Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adbd5a92-a357-323b-bcb4-e79007dc6476.roa
File:                     adbd5a92-a357-323b-bcb4-e79007dc6476.roa (raw, json)
Hash identifier:          AHufpVrIxCJ0ERjVWPi6t6gTSGzANlmq7Y7EcJvDgBQ=
Subject key identifier:   74:38:37:DC:5A:94:61:65:B8:DC:26:51:1E:D6:8A:6D:8A:EB:56:60
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622858AF
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adbd5a92-a357-323b-bcb4-e79007dc6476.roa
Signing time:             Fri 30 Nov 2018 01:07:50 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.20.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:58:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=4d15fbf4-08ad-4c87-a100-5856e32b8983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:40:82:e1:5e:18:8e:a2:22:8f:65:13:c4:
                    b4:fc:8f:8f:9c:f3:78:b7:1d:ce:47:53:99:e2:94:
                    90:25:34:d5:fb:5c:ad:62:80:8e:1f:96:ad:4a:83:
                    68:6e:69:59:b9:5d:fa:2f:e7:24:36:85:1f:7d:cc:
                    22:e8:46:87:9d:6c:93:f5:a9:0e:d0:4d:64:43:61:
                    8c:c3:26:43:73:e4:56:74:dc:d9:05:ab:5a:1f:32:
                    0d:66:4b:3a:3e:ea:6f:5a:46:f7:ac:2b:b5:df:07:
                    4c:8b:18:b9:e2:95:33:7e:dc:ef:c4:65:c7:f3:ae:
                    33:67:f0:6e:b5:20:8b:98:6b:c7:75:00:47:3b:05:
                    e8:e3:91:9d:f9:d4:4c:2b:5b:9b:03:ee:76:1b:76:
                    4f:49:93:0a:0f:99:ce:4e:b8:9a:c2:68:0c:20:38:
                    1a:30:aa:4f:4b:cf:89:61:45:7b:1d:ae:4e:2c:1a:
                    7e:a5:b7:04:69:a2:33:45:22:ad:bd:ff:b0:b7:46:
                    9b:eb:d1:e5:62:3c:fa:48:d7:3e:9d:8a:b0:82:1b:
                    c2:41:d1:b8:c9:03:ce:db:6a:e3:03:6c:be:97:87:
                    3d:46:ed:f2:e3:15:55:33:e1:2d:ae:e7:86:10:db:
                    1c:3f:9a:1d:6d:8d:e3:e7:bf:72:4b:21:0f:ec:f6:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:38:37:DC:5A:94:61:65:B8:DC:26:51:1E:D6:8A:6D:8A:EB:56:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adbd5a92-a357-323b-bcb4-e79007dc6476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:3d:08:a9:5d:1e:80:43:68:be:b9:dd:15:4f:d4:ad:01:
         59:bb:eb:8d:1c:c1:38:97:fe:39:c9:35:5d:95:3d:a2:79:bd:
         b3:65:2c:a2:fa:cd:a1:d6:8b:1e:dc:0e:e6:82:a0:4e:84:9a:
         25:ab:8e:e4:35:a4:f4:06:c4:9d:83:e3:3e:92:ac:b5:6e:4e:
         94:47:15:fc:d7:cf:e2:c8:44:73:b6:84:61:30:64:9f:bb:a2:
         a0:93:db:6a:de:3f:63:66:d5:49:62:45:22:bb:e6:22:93:34:
         db:94:2d:05:8d:04:6f:73:e8:f6:51:e3:98:f3:a5:c3:e2:c2:
         f6:30:5a:be:a5:a1:a1:6a:ae:a1:9e:0e:e9:c7:f7:a8:4a:2b:
         b8:82:97:b7:fc:25:1e:23:de:d0:ee:dd:64:04:75:42:6b:cd:
         da:c9:e4:ab:43:ef:33:60:ae:51:4a:3d:41:6d:21:49:c0:74:
         a7:bc:46:66:54:01:8a:74:8d:fe:3f:79:dd:90:98:fe:47:e0:
         10:53:81:fd:6c:76:6c:1b:05:87:b6:1e:0e:dd:3b:12:6e:dc:
         5e:58:84:b0:18:6a:50:47:d2:67:a6:05:e2:93:0e:a7:ce:6b:
         0f:2f:a3:9b:41:5e:30:bd:50:30:61:de:d0:86:d3:95:1b:ef:
         58:b1:9f:7a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2IoWK8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDRk
MTVmYmY0LTA4YWQtNGM4Ny1hMTAwLTU4NTZlMzJiODk4MzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMzPQILhXhiOoiKPZRPEtPyPj5zzeLcdzkdTmeKU
kCU01ftcrWKAjh+WrUqDaG5pWbld+i/nJDaFH33MIuhGh51sk/WpDtBNZENhjMMm
Q3PkVnTc2QWrWh8yDWZLOj7qb1pG96wrtd8HTIsYueKVM37c78Rlx/OuM2fwbrUg
i5hrx3UARzsF6OORnfnUTCtbmwPudht2T0mTCg+Zzk64msJoDCA4GjCqT0vPiWFF
ex2uTiwafqW3BGmiM0Uirb3/sLdGm+vR5WI8+kjXPp2KsIIbwkHRuMkDzttq4wNs
vpeHPUbt8uMVVTPhLa7nhhDbHD+aHW2N4+e/ckshD+z2mN8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR0ODfcWpRhZbjcJlEe1optiutWYDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2FkYmQ1YTkyLWEzNTctMzIz
Yi1iY2I0LWU3OTAwN2RjNjQ3Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgUgDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAgCw9CKldHoBDaL653RVP1K0BWbvrjRzBOJf+Ock1XZU9onm9s2UsovrNodaL
HtwO5oKgToSaJauO5DWk9AbEnYPjPpKstW5OlEcV/NfP4shEc7aEYTBkn7uioJPb
at4/Y2bVSWJFIrvmIpM025QtBY0Eb3Po9lHjmPOlw+LC9jBavqWhoWquoZ4O6cf3
qEoruIKXt/wlHiPe0O7dZAR1QmvN2snkq0PvM2CuUUo9QW0hScB0p7xGZlQBinSN
/j953ZCY/kfgEFOB/Wx2bBsFh7YeDt07Em7cXliEsBhqUEfSZ6YF4pMOp85rDy+j
m0FeML1QMGHe0IbTlRvvWLGfeg==
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:43 2024 by rpki-client on console-fra.rpki-client.org