Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c3bf058-66fb-3dba-a77b-cc4221b0c12f.roa
File:                     6c3bf058-66fb-3dba-a77b-cc4221b0c12f.roa (raw, json)
Hash identifier:          mjxi3YWNiPzGGn9UI3AsXbf0PQwvj7ECGOVY7XNUyHc=
Subject key identifier:   5F:C7:44:F9:8C:F3:47:9E:48:87:E4:16:6B:6C:69:58:E8:CE:E7:2D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762287448
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c3bf058-66fb-3dba-a77b-cc4221b0c12f.roa
Signing time:             Fri 30 Nov 2018 01:07:57 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.16.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=2efcf786-bbf6-4118-a2f7-711844485473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:71:8f:1d:6b:5b:2a:70:55:ca:63:dd:ea:
                    12:0f:b9:38:22:23:57:8b:0d:fb:11:2d:d2:26:a6:
                    ff:ed:03:b7:3a:46:e6:fa:34:4c:77:01:4e:e9:7c:
                    c1:88:9a:c9:41:11:0f:cb:69:32:ac:db:10:fc:ac:
                    1d:ba:cf:a4:b8:ea:2c:5d:ac:0d:0e:fb:10:39:5b:
                    83:44:66:5f:7f:8a:d6:28:87:98:a3:49:f8:70:54:
                    c3:df:bc:e6:c9:d1:ca:8d:6e:0d:0b:38:eb:04:2a:
                    21:28:30:86:af:e6:3b:65:32:b6:c9:d1:15:34:ad:
                    94:f8:68:44:59:23:c3:de:51:09:d4:e4:5d:ad:8b:
                    67:44:46:46:7f:5e:a3:96:17:5e:f7:9c:49:ef:d1:
                    aa:58:88:f4:ab:cb:8f:d5:96:b1:ee:90:09:54:d6:
                    44:fc:02:64:db:6e:9a:a4:80:5c:b5:cc:c4:07:0b:
                    4b:e2:37:fb:d4:ff:4e:59:db:83:08:7d:19:c3:76:
                    32:cc:08:c9:9d:75:3b:75:e0:55:5b:31:c2:48:cf:
                    ae:54:8d:66:ce:af:aa:19:b4:84:7e:37:68:d0:d7:
                    8c:8b:89:23:02:c1:a3:60:70:cb:b2:a9:6b:26:f2:
                    02:45:12:b3:00:8f:49:9d:0b:df:fc:88:cc:74:8d:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:44:F9:8C:F3:47:9E:48:87:E4:16:6B:6C:69:58:E8:CE:E7:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c3bf058-66fb-3dba-a77b-cc4221b0c12f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:1a:4f:8b:7d:b4:ad:03:0f:35:7a:4f:fb:69:99:78:fd:
         2c:f7:55:08:9c:7e:32:d1:68:ad:68:21:59:62:14:fa:dc:a5:
         e0:3c:72:13:d2:7f:1b:1b:8f:e6:eb:46:e7:c6:d5:6d:55:4d:
         87:58:47:5e:c2:f6:ba:4a:06:f0:eb:60:42:e5:19:be:bd:1a:
         54:2f:bc:e6:5e:f0:4b:ac:f9:04:30:5d:8b:b3:ba:a8:a0:a2:
         58:b8:b0:cd:0e:10:58:00:a6:11:78:c3:55:74:4e:47:cb:6a:
         50:49:b3:6e:5f:6d:10:33:e5:61:67:f1:10:a4:5b:87:75:af:
         82:49:29:28:46:9f:47:aa:49:71:0e:9e:10:e7:a1:64:d2:fc:
         7f:02:8d:ae:af:69:92:5b:35:44:f0:82:3a:f9:7f:b3:e7:41:
         ae:7a:90:35:16:6a:f5:04:73:a6:7d:6c:b2:4b:45:3d:95:b5:
         a9:da:ac:b0:f1:7d:18:e9:b0:d2:51:dd:0f:31:a5:a0:f1:88:
         07:73:12:36:c3:ce:73:98:4f:dd:e9:d6:ce:06:67:c5:2c:bf:
         f9:dd:f1:79:6c:bd:c4:76:ad:d0:2d:4f:2e:ba:c2:8b:2b:c1:
         9c:75:82:5d:51:47:5b:b6:d9:fb:7f:ac:5f:d3:a1:c0:b9:1f:
         0d:9c:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:08 2024 by rpki-client on console-ams.rpki-client.org