Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae029341-dfd6-3610-8ad6-946065e2fdab.roa
File:                     ae029341-dfd6-3610-8ad6-946065e2fdab.roa (raw, json)
Hash identifier:          Z3X+/KyzSmoWIzDMQOiWd4/KnhA/TK6aUf1KiukQRv0=
Subject key identifier:   3C:B1:30:A3:84:9B:FD:EC:69:EC:29:5C:B7:BB:4F:64:FA:F2:F1:DB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A6949
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae029341-dfd6-3610-8ad6-946065e2fdab.roa
Signing time:             Thu 02 Aug 2018 21:45:35 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.25.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:69:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=9444ad84-9fef-45b0-be39-186a517299aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:11:f6:ad:06:ae:2b:25:00:f7:41:df:b9:
                    07:c5:25:2d:87:1b:71:3b:a6:b6:83:de:ef:fc:ff:
                    be:95:1b:2a:0c:30:fc:68:b5:f6:68:21:04:2d:39:
                    eb:cd:ad:49:2c:09:58:7b:1f:7d:73:29:4e:aa:0e:
                    a9:f0:01:cb:bd:86:8d:38:6a:8e:ae:1f:a3:72:b5:
                    d5:ef:d0:0b:16:4a:63:f5:83:16:b7:d1:d2:63:13:
                    cb:9e:da:b6:f2:be:a0:c0:a6:f2:99:87:02:63:88:
                    d8:58:95:61:47:14:e0:77:51:a1:66:61:01:d8:2a:
                    8e:50:1f:15:10:9e:29:4c:97:16:59:c3:1f:ec:47:
                    31:4c:72:a0:fc:f9:4f:9f:a6:8d:b0:2c:07:5e:31:
                    4b:ca:10:a9:e5:e8:9c:7a:ac:30:a8:0e:29:35:21:
                    b3:92:d5:bd:4d:b6:81:2f:0e:b4:0f:99:86:69:ae:
                    49:09:83:26:f1:ad:e8:4a:76:3d:8b:2e:07:1a:79:
                    5e:47:a6:89:7c:5f:18:27:f5:82:93:5d:c5:73:57:
                    f5:c9:f5:bb:48:de:85:f0:b2:d5:dc:dc:20:84:c6:
                    82:f3:f9:b1:6b:a3:2e:69:79:0f:2b:2f:5d:fe:25:
                    36:36:58:92:7f:b6:96:b8:60:65:de:e7:df:02:fa:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B1:30:A3:84:9B:FD:EC:69:EC:29:5C:B7:BB:4F:64:FA:F2:F1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae029341-dfd6-3610-8ad6-946065e2fdab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:46:05:6a:2f:f1:5b:5b:ab:fe:cd:b8:7c:7f:56:61:c4:bf:
         78:6a:c0:65:86:84:e2:51:c9:b4:9f:b4:2e:d8:bc:6b:7a:ab:
         a4:8a:56:05:51:62:e2:e4:42:24:b7:a4:7c:7e:cf:5f:2f:c8:
         9a:97:66:71:0d:ca:21:b9:dc:e0:fb:24:47:66:60:a1:e2:a2:
         7d:06:09:ad:84:a0:cb:26:0e:2a:18:3b:72:5d:a8:97:f2:51:
         b4:63:60:fd:fe:e4:b2:6d:12:91:56:03:58:9c:75:6e:f0:1a:
         e0:4d:21:ea:0f:e6:4a:e6:50:bf:ec:1e:b5:95:36:af:e2:a4:
         09:52:c3:8c:ae:e8:d0:ae:38:4f:8f:26:7f:fe:f0:82:8c:72:
         5b:54:cc:29:67:d0:97:7d:86:c0:a3:bd:bf:1c:88:96:16:24:
         ce:51:4c:4d:fa:95:a3:72:f5:1c:f6:d8:d0:5e:3b:04:93:d8:
         1c:be:e8:43:56:4c:e9:1e:25:a8:0b:85:48:46:b9:0a:6e:c8:
         60:61:29:4c:fa:62:db:d5:95:51:4b:cb:49:25:16:22:a9:8a:
         05:ae:84:f0:af:45:fb:ed:cf:27:ec:45:71:94:68:30:36:be:
         a3:35:a6:4d:2e:95:4a:0f:d7:c9:2d:a8:a9:84:30:b7:00:51:
         68:1f:18:6f
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZPyaaUkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODA4MDIwNDAwMDBaFw0yNzA3MzEwNDAwMDBaMC8xLTArBgNVBAMTJDk0
NDRhZDg0LTlmZWYtNDViMC1iZTM5LTE4NmE1MTcyOTlhYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM2xEfatBq4rJQD3Qd+5B8UlLYcbcTumtoPe7/z/
vpUbKgww/Gi19mghBC05682tSSwJWHsffXMpTqoOqfABy72GjThqjq4fo3K11e/Q
CxZKY/WDFrfR0mMTy57atvK+oMCm8pmHAmOI2FiVYUcU4HdRoWZhAdgqjlAfFRCe
KUyXFlnDH+xHMUxyoPz5T5+mjbAsB14xS8oQqeXonHqsMKgOKTUhs5LVvU22gS8O
tA+ZhmmuSQmDJvGt6Ep2PYsuBxp5XkemiXxfGCf1gpNdxXNX9cn1u0jehfCy1dzc
IITGgvP5sWujLml5DysvXf4lNjZYkn+2lrhgZd7n3wL6FR8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQ8sTCjhJv97GnsKVy3u09k+vLx2zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2FlMDI5MzQxLWRmZDYtMzYx
MC04YWQ2LTk0NjA2NWUyZmRhYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgZMDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAZEYFai/xW1ur/s24fH9WYcS/eGrAZYaE4lHJtJ+0Lti8a3qrpIpWBVFi4uRC
JLekfH7PXy/ImpdmcQ3KIbnc4PskR2ZgoeKifQYJrYSgyyYOKhg7cl2ol/JRtGNg
/f7ksm0SkVYDWJx1bvAa4E0h6g/mSuZQv+wetZU2r+KkCVLDjK7o0K44T48mf/7w
goxyW1TMKWfQl32GwKO9vxyIlhYkzlFMTfqVo3L1HPbY0F47BJPYHL7oQ1ZM6R4l
qAuFSEa5Cm7IYGEpTPpi29WVUUvLSSUWIqmKBa6E8K9F++3PJ+xFcZRoMDa+ozWm
TS6VSg/XyS2oqYQwtwBRaB8Ybw==
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:43 2024 by rpki-client on console-fra.rpki-client.org