Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd3a150e-cdcf-30cd-83cb-4f4cd3a17afb.roa
File:                     cd3a150e-cdcf-30cd-83cb-4f4cd3a17afb.roa (raw, json)
Hash identifier:          BNyq1m5nuLVpjyhU27nWzCjIzANrBmTtx9pdhpwQB+Y=
Subject key identifier:   2A:22:60:B3:19:59:F5:31:86:7B:A6:A7:50:09:EC:C3:EC:6B:44:3B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228E69D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd3a150e-cdcf-30cd-83cb-4f4cd3a17afb.roa
Signing time:             Fri 30 Nov 2018 01:08:26 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.19.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:e6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=962cf686-3954-44a2-93b3-74e0118e9b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:44:6f:52:a1:ca:ab:07:8b:45:f8:17:77:
                    20:37:32:27:b7:64:51:a7:88:af:43:eb:0e:e6:4a:
                    da:2b:51:a1:96:87:d1:bf:8c:0d:e8:23:f4:8d:d6:
                    2f:08:25:c1:84:3e:65:ce:3b:b0:8d:61:5a:93:eb:
                    1d:67:23:81:d6:29:97:76:1a:80:99:ca:2a:62:59:
                    d9:b1:01:5a:97:e9:8a:dc:5b:3f:df:bf:96:1f:7e:
                    e3:99:79:e7:9d:14:00:2e:9d:2f:bd:4b:1b:4c:99:
                    91:86:dd:e5:06:21:49:9b:5e:20:39:bc:ef:43:2e:
                    6e:c1:b9:66:1f:15:55:64:8b:7a:34:f6:34:fb:97:
                    a4:15:b2:39:cd:13:d0:d7:28:1e:5c:fa:22:f2:ee:
                    8d:54:ee:08:82:46:62:a1:05:06:03:ca:7e:71:25:
                    49:e2:82:3e:57:ea:4d:27:a0:6b:e7:c1:2a:17:2d:
                    5f:58:9b:88:bc:77:26:ae:40:43:14:44:33:4d:ea:
                    ee:08:5d:dd:27:4d:91:ec:8f:9e:db:76:ac:c0:2e:
                    c8:d4:03:00:05:18:ba:2d:f2:54:8a:28:91:4b:71:
                    bf:17:04:4c:df:5d:c8:83:4e:51:63:6a:30:87:f8:
                    5f:91:ca:c6:18:8b:bb:c6:d1:48:16:6f:10:ed:b4:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:60:B3:19:59:F5:31:86:7B:A6:A7:50:09:EC:C3:EC:6B:44:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd3a150e-cdcf-30cd-83cb-4f4cd3a17afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:14:a8:5b:aa:84:14:4e:b7:76:7a:30:07:5b:24:33:76:
         fe:9b:5e:05:37:5b:63:32:18:e9:a7:b5:da:12:d5:2c:dd:90:
         02:82:bd:a4:c9:2a:ae:31:1a:f8:3a:a2:dd:0c:9a:6f:4a:34:
         fd:0b:2e:b5:c4:98:a1:ce:cf:9a:11:a4:29:cf:d7:74:14:24:
         28:d5:b3:93:1e:3e:1c:31:8a:03:9d:f6:cf:7a:38:47:fd:ce:
         23:8a:fb:c2:cb:be:44:81:4c:b8:30:35:9a:6a:71:cd:f4:13:
         7f:04:9f:59:c3:08:71:83:e2:aa:97:c6:0c:40:a2:00:a1:e7:
         71:b4:17:cd:36:03:4e:17:65:e7:66:61:9a:91:6b:41:e2:dc:
         d7:6c:91:9c:21:7c:0b:23:38:9c:71:37:97:a4:df:1f:8b:26:
         62:66:d3:af:54:f8:3b:2f:d1:dd:59:1f:40:0e:74:45:58:fa:
         76:ec:fc:83:c3:2d:4f:39:cb:40:54:2f:3e:15:9c:a5:77:99:
         6e:3f:43:39:9c:41:71:ce:b4:e1:c9:d5:8c:50:b4:6d:d0:42:
         af:d8:6c:56:d3:8e:a7:f8:1e:6d:e1:0a:7a:20:b6:ba:d0:36:
         af:09:95:1d:59:3a:1a:63:a1:17:f7:e7:5b:b9:22:36:30:d0:
         2d:58:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:14 2024 by rpki-client on console-ams.rpki-client.org