Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96318e14-35db-3272-966a-fad1b478ce00.roa
File:                     96318e14-35db-3272-966a-fad1b478ce00.roa (raw, json)
Hash identifier:          Jm1SVbAJ9aAVdiJn8ujUE2OT5XF6+AMdHs1PdyuqJ8I=
Subject key identifier:   47:0C:7A:FB:89:87:7A:84:33:DD:1A:E3:BC:2F:45:84:CD:D5:C4:0A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A4096
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96318e14-35db-3272-966a-fad1b478ce00.roa
Signing time:             Thu 02 Aug 2018 21:45:24 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.24.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:40:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=d907916f-4ce2-405b-8c06-fbc7f37ee53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:49:f1:61:a7:12:6b:4e:71:05:67:1f:25:
                    d2:4b:d5:6d:55:7c:b3:33:46:21:29:b8:db:cd:6f:
                    f2:d6:fb:d8:f7:ac:75:7b:15:86:38:a2:a5:c0:17:
                    49:a4:c6:b2:2d:bc:37:a7:ac:55:ca:c3:6a:2a:76:
                    3a:c7:20:d6:5a:68:9f:da:8a:1a:6c:ae:ee:2c:db:
                    20:3a:2c:70:69:ee:e4:59:f7:a5:1c:7f:91:03:d1:
                    41:23:ed:26:03:49:52:5b:8f:13:42:61:c4:6b:7a:
                    7d:73:33:3c:e5:85:b3:8f:ca:f0:e2:cb:2b:06:a5:
                    df:5a:10:d5:8e:d3:a5:9f:d7:44:65:9a:2a:ac:8a:
                    45:23:9e:2b:70:42:1e:8d:56:e9:91:13:4d:d4:34:
                    00:bc:df:22:65:79:d6:a1:1e:ca:fe:4d:ca:c5:d4:
                    7b:4e:52:ea:06:20:a4:1a:94:8c:45:32:63:eb:23:
                    02:70:e1:01:f4:25:54:00:a7:f1:a9:ba:d1:dd:6c:
                    a5:50:e8:77:50:bc:c2:c3:1f:3a:af:d3:ab:f6:77:
                    ad:80:22:ed:dc:f5:30:bc:2a:dc:36:4e:44:37:e1:
                    6a:23:17:e7:b1:97:68:c3:d7:50:b1:03:2b:43:16:
                    3f:1a:b3:8f:6e:83:8c:1d:8e:09:27:81:24:84:94:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0C:7A:FB:89:87:7A:84:33:DD:1A:E3:BC:2F:45:84:CD:D5:C4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96318e14-35db-3272-966a-fad1b478ce00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:be:2b:99:f1:19:c5:06:f2:a0:56:49:3d:87:46:dc:c5:a1:
         60:ba:00:1c:5e:2c:da:a6:59:e1:22:97:95:f5:94:b3:65:d3:
         6e:87:96:08:ba:2c:9d:2a:7b:a1:8c:5e:f5:c7:6f:18:f9:b0:
         d2:76:51:54:18:9b:c7:da:a2:9c:39:84:6d:f2:4a:d4:c2:3f:
         24:8d:1e:fd:90:bc:13:3e:fe:dd:70:66:18:0d:8e:3f:ae:d3:
         50:7c:c8:36:2a:f9:28:d3:fd:30:ef:d0:28:76:01:20:f6:15:
         a3:c9:ea:3d:96:a4:6f:e7:b8:10:a2:62:ac:2a:d0:84:80:90:
         87:e5:03:b8:91:dc:47:53:12:fc:29:27:59:48:1b:6e:07:cb:
         df:5a:eb:f3:a8:27:59:14:db:b9:3b:de:f8:53:7d:b3:e8:e6:
         d1:a5:8b:68:02:2a:a0:c4:13:ea:1a:95:4b:97:76:bd:48:90:
         11:da:07:1e:b4:ca:78:a8:ea:66:1c:8b:c4:40:b9:17:9c:e3:
         91:ad:fa:74:8f:3d:68:14:2a:bf:e0:87:f3:7c:c8:42:e2:68:
         af:a2:2a:9d:0c:3c:78:a5:dc:be:78:c6:c8:48:02:55:bb:ac:
         28:38:8b:9f:2a:6e:6b:2f:fa:1d:03:ba:b5:32:8a:1d:eb:4b:
         c3:0e:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:41:28 2024 by rpki-client on console-fra.rpki-client.org