Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9fe9448e-4083-33d1-a788-5e745c4544e1.roa
File:                     9fe9448e-4083-33d1-a788-5e745c4544e1.roa (raw, json)
Hash identifier:          EQJ+eGZfSwCOKvk7xGJfWBJt3NIJZwJzbvGJKzgqRLs=
Subject key identifier:   B1:8A:6D:D9:25:C3:2C:3E:62:83:03:81:F7:7E:27:4D:39:A6:3B:B8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228ABC9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9fe9448e-4083-33d1-a788-5e745c4544e1.roa
Signing time:             Fri 30 Nov 2018 01:08:11 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.18.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:ab:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=264229ff-4351-4aed-8183-34c2539f3c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:50:23:49:b6:21:52:53:0b:b2:14:df:86:
                    ba:bc:fb:34:a8:52:d5:51:db:34:68:2a:2a:3b:4f:
                    bc:09:17:cb:9b:06:9e:d1:a0:49:da:72:39:41:82:
                    af:b0:5f:10:c8:78:92:f9:a8:1d:7e:7f:0d:95:c7:
                    b0:f9:1d:46:ae:d2:f7:b1:77:26:b0:49:c0:52:49:
                    d1:4f:03:63:8a:51:a3:3f:80:1b:97:a6:cd:3d:8e:
                    7f:e5:a7:2b:07:10:a1:ec:10:cd:15:d4:a7:91:cc:
                    22:7b:4c:42:73:fc:48:b8:c5:c6:81:a6:21:5a:b4:
                    9b:e9:9b:67:9a:5a:c4:82:c2:14:1c:91:b3:4b:7b:
                    b6:e0:55:c0:8b:59:4e:cd:e0:45:a1:09:b3:09:fb:
                    23:53:cf:60:cd:12:64:c2:84:03:fb:26:c9:de:ca:
                    f3:cb:5c:c0:0f:78:7c:62:62:d8:d3:95:0c:5d:b0:
                    53:01:53:fa:23:8a:f4:fb:2b:e1:2f:25:e4:49:2b:
                    96:f6:6d:1d:eb:38:57:84:b2:92:44:90:8a:57:cd:
                    60:34:82:fb:e8:27:9d:a2:96:00:26:4f:ea:8d:04:
                    49:48:cc:f0:b4:48:ba:0a:a9:de:91:27:d6:63:79:
                    f7:89:d8:44:38:f2:a6:57:d8:98:63:71:a0:70:ea:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:6D:D9:25:C3:2C:3E:62:83:03:81:F7:7E:27:4D:39:A6:3B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9fe9448e-4083-33d1-a788-5e745c4544e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4b:c6:83:d2:23:73:66:7a:ca:28:16:d1:7f:f3:5c:3d:17:
         64:a5:e6:db:85:5c:1c:44:7d:2e:41:8d:d3:e5:c7:b5:54:d0:
         49:d9:da:33:0e:b7:39:f7:57:df:b1:34:24:32:8c:c3:61:d5:
         2a:c2:57:55:e8:f6:24:e4:c3:0e:ab:1d:7c:ad:5c:17:34:1f:
         0a:01:0e:79:8a:e2:01:05:61:97:80:a7:be:53:ca:0c:c7:c0:
         8e:30:62:f2:82:cf:4d:4c:e2:cb:b8:b6:cd:59:52:cf:ad:9c:
         3e:45:68:2d:da:0c:95:85:50:70:06:a1:b1:dd:af:9b:4f:46:
         54:db:4f:5c:4b:5d:e7:9c:a8:d4:dd:28:f9:dd:7b:16:4c:a3:
         a8:48:e6:39:fe:c8:d8:7c:f0:84:b2:8e:ed:00:1b:8b:1d:f6:
         e9:11:7f:26:ff:71:34:14:40:fb:9a:43:9c:df:95:ac:5e:98:
         04:b2:fe:8a:17:05:4d:34:f2:e3:12:de:5d:91:4d:bd:d1:c7:
         35:16:4e:43:5a:c0:53:e7:7c:89:db:c3:39:97:13:52:84:04:
         39:e2:be:8d:43:1e:5a:ef:5f:72:ff:49:35:c2:56:38:18:dc:
         d4:83:fe:37:fb:66:98:b4:9b:a4:3f:54:c1:1b:03:ce:0d:b0:
         76:4c:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:12 2024 by rpki-client on console-ams.rpki-client.org