Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa
File:                     993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa (raw, json)
Hash identifier:          9rb/74Vny3R76PZRq9On8zL/OmrrCb3TeiIh4kcnSkQ=
Subject key identifier:   66:86:14:7D:6C:E1:66:A7:80:3A:2F:0D:C2:98:68:4B:C6:0C:FF:F5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228DF19
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa
Signing time:             Fri 30 Nov 2018 01:08:24 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.23.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:df:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=c8775b48-eb4c-481d-9d91-6df41cf98481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:98:ca:7f:49:38:26:e3:c0:5e:1c:83:b0:
                    7c:93:18:94:90:e0:fb:7b:98:f7:3f:7d:3a:4d:b8:
                    1d:22:73:18:9d:82:45:37:b6:e3:b1:a8:09:95:c3:
                    e1:3a:ad:bf:7d:f0:05:cb:13:3c:c7:e2:4d:74:b2:
                    d8:09:ba:7e:d9:c7:5b:3c:f8:cf:55:da:96:a8:a2:
                    06:71:ff:bb:76:79:5c:de:55:78:ef:c8:45:8d:50:
                    cb:4c:a0:30:5f:b5:cf:56:6f:79:74:fe:f0:d5:70:
                    16:15:db:1a:41:99:a7:e9:a9:12:08:f2:05:a7:b4:
                    5c:26:0a:a8:b2:e0:31:0f:01:d5:00:d2:6b:e1:c5:
                    4b:25:83:4b:aa:a6:22:b9:5b:58:fb:41:db:13:fd:
                    1a:c2:8a:5f:01:dc:19:9c:98:eb:90:ac:71:c3:d1:
                    ac:5a:f3:1e:ed:85:f2:21:6e:87:ba:01:79:86:79:
                    39:0f:62:a0:c3:3e:91:1b:a5:f8:bc:59:fe:10:e3:
                    37:dc:9f:11:6d:c7:df:53:13:f0:93:55:2d:13:8d:
                    66:0c:01:e8:1e:1d:b0:e2:56:2a:b6:c0:8f:b4:85:
                    22:6f:78:e2:ce:3c:d9:65:bc:13:52:01:bd:44:e3:
                    d3:11:7a:d3:56:e7:b9:7e:f9:ac:5b:84:9f:ff:f3:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:86:14:7D:6C:E1:66:A7:80:3A:2F:0D:C2:98:68:4B:C6:0C:FF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:ff:d9:96:c9:5d:61:42:3b:59:43:4a:1f:72:d2:e1:7a:
         75:a1:ff:20:5e:aa:c0:ca:ed:98:cd:7d:13:ac:d8:92:9e:e1:
         6c:b5:e6:44:68:7c:fa:e3:5b:3e:bb:d9:31:20:b4:e1:dc:c8:
         16:07:bf:55:88:3c:50:ef:fe:9b:10:e0:a3:4e:58:80:e8:6c:
         c4:0c:9d:31:91:72:48:22:43:80:c3:e0:4a:d5:ec:1d:9e:91:
         66:c3:50:1d:61:8b:da:3a:8b:c3:e6:91:ca:b0:95:73:de:af:
         18:00:3a:31:dc:d9:12:c6:15:a4:2f:7f:b6:e3:d8:d1:2e:35:
         91:b2:e7:9c:7d:ab:ca:1e:a2:09:1c:b9:c8:b8:24:45:f3:27:
         3d:f7:5e:fb:eb:a1:29:62:c9:a1:12:4c:69:e0:ef:87:ef:12:
         93:8c:e7:88:18:c6:26:20:ba:98:e8:54:95:41:8e:ed:d5:da:
         28:47:54:49:63:74:5b:a6:ea:54:3f:5f:47:43:9e:a9:39:cc:
         13:e7:6e:ce:17:66:f5:c2:d4:5b:c5:74:63:55:51:5a:73:95:
         cf:36:21:3d:92:f7:a7:53:33:4d:84:34:41:f5:1f:7d:79:b7:
         da:2f:1b:bf:50:21:ed:d8:73:20:f4:63:30:ba:39:b8:68:77:
         ad:f4:79:bb
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Io3xkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJGM4
Nzc1YjQ4LWViNGMtNDgxZC05ZDkxLTZkZjQxY2Y5ODQ4MTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ4JmMp/STgm48BeHIOwfJMYlJDg+3uY9z99Ok24
HSJzGJ2CRTe247GoCZXD4Tqtv33wBcsTPMfiTXSy2Am6ftnHWzz4z1XalqiiBnH/
u3Z5XN5VeO/IRY1Qy0ygMF+1z1ZveXT+8NVwFhXbGkGZp+mpEgjyBae0XCYKqLLg
MQ8B1QDSa+HFSyWDS6qmIrlbWPtB2xP9GsKKXwHcGZyY65CsccPRrFrzHu2F8iFu
h7oBeYZ5OQ9ioMM+kRul+LxZ/hDjN9yfEW3H31MT8JNVLRONZgwB6B4dsOJWKrbA
j7SFIm944s482WW8E1IBvUTj0xF601bnuX75rFuEn//zkkMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRmhhR9bOFmp4A6Lw3CmGhLxgz/9TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlLzk5M2M5NmZhLTdhYjEtMzMz
ZC1hMDdiLTU5ZmVjYzAzYTBjMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgXYDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAh+P/2ZbJXWFCO1lDSh9y0uF6daH/IF6qwMrtmM19E6zYkp7hbLXmRGh8+uNb
PrvZMSC04dzIFge/VYg8UO/+mxDgo05YgOhsxAydMZFySCJDgMPgStXsHZ6RZsNQ
HWGL2jqLw+aRyrCVc96vGAA6MdzZEsYVpC9/tuPY0S41kbLnnH2ryh6iCRy5yLgk
RfMnPfde++uhKWLJoRJMaeDvh+8Sk4zniBjGJiC6mOhUlUGO7dXaKEdUSWN0W6bq
VD9fR0OeqTnME+duzhdm9cLUW8V0Y1VRWnOVzzYhPZL3p1MzTYQ0QfUffXm32i8b
v1Ah7dhzIPRjMLo5uGh3rfR5uw==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:09 2024 by rpki-client on console-fra.rpki-client.org