Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a2d98a4-71e4-3cda-a03d-1ac4d9728399.roa
File:                     3a2d98a4-71e4-3cda-a03d-1ac4d9728399.roa (raw, json)
Hash identifier:          RqjxARRY5LHk64cNxnVblfHZvToetT0nvW5im5Sf4cY=
Subject key identifier:   7A:A6:68:53:91:4F:D3:AD:FA:E8:04:DE:87:99:95:70:4D:27:A2:69
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A381D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a2d98a4-71e4-3cda-a03d-1ac4d9728399.roa
Signing time:             Thu 02 Aug 2018 21:45:22 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.24.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:38:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=563444e8-779d-40a0-9eaa-0eb8508962d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:60:81:25:f5:f3:52:38:ab:ec:c4:0c:bd:
                    fc:a0:4c:67:e2:a2:df:66:5d:ff:32:76:63:5f:e1:
                    ba:61:6a:6e:7e:8e:7e:0e:b5:34:df:09:7f:33:ec:
                    d3:82:a5:df:3a:86:75:7c:79:cc:b6:09:37:5e:cb:
                    e5:f0:14:ac:11:0f:1f:9c:56:ab:74:e2:0d:87:0e:
                    85:e9:1c:7c:4e:55:70:1f:ec:50:c9:1c:9f:8b:7e:
                    09:50:32:40:38:d3:e6:47:cf:fe:b0:36:e6:f2:e1:
                    2c:42:b8:18:c7:99:0b:fd:ed:42:d9:14:af:55:72:
                    7c:d4:0d:95:c4:35:7f:0b:56:a3:f9:90:07:3f:0f:
                    dc:de:fd:91:47:6b:a5:cb:a9:a5:86:23:5e:96:d4:
                    cf:e2:89:0a:40:85:a2:84:fa:f5:d5:10:5c:99:60:
                    7a:c1:7f:84:44:ee:e8:31:18:a3:e6:c3:de:fb:27:
                    63:b0:ed:80:58:b5:00:3d:cc:65:26:29:ab:75:5d:
                    b2:10:57:ba:f4:83:ee:19:5f:dc:44:f5:ce:d6:ea:
                    9d:b9:24:fc:4e:19:11:24:dc:48:d5:a7:d6:a2:1d:
                    9d:a3:b3:f7:42:43:26:77:c6:0c:54:41:b4:da:37:
                    2f:4e:80:cc:66:d3:7c:7a:54:b3:fe:ef:d0:4e:6b:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A6:68:53:91:4F:D3:AD:FA:E8:04:DE:87:99:95:70:4D:27:A2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a2d98a4-71e4-3cda-a03d-1ac4d9728399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:fb:b4:02:b3:91:e7:32:e1:50:bb:8f:09:fb:e3:42:88:
         98:9e:7e:b7:c0:5f:f8:8a:54:3d:0c:75:3f:18:12:71:f4:bb:
         af:6f:27:6d:d8:d6:df:7f:0c:fc:b1:23:ab:5d:58:02:84:67:
         52:07:6c:a3:a9:44:d1:ae:59:64:94:4f:7e:74:2f:6b:0d:c9:
         0e:88:c3:55:71:a6:e6:7b:3a:0b:12:da:a7:98:93:20:44:fe:
         2d:cd:58:e6:d3:56:b7:08:4a:59:e2:c5:c6:61:d1:76:56:cd:
         06:dc:ab:2e:66:80:46:63:07:59:ac:8b:9c:8b:8e:cc:95:94:
         78:12:41:f2:b7:74:26:69:3e:ed:a3:66:cb:81:c5:1f:8a:12:
         1e:5e:2d:99:c6:8e:67:be:dc:4a:57:93:eb:90:be:03:08:7b:
         73:df:ee:4b:aa:db:4d:5c:11:49:c9:cf:a6:f7:43:6d:fd:51:
         c7:1b:44:54:37:20:7f:07:3d:b2:4e:13:3a:de:d4:21:5a:97:
         44:3d:88:23:7a:e2:c9:83:b3:ef:50:90:f4:c2:00:8e:b4:f8:
         b9:29:62:9f:4c:93:a6:6d:f9:25:a2:2a:92:05:22:d2:21:b3:
         6e:aa:a4:79:62:44:84:07:60:67:08:e5:e8:c0:4f:ff:ce:98:
         92:d6:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:03 2024 by rpki-client on console-ams.rpki-client.org