26:3d:8e:68:91:d1:e6:db:
                    90:15:a0:4e:11:ea:46:2b:df:4c:8f:68:90:be:45:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:20:DD:C9:DF:F3:42:EF:FC:C5:C0:09:10:C0:0F:3C:59:E9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36083f61-821d-3c38-8ff3-38b3fe116012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:02:18:66:00:1c:1c:18:b4:ca:14:0c:f8:07:66:99:04:22:
         bd:14:ab:0d:ee:44:c0:ec:f9:7e:3e:1d:41:72:dd:9f:08:5b:
         21:b1:04:13:b1:07:e7:80:7c:9b:0a:d7:0f:f6:f2:4a:12:4b:
         19:76:8b:83:cc:b2:f5:a7:64:7a:92:0f:b2:46:49:48:2d:34:
         4f:7f:fc:db:ae:0e:7e:61:04:6d:e9:f7:40:03:8d:3a:0d:c1:
         00:31:13:d0:35:59:c1:0c:ec:81:d3:ff:c7:19:6f:26:00:a3:
         12:fe:66:a1:12:c5:0b:1c:27:e2:6b:92:26:92:4e:15:01:de:
         87:45:18:5b:32:3a:7e:28:a4:04:d7:35:e9:9a:0e:73:13:90:
         01:2a:f9:5a:f4:b7:77:dd:db:58:1d:28:19:91:fa:a2:d9:3f:
         0e:c2:61:4b:95:ec:f2:ea:8c:62:0c:a1:e6:48:f5:9b:ef:2f:
         fc:c9:c4:47:a3:05:0c:48:df:ca:fe:e0:5e:6b:9d:c7:93:b5:
         9f:a8:49:a7:29:5d:0a:4b:b1:e9:fd:a0:6e:5a:e2:12:e2:59:
         76:5c:31:88:6a:06:dd:fb:ae:09:f4:81:1d:6b:fa:b5:73:7e:
         e3:89:c4:2f:f6:ad:dd:c6:8c:81:87:05:8c:c2:49:48:ed:42:
         83:35:e0:0b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IoyNUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGMy
NGYwZmJiLWIzN2ItNDc5Mi1iMzA3LTYyZTc2ZmQxOTQ0ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANdiEiDT7feP67XWYXyMyO/O8Z+u3zC6VYaX+K7G
f3q/1gNG1Ha4g+ZDUe28qLPhBrpxqsY2eAZRZmJwEkWAB1D9mSDaGR7AlZ4F4CVA
3q6g7srKInFvMi//Dt/BzM/DCdTgl9+RJSpUvgD4rSrZ5MamP2eoP7wv4KvcJxxo
DwSONrgtXmi+cf+uvW944N+5KwNP5KoWRXQUm5KSAn3GajFRjRRObeCeEjHDH+W2
3PH8nUxvPMZvmMibBuuRl3K9AgWXEb1mb+6NJnYuh2QT8MCL1QoAPFYi1MDh8AOO
xYMkrLYWPhaY4yY9jmiR0ebbkBWgThHqRivfTI9okL5Fb0ECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQXjSDdyd/zQu/8xcAJEMAPPFnpmTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzM2MDgzZjYxLTgyMWQtM2Mz
OC04ZmYzLTM4YjNmZTExNjAxMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgXwDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAwAIYZgAcHBi0yhQM+AdmmQQivRSrDe5EwOz5fj4dQXLdnwhbIbEEE7EH54B8
mwrXD/byShJLGXaLg8yy9adkepIPskZJSC00T3/8264OfmEEben3QAONOg3BADET
0DVZwQzsgdP/xxlvJgCjEv5moRLFCxwn4muSJpJOFQHeh0UYWzI6fiikBNc16ZoO
cxOQASr5WvS3d93bWB0oGZH6otk/DsJhS5Xs8uqMYgyh5kj1m+8v/MnER6MFDEjf
yv7gXmudx5O1n6hJpyldCkux6f2gblriEuJZdlwxiGoG3fuuCfSBHWv6tXN+44nE
L/at3caMgYcFjMJJSO1CgzXgCw==
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:38 2024 by rpki-client on console-fra.rpki-client.org