Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/791c75b5-2668-3ac2-83d1-eaf00b9ba332.roa
File:                     791c75b5-2668-3ac2-83d1-eaf00b9ba332.roa (raw, json)
Hash identifier:          D3nrT9TU3ox0h0uy0gsNc9f+JsArVkvNUwAykwqRIhs=
Subject key identifier:   3A:A8:E4:3D:24:18:14:67:00:2F:99:C2:0A:48:CD:B0:4D:6C:17:14
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622862CA
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/791c75b5-2668-3ac2-83d1-eaf00b9ba332.roa
Signing time:             Fri 30 Nov 2018 01:07:53 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.20.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:62:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=72250c70-a566-4f5c-8c46-7f68b604f30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:31:dc:69:dc:58:de:75:fb:60:b4:aa:c9:
                    a2:0e:90:b4:3a:16:4b:29:83:f3:fe:3c:84:11:d8:
                    c4:be:5a:ad:6d:bb:68:9f:64:46:22:14:c6:61:ee:
                    6d:cb:3f:c7:3e:4b:7f:ec:4d:ec:76:68:87:cc:d5:
                    a4:5e:e1:0a:b8:d7:42:c9:dd:20:42:78:d5:c3:8e:
                    f2:7c:93:42:6d:50:4a:0e:c7:2d:01:b3:29:c3:04:
                    f3:be:42:c8:63:fc:7c:f6:e2:ed:2d:75:4b:c7:16:
                    4e:4f:9f:b0:a2:a7:ae:bd:9b:14:7c:ea:c0:16:b2:
                    cf:e1:0b:a8:c7:8f:75:d3:44:21:e9:42:d3:d1:74:
                    d7:ec:9b:c0:bb:eb:25:65:77:a7:35:2b:86:99:3f:
                    87:4c:52:0f:63:7f:84:ff:db:ad:88:4c:b0:f1:9e:
                    b0:e3:f9:5f:50:11:c6:05:43:1e:3d:0e:9a:7a:63:
                    ed:62:9b:57:3a:32:06:3a:ea:f5:ab:f8:a9:48:69:
                    fa:ad:04:56:7e:42:d8:15:45:de:b0:90:54:c6:f4:
                    d2:cc:22:39:0a:67:46:6f:d9:e3:0b:fe:60:07:a7:
                    a7:04:98:0c:04:16:db:a0:86:67:15:0e:f9:a4:03:
                    6c:71:89:00:a7:d1:08:ad:83:95:e4:c3:b8:d3:e9:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A8:E4:3D:24:18:14:67:00:2F:99:C2:0A:48:CD:B0:4D:6C:17:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/791c75b5-2668-3ac2-83d1-eaf00b9ba332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:40:17:c0:e1:f0:04:30:96:52:c3:69:b5:07:df:c3:fb:
         ef:34:a3:04:fb:ac:42:0f:c1:b6:41:d9:fe:c3:c6:99:e8:3f:
         51:b5:20:70:43:20:82:93:8f:6c:ec:a5:b2:3b:bd:88:c1:9d:
         01:79:a8:28:3f:0b:3d:d6:cf:ec:e5:3e:e6:cd:2b:23:de:40:
         4c:9c:f0:55:43:ff:c9:87:af:63:c0:55:e9:3b:10:be:e9:8b:
         8b:78:a0:f3:08:56:22:c6:a2:75:24:0b:06:9c:f5:24:7a:b9:
         9d:da:bd:94:42:0b:43:69:2f:1e:e1:13:2a:27:28:fa:91:d0:
         21:66:d3:a1:70:6b:58:53:95:41:e9:d7:f8:02:fb:b9:7f:aa:
         02:83:d7:fa:c2:8e:dd:2a:a2:65:f6:80:f7:9d:6e:11:d0:1c:
         a8:39:e8:b1:09:c0:db:46:e1:1c:cc:7a:ef:43:aa:bf:9b:f9:
         bf:29:53:3f:54:c8:66:70:40:f3:07:4e:09:7b:5c:3f:17:3c:
         77:dc:bf:1a:5f:01:8f:f2:c6:2f:94:87:99:67:8d:bb:ab:3a:
         bf:e4:60:2e:87:4a:2e:33:8c:f2:53:04:2d:ba:05:10:9b:54:
         11:54:55:13:ce:13:be:25:07:c0:32:15:b9:87:ac:f5:d5:63:
         2a:07:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:06 2024 by rpki-client on console-ams.rpki-client.org