Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/889379fa-226f-3768-9300-34d44be53d4e.roa
File:                     889379fa-226f-3768-9300-34d44be53d4e.roa (raw, json)
Hash identifier:          xJdU7+PPpyAiFoBKlevPvvctPx8INln+hN/J/yOn+tY=
Subject key identifier:   34:49:02:6F:1B:EE:48:03:48:A3:66:4C:98:74:E4:5C:03:21:9E:59
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A63B3
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/889379fa-226f-3768-9300-34d44be53d4e.roa
Signing time:             Thu 02 Aug 2018 21:45:33 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.25.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:63:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=79dcaad0-fe1d-48e0-8f6a-23efc02eda3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:a0:6d:8b:06:a9:21:5b:e6:43:0b:64:8f:
                    40:e1:f6:e1:7c:f2:8e:48:2b:de:49:58:44:b6:cf:
                    6b:44:6a:c9:55:db:93:34:30:86:b5:2a:02:e0:c4:
                    cb:9c:31:4b:12:52:b2:5b:de:7e:3b:60:d8:5f:8d:
                    34:82:7f:bf:e8:39:e2:30:97:2f:90:ca:a2:6c:a1:
                    85:af:57:a8:fc:6b:99:e4:ee:ca:ac:0b:89:27:46:
                    5b:82:d0:aa:c9:bc:ea:59:7f:92:bd:83:44:b6:ae:
                    89:1a:3e:2a:f5:8b:97:6d:e1:cd:a4:ef:13:24:ea:
                    8b:72:92:0f:a8:a0:2c:bf:43:70:69:98:a9:12:83:
                    fd:31:6f:2d:96:a1:84:81:b0:e4:c5:1a:98:db:9a:
                    d8:08:6a:49:20:c7:6f:70:4e:0a:f2:c9:eb:5f:79:
                    31:ab:63:5d:af:d1:d2:36:aa:8b:2d:16:79:35:b0:
                    84:13:c4:5a:e0:08:ed:c9:0d:51:5f:f0:07:98:ab:
                    21:c7:15:d7:16:3b:0f:d8:3b:1f:ad:47:ad:ba:04:
                    f6:cb:93:d4:22:16:4e:7a:8c:70:13:f0:22:bc:43:
                    2b:0e:8a:5b:08:aa:88:e0:5d:94:a7:54:bd:61:06:
                    d1:0a:79:35:5a:42:ee:6c:1e:27:ef:4c:d9:08:3c:
                    14:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:49:02:6F:1B:EE:48:03:48:A3:66:4C:98:74:E4:5C:03:21:9E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/889379fa-226f-3768-9300-34d44be53d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ee:c3:07:fc:38:ac:a4:29:56:4a:2b:4e:49:4d:83:63:be:
         a4:25:cb:7c:04:9f:54:fe:09:e8:c9:23:dc:96:b2:43:52:d8:
         af:4e:96:19:59:86:44:5a:da:a9:a5:bc:8f:b1:36:77:4a:2f:
         4e:a6:19:17:b7:4c:2b:7d:d3:c9:fb:d6:c6:b6:5a:f6:19:d6:
         41:f2:58:da:51:57:11:cd:5b:f5:04:2e:c1:8a:66:b2:23:2c:
         21:2a:d2:1f:8f:3f:92:d6:8c:0e:07:00:28:7e:b7:3a:15:17:
         8d:30:02:fe:3c:fb:a8:c7:09:be:0b:24:e5:e2:00:92:8d:fe:
         5d:c8:90:a4:80:b1:e7:7e:e4:cd:6e:ec:cf:e8:5a:2e:18:73:
         74:fb:a3:cb:b1:e3:41:3d:64:f6:de:87:ee:f7:f4:1b:79:dc:
         47:cf:ab:f1:f6:d6:ed:2c:3d:25:c3:4d:53:ab:df:b6:ff:1f:
         97:90:55:21:63:6e:52:c8:f2:eb:91:29:7c:5a:d6:a8:aa:80:
         a4:55:e2:3e:f5:ca:51:46:4a:7d:ad:32:71:25:bc:f3:37:a7:
         cb:70:de:2c:b3:73:45:0c:c6:d0:89:fb:49:6d:73:cd:62:2c:
         30:f7:ac:3c:79:7d:29:61:10:f5:c2:47:f0:a6:83:41:d8:0a:
         1d:4e:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:07 2024 by rpki-client on console-ams.rpki-client.org