Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9ff9b47-61c2-329b-a147-d302cc95e61f.roa
File:                     c9ff9b47-61c2-329b-a147-d302cc95e61f.roa (raw, json)
Hash identifier:          JNEicmDhBhqNiYCyp16GT4AuiWgStaQpKKaOP1XU4g8=
Subject key identifier:   49:2F:9F:A4:06:10:A3:FF:3B:C5:4D:A4:8D:84:BA:C8:1B:91:53:07
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A3A26
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9ff9b47-61c2-329b-a147-d302cc95e61f.roa
Signing time:             Thu 02 Aug 2018 21:45:23 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.24.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:3a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=a1d0dea3-d138-46a3-9cf0-3dd51b159c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e9:45:9e:84:c7:8e:d0:54:a8:52:a0:0b:84:
                    d4:4f:3a:f2:a3:71:a7:d2:e3:e6:89:c5:8e:ab:a4:
                    ff:43:99:79:75:58:89:91:6d:a2:56:9a:62:2e:80:
                    de:fc:c2:47:8a:c2:6e:3f:c9:a1:a0:9d:45:1c:e2:
                    de:76:02:0e:3e:fd:47:0a:4a:86:78:89:42:ee:47:
                    f5:ad:ad:9e:a8:f7:aa:fb:86:82:b4:46:1a:3c:ec:
                    ef:ea:43:56:bb:7b:25:e6:e4:32:3a:cc:21:0a:ed:
                    5c:fa:ac:10:4c:ca:04:8f:b1:cf:e3:9c:d9:6c:45:
                    fd:db:b9:3a:80:32:f1:2c:54:44:aa:d4:ba:a1:70:
                    02:7c:79:61:ce:d9:62:e3:30:d4:6a:f6:06:57:ff:
                    08:a6:3a:c8:3f:7c:52:fb:2d:a7:2c:53:1b:b3:cc:
                    d9:fc:ae:d5:13:2b:d1:85:41:e7:e5:14:a4:13:72:
                    15:d7:ab:ca:6c:a0:f8:32:e4:99:13:28:34:ab:e1:
                    49:e1:cb:e3:40:bf:47:12:56:e4:6d:2f:09:db:d2:
                    c0:64:ed:4a:3b:d0:9a:e2:ac:a1:e3:77:fe:94:eb:
                    9b:cd:71:a9:71:f0:b4:34:ef:31:96:21:76:26:e4:
                    b0:d3:9c:5a:f4:b3:07:94:33:9c:ae:1a:bd:3e:bb:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:9F:A4:06:10:A3:FF:3B:C5:4D:A4:8D:84:BA:C8:1B:91:53:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9ff9b47-61c2-329b-a147-d302cc95e61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:06:86:40:75:90:d1:fa:a4:dd:91:b5:a9:91:7a:3e:7a:f0:
         fc:8e:3a:22:9d:2c:58:4b:9b:e3:0f:d2:55:27:19:a3:c9:1f:
         c9:23:16:83:97:13:7c:b0:b6:bd:61:a7:e8:5e:aa:1f:ae:40:
         e1:ba:a8:b8:14:42:40:4f:6e:0f:3a:34:82:ae:a3:b4:ee:35:
         ef:1b:a6:6f:32:65:e4:0d:f3:a8:ed:83:7d:05:c0:e0:8b:d8:
         d5:62:d9:03:fe:34:07:57:8b:c0:d5:d2:ff:36:a6:e6:44:e5:
         7a:03:75:c1:9b:59:79:ce:2e:96:c2:45:c5:c7:2d:76:6e:f8:
         ef:3f:f9:38:18:0c:d2:ee:58:5b:ed:0b:42:a2:fc:57:74:fb:
         11:81:3a:f3:bd:ed:85:4b:8f:4d:43:bf:61:f1:b2:83:fd:cf:
         09:6e:eb:c1:8f:97:d0:cb:ec:fa:d4:30:5c:0e:51:7b:9e:d7:
         5c:24:24:a8:c5:50:aa:a2:a9:33:d0:f0:be:88:f0:1e:f7:ca:
         b1:08:5f:a4:e8:f9:e8:80:f3:6e:d3:bc:47:88:3c:0a:12:34:
         f2:e2:50:ac:b0:07:15:9c:be:15:93:48:f3:7e:fa:c8:5f:31:
         4f:4f:bc:50:0d:66:34:ce:fd:1c:5a:64:98:67:3d:2c:e6:40:
         a2:03:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:26 2024 by rpki-client on console-fra.rpki-client.org