Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa
File:                     aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa (raw, json)
Hash identifier:          Zp6L5iz69F72r/ODpvJTSz+mxvWXXbRLZhxJ32cKbds=
Subject key identifier:   E7:99:4D:3D:E9:35:D1:01:7C:D0:80:6F:91:AD:75:04:07:80:82:EF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228B252
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa
Signing time:             Fri 30 Nov 2018 01:08:13 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.18.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:b2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0c22b7f8-bd1b-4d69-87ab-40ae017391aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:28:4a:8f:98:af:e0:57:b6:d7:92:e5:b5:
                    e2:a1:fe:e3:fd:0d:ee:05:9a:0f:6a:11:e3:e8:f5:
                    1a:13:75:7a:61:8c:0e:ce:03:4b:60:d3:f1:f0:0c:
                    ae:b4:20:cf:12:31:34:4d:a9:50:90:e1:c0:98:5c:
                    96:2d:ab:27:01:d5:4f:18:9d:d0:db:89:86:22:bc:
                    fa:ee:42:4e:b0:04:34:9d:ad:c8:f6:11:a0:98:0f:
                    bf:d8:ce:0a:8e:df:f8:da:32:58:43:1a:42:2c:1c:
                    48:55:ac:38:dd:c8:87:54:f9:23:fe:8c:e7:fe:53:
                    2c:ab:f1:b8:6e:80:48:61:5a:00:78:08:61:14:41:
                    10:e6:bd:6e:70:04:db:05:de:08:ca:8b:01:a1:3e:
                    3c:3d:48:77:fd:c8:58:a3:d8:14:21:ab:3d:c3:ec:
                    54:08:be:ba:ac:63:fc:24:4b:08:84:ba:7e:9a:49:
                    83:0f:b1:c5:8c:02:ea:ae:ba:e5:4d:c5:01:92:5e:
                    6d:56:96:7e:9c:b3:d8:d9:c7:4b:9a:b0:5b:fc:a8:
                    c2:1d:92:f6:2a:c0:41:3c:a3:2b:a4:86:00:47:30:
                    f3:bc:44:90:ec:34:2d:bd:8e:1d:c5:76:9b:f9:b7:
                    c6:30:5d:5f:91:97:eb:b1:55:43:0d:f8:bb:f7:34:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:4D:3D:E9:35:D1:01:7C:D0:80:6F:91:AD:75:04:07:80:82:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa3f0841-c481-37c8-ab4e-b9b6307d9674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:01:41:b6:37:11:9c:79:91:0e:bd:9d:e7:34:df:c0:38:8f:
         f2:68:4c:d3:33:2a:85:ff:02:a0:bf:c5:73:6c:65:ae:f7:45:
         50:ed:7d:95:26:7c:c6:47:39:5f:0c:4f:c3:18:ff:05:97:05:
         0f:d5:6d:9b:19:7b:b3:0f:f9:40:60:e4:85:43:07:3e:0a:88:
         0e:01:6b:7e:8f:b3:58:43:55:10:46:34:cf:ec:4a:64:05:30:
         9b:f8:63:e7:7f:07:62:7c:9c:39:78:6b:aa:6e:ff:3c:6a:54:
         f6:6a:68:f5:14:81:98:ba:d0:a1:f3:49:75:3f:eb:21:a4:7b:
         47:21:21:44:b5:55:7e:dd:3e:38:9f:83:72:d5:5d:04:4c:02:
         90:43:e4:43:99:d3:2f:f7:d5:43:f6:53:6f:18:4f:60:02:c2:
         fd:10:2e:66:ce:94:0b:e3:2b:ce:9f:3d:78:44:09:b3:c5:df:
         36:9f:23:5e:c2:ed:fe:5b:35:06:73:1a:37:6e:ad:c8:d8:1e:
         76:01:81:87:8d:11:1e:7d:f6:b2:34:b4:f6:b5:a8:82:91:1b:
         ae:f5:25:38:fc:62:3b:d0:88:a5:5b:ae:9f:a9:d8:cc:6f:75:
         b1:7d:03:3e:4c:d3:9d:4b:da:cc:30:bc:9e:02:af:0b:f4:65:
         de:44:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:10 2024 by rpki-client on console-fra.rpki-client.org