Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9e9b998-1974-32ca-b9fc-3b6a1edef1ba.roa
File:                     c9e9b998-1974-32ca-b9fc-3b6a1edef1ba.roa (raw, json)
Hash identifier:          Ax4+Ho/7zstsqoFQqu+Q/8eidgDr6HhhVZJ9d/1SiLc=
Subject key identifier:   D0:C4:2F:11:E5:DF:30:EA:01:2C:DC:AE:D0:8A:CD:CD:3C:E1:A1:2F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1703234A1F2
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9e9b998-1974-32ca-b9fc-3b6a1edef1ba.roa
Signing time:             Tue 11 Feb 2020 03:04:35 +0000
ROA not before:           Tue 11 Feb 2020 05:00:00 +0000
ROA not after:            Sat 29 Apr 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        104.22.16.0/20 maxlen: 20
                          104.22.32.0/20 maxlen: 20
                          104.22.48.0/20 maxlen: 20
                          104.22.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:32:34:a1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 11 05:00:00 2020 GMT
            Not After : Apr 29 04:00:00 2028 GMT
        Subject: CN=caa0406b-54c6-48fa-b683-470c57845262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:39:07:4d:f9:8d:eb:3f:ae:6b:ee:c5:75:0d:
                    22:03:ed:87:64:79:7e:cd:40:2f:86:68:9b:fb:3e:
                    86:9d:ec:4c:db:9e:d2:22:f6:a9:28:5c:63:55:f9:
                    85:e9:24:01:3f:14:64:a2:49:20:a9:e0:10:bb:85:
                    a8:30:bd:ea:8d:4e:58:02:22:83:02:99:80:8b:37:
                    b1:59:b0:22:a2:9f:11:35:c7:e6:a6:4d:16:cd:5c:
                    99:47:e4:b1:ca:16:f1:84:0a:d8:82:7d:3a:46:bb:
                    17:70:50:20:24:ee:04:66:e5:4d:c2:bf:68:9b:ef:
                    b1:1c:c9:5a:ee:e2:f1:50:49:1f:f2:e6:03:cc:48:
                    82:ea:58:d1:1c:82:93:c5:e8:84:84:d9:39:00:32:
                    c4:21:77:e6:60:2d:1e:c4:f5:ef:84:1d:d0:42:bf:
                    15:bb:40:3d:d9:fa:34:54:3a:a5:35:26:f8:ba:56:
                    77:09:d3:a1:54:28:36:81:01:1a:19:d4:66:0b:43:
                    51:69:9d:32:b4:22:44:9d:11:a4:af:e1:39:70:85:
                    a9:cc:a0:7d:ec:69:94:42:c3:76:11:dc:14:48:6e:
                    5f:c4:68:ec:a3:c6:e1:00:7c:db:78:72:78:57:50:
                    3c:8f:e3:f6:98:00:b4:11:8d:bd:44:5f:47:c7:de:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C4:2F:11:E5:DF:30:EA:01:2C:DC:AE:D0:8A:CD:CD:3C:E1:A1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9e9b998-1974-32ca-b9fc-3b6a1edef1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.16.0-104.22.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:8a:e9:39:8a:e9:4a:2d:57:08:f7:2e:22:32:c9:76:e0:
         17:c3:f6:a4:e1:41:68:26:89:a8:2d:51:6f:c0:d3:01:57:c1:
         d8:9a:4f:3d:a8:8c:3e:f1:66:06:22:16:dd:2c:82:3b:82:49:
         8e:b3:cc:f5:2c:89:8a:99:38:64:7b:4c:ea:06:6f:02:da:a8:
         e5:54:19:3e:6f:91:bc:ac:2d:3f:c0:83:17:12:a8:32:72:f2:
         de:ff:1a:82:28:81:4f:cb:ee:57:7d:88:c8:67:8e:3b:29:43:
         9c:64:65:2e:22:04:05:3f:0b:0d:fe:43:a8:26:87:c4:62:2e:
         12:8e:f6:4f:41:50:c0:89:ee:d7:2e:01:43:d7:83:72:4c:a5:
         f9:28:04:54:ef:91:c9:ea:51:c4:92:58:9d:7c:4d:60:ae:7b:
         ca:c8:21:b6:fd:46:13:a5:22:b4:7d:eb:1c:75:d0:ca:93:df:
         c0:28:a4:b3:bc:09:d0:7d:d6:97:02:ff:41:c2:94:eb:88:11:
         79:36:65:1e:54:f4:30:83:c9:60:88:85:cf:e0:12:20:a6:e3:
         cc:1a:2e:9e:37:e3:0a:a4:65:0f:19:d7:19:9b:e9:6b:90:3e:
         44:04:97:d4:2d:c2:a5:bf:97:e7:eb:e8:82:b2:10:55:75:a7:
         27:37:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:05 2024 by rpki-client on console-ams.rpki-client.org