Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6664b42e-a74e-3ba6-9089-de2f7ad1217a.roa
File:                     6664b42e-a74e-3ba6-9089-de2f7ad1217a.roa (raw, json)
Hash identifier:          VjHhGmgvRNpj+iECjsD6SaREI5TI0YwF5qlLNozsgBY=
Subject key identifier:   08:0A:29:A5:42:48:09:64:66:83:A8:91:D6:97:AC:AE:65:EF:A1:D8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228B38F
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6664b42e-a74e-3ba6-9089-de2f7ad1217a.roa
Signing time:             Fri 30 Nov 2018 01:08:13 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.18.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:b3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=521277dd-c4d5-4e53-963e-4b8ea66b6088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:f1:d4:92:b3:af:8e:4b:62:74:4d:88:05:
                    7e:7e:8e:3b:3f:c4:b9:fe:76:93:a1:43:8b:65:a6:
                    84:c6:93:80:1b:91:ad:99:a8:ab:e0:22:03:f2:50:
                    2f:9a:e2:32:a1:45:8b:93:93:0f:82:88:0a:55:ec:
                    24:f7:f4:61:ce:a6:93:16:81:22:2b:d6:63:94:1a:
                    69:5c:6c:21:4d:59:2e:77:76:b7:91:36:7b:0c:69:
                    18:86:6b:6f:c9:69:a1:af:33:d2:14:74:e4:f3:fb:
                    66:eb:1c:1e:22:3d:a7:db:63:9e:33:46:e5:b0:66:
                    3f:25:b5:71:bd:5c:32:cf:d0:b0:3c:5e:a7:d5:48:
                    63:2d:da:8b:50:71:9e:3a:c0:3e:eb:ac:76:1b:a9:
                    d2:fc:fb:93:27:5c:da:73:5e:71:de:70:b8:9f:14:
                    d8:8c:3f:cb:32:d2:b7:e5:9b:ae:27:fc:bc:ea:13:
                    6d:ec:61:40:99:cf:4d:26:92:22:d7:81:fa:2e:18:
                    81:48:4b:ea:37:27:fe:02:09:f6:2a:b3:a4:9c:a8:
                    a2:f0:6e:58:d3:57:03:54:2c:96:bb:70:59:3a:25:
                    36:31:80:46:eb:e5:92:3e:24:46:87:43:53:eb:b2:
                    89:07:59:4d:4d:4d:72:0e:5c:4f:74:37:15:ef:de:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0A:29:A5:42:48:09:64:66:83:A8:91:D6:97:AC:AE:65:EF:A1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6664b42e-a74e-3ba6-9089-de2f7ad1217a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d6:98:c2:b9:9c:07:4b:67:38:b6:0f:c5:bd:6a:54:81:ce:
         aa:0d:c5:fa:e1:b8:9d:e9:07:d6:71:c3:82:de:c8:9f:40:4c:
         14:1e:f3:33:c2:2f:4b:5b:1d:fe:63:b9:0a:a8:ab:91:01:0d:
         9e:89:5c:f8:7b:6b:02:90:0d:23:51:1a:eb:4e:f7:59:dd:62:
         eb:6b:23:e6:1a:b9:78:33:42:d8:e4:3b:77:7b:87:d4:e2:7a:
         8f:f4:30:79:64:13:68:e7:60:93:3d:df:65:e6:d3:3e:bb:36:
         38:e9:c2:0c:39:9c:f3:f4:08:1c:1a:b5:cb:b2:c2:21:d0:50:
         fd:fc:6b:31:79:2c:17:00:d3:02:a8:d7:e0:3e:1e:9c:e4:69:
         ec:9f:37:a3:f2:48:31:6e:96:eb:40:fa:30:ab:de:eb:c3:0e:
         32:cc:6a:0a:bc:8a:b2:4d:39:5e:ee:5b:51:93:b1:38:19:d8:
         0d:39:37:1d:52:56:fa:a4:3f:e3:41:d2:9a:82:1f:28:99:2b:
         58:fe:f1:77:9b:56:e4:01:32:40:14:57:e8:79:d4:89:49:f3:
         25:f1:dc:61:b1:2d:15:5e:88:ca:24:72:2d:3f:e2:14:4b:b1:
         d9:a6:08:6c:af:7a:96:d2:71:63:96:9c:0f:d4:f5:ba:3a:30:
         e5:2d:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:24:59 2024 by rpki-client on console-fra.rpki-client.org