Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c1ac70-68ca-3133-a3a4-3c3dc15e79c4.roa
File:                     a4c1ac70-68ca-3133-a3a4-3c3dc15e79c4.roa (raw, json)
Hash identifier:          NwRs93JXH63jUelcdU3t3yIDSdPXzsJqa/Fwp64I56k=
Subject key identifier:   F8:5D:14:D3:44:8A:29:2C:D6:00:72:BA:FD:54:B6:29:3A:9E:03:B5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762287868
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c1ac70-68ca-3133-a3a4-3c3dc15e79c4.roa
Signing time:             Fri 30 Nov 2018 01:07:58 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.16.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:78:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=46ca728c-4d34-4fc3-8267-7b4b97006dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:65:f9:83:49:ff:91:ea:b7:98:22:8c:8a:
                    71:90:b9:aa:4b:3c:2d:07:5a:fc:8f:d9:2b:7d:e2:
                    97:a6:f2:1f:5a:96:ed:27:74:94:60:f2:cf:86:68:
                    5b:de:13:5d:b3:a9:a3:7c:fc:aa:6f:9d:99:c6:36:
                    60:d3:81:7f:cc:fb:36:d3:b5:c3:80:56:33:31:a4:
                    ff:c1:2b:2d:58:15:e5:15:2e:50:ff:85:cf:5d:97:
                    61:bc:7d:70:2a:83:3f:2c:34:e0:fd:77:23:3c:3d:
                    fc:9d:e5:d4:f4:c0:ef:c6:01:eb:dd:60:7e:a4:db:
                    0a:58:19:b4:0a:b2:d7:c1:16:36:72:9c:63:e6:e4:
                    23:1f:ca:fe:25:fc:9e:82:9c:a0:36:87:1e:94:54:
                    50:b2:e2:3a:a9:56:e1:b5:ad:58:12:63:f2:6a:3f:
                    23:8c:ed:82:8d:e3:6f:10:67:e7:49:8b:e0:f5:91:
                    38:74:79:52:7f:6f:84:5f:7a:d5:4e:dd:b9:d9:d5:
                    31:78:35:51:8b:08:8a:d9:2b:96:b3:98:21:81:3c:
                    ad:de:65:35:06:81:37:a0:14:86:96:e9:16:c9:eb:
                    24:d9:b4:fd:39:c8:f6:29:60:55:6b:54:16:ff:4c:
                    72:3e:c0:fb:79:7a:0f:a8:28:e5:fe:e3:3a:f7:42:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5D:14:D3:44:8A:29:2C:D6:00:72:BA:FD:54:B6:29:3A:9E:03:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c1ac70-68ca-3133-a3a4-3c3dc15e79c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:76:d8:07:ef:81:59:c5:db:71:56:23:39:c6:b3:9c:31:cc:
         8a:b4:a0:0b:c9:77:61:79:2a:90:9f:5e:8b:c5:31:0d:e3:be:
         d4:29:85:15:a5:ca:5b:f0:dd:eb:d3:35:67:c4:69:31:4b:91:
         22:ba:d2:8e:07:3b:ca:6d:25:5b:9a:f6:3a:9b:33:1c:7e:2f:
         5b:cd:9d:c8:1c:fb:c5:5b:de:44:2f:6e:b3:5f:c0:b2:a7:1f:
         ff:e1:cc:03:49:a5:d7:7b:0b:00:17:2c:cb:28:6d:da:5c:b9:
         ec:3d:98:39:e2:7e:85:0f:b8:4b:21:fe:11:34:49:a0:71:79:
         76:d9:54:d1:c3:e2:91:5a:91:8b:d3:98:f9:0f:87:21:59:23:
         94:cd:7a:30:4f:23:b2:76:90:db:69:42:55:57:89:b5:2c:b0:
         e8:84:9a:84:64:65:f5:da:de:3c:f7:0d:8b:5a:69:d1:36:b5:
         4f:61:1b:77:17:8f:9d:68:24:84:9c:62:d9:89:d0:08:47:be:
         8e:95:bc:7b:ec:68:fb:87:7e:19:78:df:a9:ea:91:94:82:ab:
         0b:ec:f3:52:b5:6b:db:2b:8d:f2:d0:e1:47:43:95:89:7f:e1:
         8f:db:89:2d:bf:ef:00:cb:78:65:4d:65:ab:f3:d4:09:88:be:
         8d:df:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:09 2024 by rpki-client on console-ams.rpki-client.org