Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b995979-7c56-3aed-a0d6-b8baf2949e37.roa
File:                     3b995979-7c56-3aed-a0d6-b8baf2949e37.roa (raw, json)
Hash identifier:          1Qx7Efd0Irwp7d4Vdw8QUVOOPUA2aq9cYpEiIDEUV9Q=
Subject key identifier:   4E:60:72:D1:84:6D:8E:81:25:8B:29:88:B2:92:CD:DA:68:1E:22:E4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762289A64
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b995979-7c56-3aed-a0d6-b8baf2949e37.roa
Signing time:             Fri 30 Nov 2018 01:08:07 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.17.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:9a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=c41bea49-b68c-4296-8b80-0e96e37bdb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:b2:67:e7:1f:24:a8:61:4e:00:ee:6b:45:
                    84:bf:26:32:06:d5:4b:33:f3:e7:a1:6d:c9:f9:bb:
                    37:2b:7c:c3:e3:0b:53:7e:cb:87:ed:d7:90:8e:e8:
                    1d:a9:9f:3b:d7:a0:1b:76:87:cc:c4:56:0e:12:72:
                    a8:9a:9c:b7:15:ef:9f:f9:79:5a:2e:d9:a9:ad:c4:
                    c2:3c:c2:f8:8f:a4:ae:49:6a:d9:66:33:6e:cb:07:
                    8d:c2:dc:30:ee:82:06:48:bb:85:f2:02:04:5e:bc:
                    ad:f2:db:ed:50:f5:cc:9d:e4:16:01:a5:7c:9f:78:
                    1c:bd:c5:ac:22:8d:90:f5:22:90:37:90:31:4e:46:
                    25:d4:31:46:10:b6:7a:d8:94:e1:21:bc:b7:3e:da:
                    2e:93:3a:ad:56:b7:b3:ca:88:57:cb:72:e0:7c:cf:
                    46:d3:de:b3:a9:f7:bb:de:3a:a3:b6:26:97:94:8a:
                    d6:fd:27:6f:43:28:5d:f7:bb:d5:3c:74:33:f8:c8:
                    fd:3b:56:93:11:ae:5b:e5:35:bd:3b:4e:1b:43:4d:
                    84:79:f4:af:a8:12:9e:2a:78:03:68:c9:b8:0a:62:
                    77:96:3f:48:b8:8b:64:fa:5f:74:cc:8f:b1:35:67:
                    6a:12:44:63:89:82:7e:50:06:8c:e9:d4:ac:45:58:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:72:D1:84:6D:8E:81:25:8B:29:88:B2:92:CD:DA:68:1E:22:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b995979-7c56-3aed-a0d6-b8baf2949e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:38:b1:a2:99:1b:f6:29:d0:ab:cb:28:b4:de:43:8c:58:5e:
         f0:11:41:df:46:03:a7:73:7c:1b:b2:1c:c6:61:80:35:dc:96:
         83:78:ba:2a:9d:91:80:40:58:b9:64:8e:5c:3f:e0:14:2f:b6:
         e5:6e:41:d0:a0:4c:a1:83:a6:a5:41:24:10:d6:0b:fd:74:11:
         38:ae:54:91:88:37:87:a7:31:be:5b:eb:73:41:ec:ea:e3:6c:
         92:cd:1a:80:9a:0f:06:dc:1e:a6:9e:d2:f8:4c:d6:f1:be:cb:
         ef:9a:14:4d:4d:df:7b:4b:4e:8e:dd:3a:67:72:d7:4a:43:14:
         83:26:6e:1e:a7:68:f4:70:61:10:b4:e1:7e:a8:cf:d1:60:af:
         88:55:6b:99:ba:63:47:bd:26:e2:5f:e4:5f:23:fe:93:50:f3:
         41:da:46:6e:0a:fa:41:cd:5c:0b:bb:9f:f2:08:6e:3a:db:09:
         c6:55:ac:c7:91:5e:9b:59:cc:1b:4d:be:f6:d4:45:28:21:6e:
         b7:9b:a8:8e:14:ad:a1:75:8b:35:75:ff:df:2b:cd:26:5f:be:
         f9:12:c3:e4:2e:d1:b2:e9:75:b1:88:b9:0b:03:54:76:97:45:
         a7:bb:e2:c2:38:d8:69:13:84:74:5c:fa:06:b4:0c:06:53:2d:
         05:d7:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:15 2024 by rpki-client on console-fra.rpki-client.org