Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8685c78b-8045-3b3e-9388-01e5d0c8d3ae.roa
File:                     8685c78b-8045-3b3e-9388-01e5d0c8d3ae.roa (raw, json)
Hash identifier:          fCEua8QDoeSpjacJfqlW+Pyi1n8Ev1FulE4Hf2n0AAc=
Subject key identifier:   EC:BB:3E:18:49:91:B2:7E:54:8B:05:C2:AC:7D:93:49:EA:1E:97:67
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228B427
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8685c78b-8045-3b3e-9388-01e5d0c8d3ae.roa
Signing time:             Fri 30 Nov 2018 01:08:14 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.18.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:b4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=04251488-9c54-4365-b91b-a1259b11d44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:35:73:c0:a0:c1:c4:eb:7a:0b:1a:8e:10:
                    41:74:9e:5c:a3:38:81:0b:35:0f:ad:25:ff:d8:11:
                    15:59:50:76:e3:f2:24:7a:03:92:a7:23:71:df:47:
                    6f:17:11:66:5b:cc:a0:b9:f7:98:f4:d3:17:19:46:
                    e2:fc:45:48:6d:15:e2:ca:f2:b9:4b:c6:93:94:53:
                    d1:1b:e8:81:d0:3c:55:25:56:5f:fc:8f:0c:68:1b:
                    e4:d7:86:a1:77:e5:1e:19:be:4a:85:4f:36:e4:89:
                    a4:79:ee:9c:97:4b:8b:9d:4e:17:cd:86:dd:ab:fc:
                    35:1a:68:ea:03:38:68:41:55:5b:6d:58:1b:35:33:
                    b3:a0:7d:7c:0a:8e:d2:c4:8f:a1:3b:01:c4:07:c7:
                    62:e4:14:cd:5b:3b:78:02:93:c1:78:0e:fb:17:86:
                    ec:16:04:71:24:61:b7:b1:28:7e:2b:da:f7:6f:13:
                    f3:72:d9:7d:a4:13:38:ea:60:73:eb:7b:33:45:5a:
                    7e:fa:03:08:6f:08:ab:33:7d:f4:4b:76:2a:99:61:
                    ee:84:29:d9:63:c3:00:31:d2:c8:ca:55:24:71:95:
                    8c:5a:21:8e:02:a9:6b:aa:89:a3:b5:99:f6:57:7f:
                    d2:9a:0d:9e:07:e1:8a:6b:16:22:52:aa:cc:17:8f:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BB:3E:18:49:91:B2:7E:54:8B:05:C2:AC:7D:93:49:EA:1E:97:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8685c78b-8045-3b3e-9388-01e5d0c8d3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:51:dd:75:dd:9b:93:dc:58:83:93:6e:70:90:c4:01:14:
         b1:ca:da:8b:65:df:1a:8a:86:09:68:c3:4f:fd:b9:a9:4e:9a:
         7c:84:cc:bd:ce:82:9f:78:d7:d8:ea:c1:07:5f:e8:45:73:97:
         01:b2:03:05:69:76:61:3e:eb:9c:8c:8e:42:5b:20:e7:5a:0f:
         a1:8c:49:dd:8e:0a:3d:ac:0b:4c:2e:7f:79:15:6a:15:ae:27:
         e0:95:4d:b2:84:1d:d9:0f:8e:99:6c:17:6c:05:22:88:f5:6f:
         c3:7e:2b:85:67:96:1d:2b:1a:c3:26:42:32:66:a4:33:85:7b:
         13:bc:ef:74:35:58:93:0e:6d:1b:94:98:d6:1a:ad:44:b7:b0:
         47:99:fe:d2:0a:db:43:1d:f1:d1:83:24:f3:94:33:dd:3b:ac:
         21:3d:55:88:d8:bb:64:b5:07:3b:14:4b:c3:1b:c7:13:5c:8c:
         c6:54:aa:54:72:a7:70:03:01:28:0d:d1:96:8e:95:27:08:2a:
         4f:b6:64:27:ea:be:11:9f:1f:ff:fd:1d:8b:91:00:2b:d2:4e:
         1c:59:4d:ec:71:2d:c3:1c:70:42:f9:0a:93:91:3b:dd:8e:7d:
         0b:75:a0:a6:54:c9:ea:98:67:68:c0:84:56:95:f8:61:14:43:
         e6:9b:6f:9c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IotCcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDA0
MjUxNDg4LTljNTQtNDM2NS1iOTFiLWExMjU5YjExZDQ0ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANCqNXPAoMHE63oLGo4QQXSeXKM4gQs1D60l/9gR
FVlQduPyJHoDkqcjcd9HbxcRZlvMoLn3mPTTFxlG4vxFSG0V4sryuUvGk5RT0Rvo
gdA8VSVWX/yPDGgb5NeGoXflHhm+SoVPNuSJpHnunJdLi51OF82G3av8NRpo6gM4
aEFVW21YGzUzs6B9fAqO0sSPoTsBxAfHYuQUzVs7eAKTwXgO+xeG7BYEcSRht7Eo
fiva928T83LZfaQTOOpgc+t7M0VafvoDCG8IqzN99Et2Kplh7oQp2WPDADHSyMpV
JHGVjFohjgKpa6qJo7WZ9ld/0poNngfhimsWIlKqzBePxMcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTsuz4YSZGyflSLBcKsfZNJ6h6XZzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzg2ODVjNzhiLTgwNDUtM2Iz
ZS05Mzg4LTAxZTVkMGM4ZDNhZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgSQDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAhA1R3XXdm5PcWIOTbnCQxAEUscrai2XfGoqGCWjDT/25qU6afITMvc6Cn3jX
2OrBB1/oRXOXAbIDBWl2YT7rnIyOQlsg51oPoYxJ3Y4KPawLTC5/eRVqFa4n4JVN
soQd2Q+OmWwXbAUiiPVvw34rhWeWHSsawyZCMmakM4V7E7zvdDVYkw5tG5SY1hqt
RLewR5n+0grbQx3x0YMk85Qz3TusIT1ViNi7ZLUHOxRLwxvHE1yMxlSqVHKncAMB
KA3Rlo6VJwgqT7ZkJ+q+EZ8f//0di5EAK9JOHFlN7HEtwxxwQvkKk5E73Y59C3Wg
plTJ6phnaMCEVpX4YRRD5ptvnA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:07 2024 by rpki-client on console-ams.rpki-client.org