Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c95f3b5b-9325-366a-89ab-5d942949fbab.roa
File:                     c95f3b5b-9325-366a-89ab-5d942949fbab.roa (raw, json)
Hash identifier:          TTVNW9l16P9o9OBySl+1xq6vfhuGbrPjTR+AfLclMIU=
Subject key identifier:   2B:3F:44:2B:7E:56:75:7B:92:E9:A5:F1:BC:A3:F8:0E:A4:CA:0C:EB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A5F99
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c95f3b5b-9325-366a-89ab-5d942949fbab.roa
Signing time:             Thu 02 Aug 2018 21:45:32 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.25.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:5f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=d1647154-9c58-49d9-9e4e-f14d9741b522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:58:4c:0d:41:e0:11:7d:45:01:0d:6a:5f:
                    f8:fa:3d:79:58:32:15:29:6d:cf:86:35:36:25:a9:
                    2f:5e:d8:eb:4a:7e:b5:ae:88:81:34:61:ad:93:b9:
                    05:1b:40:c2:37:dd:69:9f:f4:6c:e6:eb:83:bd:57:
                    9c:20:b3:4a:f4:7c:cc:7b:b6:55:b5:4d:32:10:1e:
                    4b:d2:16:22:fc:ba:e6:be:d2:12:6a:53:1b:59:02:
                    1d:cf:eb:11:79:87:4c:ef:9a:14:68:26:da:37:b0:
                    16:de:70:85:db:42:e0:1e:2d:da:19:6d:a7:54:35:
                    79:c4:9e:d6:e0:9f:dc:42:00:ad:2d:0a:d1:3b:67:
                    ab:c7:c9:b4:fc:96:10:02:7f:e9:a0:4e:88:e3:0f:
                    3c:50:26:32:dc:c8:a9:9f:04:94:60:ce:af:ed:8d:
                    72:d0:84:9b:b6:e8:d3:d4:3a:59:68:e6:19:fb:e9:
                    f2:90:0f:30:33:f4:60:20:31:43:a1:76:3b:40:a9:
                    46:76:15:2c:98:aa:12:28:cf:f5:35:c9:4a:88:e4:
                    f8:71:d7:43:75:0f:38:b1:cf:3f:9e:f7:d2:a2:77:
                    3a:6b:a1:73:cb:46:12:09:82:02:86:46:53:7c:f9:
                    d2:50:17:83:79:e4:29:1c:c0:55:a9:07:8c:d3:a1:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3F:44:2B:7E:56:75:7B:92:E9:A5:F1:BC:A3:F8:0E:A4:CA:0C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c95f3b5b-9325-366a-89ab-5d942949fbab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:8c:74:73:19:f3:16:7d:e1:10:87:c5:95:a7:6f:51:b2:
         96:82:c8:34:6c:57:36:2f:f6:fe:8b:d6:56:ec:4b:1f:8d:34:
         44:91:e6:e9:56:3d:8b:20:2f:e1:8d:52:57:48:b4:28:7b:1d:
         6d:dd:c9:40:87:20:12:19:b7:97:8c:90:da:b3:fe:b7:bd:39:
         6a:fe:d9:78:91:ed:0e:58:81:24:86:59:8c:94:4f:35:e2:24:
         f8:c9:f9:4b:8d:8c:94:dc:67:69:5c:29:94:3d:0e:70:2d:26:
         3b:56:e7:34:99:5c:a8:70:b3:bd:18:e6:33:8e:83:6a:20:c6:
         06:98:d2:13:66:ea:53:8c:33:5d:cb:1b:dc:9b:28:0f:76:ff:
         ef:13:ee:21:85:f5:d4:e2:63:8f:a6:c6:df:2f:9a:60:33:79:
         6a:7e:3e:d3:11:52:6e:ae:1d:15:ca:74:cb:73:7f:0a:8f:c6:
         63:e1:ef:16:39:2b:34:2e:b6:52:5a:6a:3c:9e:f9:26:0d:cc:
         59:ce:d2:5e:9a:f3:c1:3e:f7:31:37:8b:e5:d0:9c:c0:d9:28:
         10:e4:3f:db:80:0b:e4:ce:fc:ff:dd:88:b3:69:1f:91:7f:f4:
         31:b8:ac:9e:00:3c:09:6e:ea:3f:61:61:01:44:05:74:8c:18:
         dd:c7:4a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:06 2024 by rpki-client on console-fra.rpki-client.org