Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfb13e92-b057-3ccb-949b-0984ed08b889.roa
File:                     bfb13e92-b057-3ccb-949b-0984ed08b889.roa (raw, json)
Hash identifier:          OllcwM58OYoVkxEkpWJONsL4gjWcVgPEAI0tx0DW2ic=
Subject key identifier:   99:15:97:46:7B:66:D5:78:D5:93:8A:A0:4E:4E:14:D1:AE:F2:A3:81
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A6612
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfb13e92-b057-3ccb-949b-0984ed08b889.roa
Signing time:             Thu 02 Aug 2018 21:45:34 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.25.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:66:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=75db4190-c8dd-41c4-9dcd-cab9454281fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:36:da:df:51:94:2e:7a:db:14:af:12:d1:
                    e3:80:93:ba:99:68:be:8a:fe:5a:a3:da:de:09:d6:
                    f3:09:bd:c4:23:54:92:2a:29:8c:3e:42:95:12:80:
                    c3:69:08:8f:1d:a0:59:6d:6c:ae:32:ac:c2:41:31:
                    c2:ac:63:2f:99:3c:af:36:f9:c5:92:40:7d:52:ad:
                    a9:9f:2d:9e:b9:e9:25:8b:e0:14:93:7c:b1:c9:5b:
                    c9:5f:17:e9:fc:58:af:42:57:7f:71:2e:b0:6d:4e:
                    ea:9b:8b:2f:49:95:d6:5f:b5:98:45:34:cb:49:ab:
                    cd:43:d8:06:1c:3e:88:bc:0f:72:b5:26:6e:92:bf:
                    8e:00:5a:76:e6:02:86:29:f1:4d:84:20:c5:5d:8a:
                    43:40:f7:97:c0:e2:d4:14:c1:99:6e:5f:e9:bb:bc:
                    35:bc:f3:ee:eb:c2:15:d7:41:60:a5:3e:3f:99:33:
                    34:d1:28:87:e5:a9:e8:37:f5:75:3f:d1:ce:7c:db:
                    de:de:6d:e4:9e:cd:a8:c9:0e:90:18:c8:9e:12:4b:
                    98:e5:1d:91:8f:b3:80:04:c1:fb:a0:fe:4c:7c:53:
                    c9:4e:da:96:be:94:15:27:c1:c2:f1:b9:bd:ed:58:
                    34:fa:95:57:41:04:42:e8:e5:f8:a8:84:fc:80:eb:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:15:97:46:7B:66:D5:78:D5:93:8A:A0:4E:4E:14:D1:AE:F2:A3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfb13e92-b057-3ccb-949b-0984ed08b889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:96:6d:69:f4:93:ae:21:ec:eb:4d:c0:cf:30:b2:8e:ca:22:
         0e:18:b7:08:0e:da:59:3a:b9:73:18:9f:49:99:b4:e6:0c:57:
         e9:5d:9b:f1:eb:2f:49:24:3f:61:ec:be:ca:e0:48:98:be:c5:
         75:63:e2:b1:d3:85:e2:cf:3d:5c:81:17:fb:69:46:b2:02:72:
         28:2a:6d:45:3c:80:7d:9c:c5:b9:f7:b8:c7:7e:73:c3:18:34:
         ca:bb:a1:19:5a:b0:4f:c3:b1:80:1f:4d:c0:ad:99:4b:b9:0d:
         03:c4:7c:c8:53:59:d2:89:b2:74:f9:19:1e:ec:6c:99:41:3a:
         f4:b2:4e:89:4b:ce:de:15:d3:9a:62:d2:ab:29:ab:4b:be:31:
         de:83:b6:b7:74:2a:c1:71:56:a4:eb:09:b6:5b:89:b6:bf:cc:
         ce:fc:de:d6:71:ee:86:1e:fe:a2:dc:65:03:af:b7:35:0f:3a:
         53:30:a6:26:bf:9a:72:aa:36:3c:87:ef:76:53:30:36:4b:7b:
         d7:55:ce:dd:cb:01:5e:b0:63:51:d9:66:29:e7:14:ca:1a:41:
         c7:f9:e4:26:1c:a3:0b:25:3a:52:46:87:e2:52:ff:4a:1c:a3:
         bd:fe:0c:08:3c:7f:da:c1:95:a0:95:bc:ab:2d:16:60:8c:5f:
         54:75:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:11 2024 by rpki-client on console-fra.rpki-client.org