Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97c8c310-2e15-383a-9108-de8f1d24b076.roa
File:                     97c8c310-2e15-383a-9108-de8f1d24b076.roa (raw, json)
Hash identifier:          GHBlNmjEM+9FyYZE4Yxr1BHWztu1XL58v3ZfMMIIZKE=
Subject key identifier:   D0:C1:97:D7:D0:B8:42:F9:B6:1C:B6:A0:B5:2B:AD:40:5F:16:2F:8F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762285B4A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97c8c310-2e15-383a-9108-de8f1d24b076.roa
Signing time:             Fri 30 Nov 2018 01:07:51 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.20.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:5b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=3a5ebcf6-c282-4415-9344-e378ee567b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:9b:9e:e3:f8:7e:9c:b5:d6:db:51:19:6a:
                    57:89:6c:0c:44:34:ff:73:32:fa:99:0e:00:09:a4:
                    b6:a6:e9:58:03:28:d0:2f:7a:cc:3f:27:05:82:ea:
                    fe:e1:15:c6:2d:01:bf:9c:3b:60:65:d7:10:ed:2d:
                    2c:4b:ec:40:17:b3:06:08:2c:db:d8:67:ca:96:bf:
                    60:4e:8f:3f:95:ec:1b:5c:b0:5d:0b:6c:f5:e9:b0:
                    a8:b7:62:1e:c2:1a:de:8d:51:33:eb:71:01:e3:23:
                    67:d4:8a:a8:a0:a6:79:ea:2a:35:a9:7f:83:c3:6d:
                    e2:22:90:9f:04:e4:e7:3f:9c:92:c4:65:72:ea:a5:
                    be:ba:80:6b:80:c6:71:0c:54:9c:e9:7a:07:50:29:
                    c5:ca:91:4c:61:94:6d:4b:85:85:b5:a4:36:5e:e9:
                    cd:78:22:4b:22:aa:8f:5e:3a:e8:30:ca:b6:49:ad:
                    b7:a4:5c:90:2d:c4:76:a5:54:5c:97:36:38:e0:18:
                    b9:23:5c:dc:ad:41:76:89:77:33:a9:a5:9d:fd:11:
                    68:16:aa:f8:ab:e7:00:81:84:a0:31:24:18:4f:72:
                    eb:62:0c:75:8a:d8:c4:c7:ae:de:9c:f1:89:67:b6:
                    b6:3c:08:76:6b:2d:9b:88:14:3c:c7:66:81:0f:19:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:97:D7:D0:B8:42:F9:B6:1C:B6:A0:B5:2B:AD:40:5F:16:2F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97c8c310-2e15-383a-9108-de8f1d24b076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:6e:b0:63:56:00:82:b2:88:92:91:c9:fd:b6:4b:7d:f9:
         08:3f:1f:3a:91:27:66:4a:e4:b4:06:e1:0d:82:b8:2a:65:b7:
         8a:2c:b9:fd:18:53:08:bf:6c:a3:1b:fb:85:6d:90:5c:40:81:
         fa:dc:18:a2:fd:42:a5:c8:9b:47:3c:67:07:c4:8b:c3:a8:b3:
         f7:2f:ca:07:10:1c:a9:ad:28:cb:c9:36:00:55:84:b1:30:55:
         90:90:61:6c:a8:d2:51:6d:b5:d0:6a:35:22:88:a2:50:af:5e:
         c8:e1:39:48:7e:c4:2b:fe:6b:85:be:09:d2:22:19:9a:c3:86:
         60:cc:2c:ce:24:9a:08:7a:81:cf:fa:aa:87:3a:0c:d0:fc:67:
         90:3f:4a:ae:3d:52:51:58:df:61:37:99:5b:cf:be:fc:d8:ac:
         a3:9a:98:cd:58:1e:86:66:96:2d:c1:e9:2f:d5:c3:70:db:60:
         6b:37:04:a9:b1:ee:de:36:d5:11:48:47:20:44:a1:64:b2:5d:
         3c:e7:fc:db:1e:75:53:26:70:bb:59:0f:09:18:d2:0c:dd:01:
         6b:29:3a:70:9e:dc:d2:19:fd:e0:6d:de:9a:f9:24:db:32:08:
         34:ac:e7:e3:f0:bc:c8:36:9b:00:1a:dc:25:f3:9f:ee:b5:a5:
         b0:c5:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:09 2024 by rpki-client on console-fra.rpki-client.org