Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da6faa31-3ae5-380c-90fc-3d37b41ad9e6.roa
File:                     da6faa31-3ae5-380c-90fc-3d37b41ad9e6.roa (raw, json)
Hash identifier:          KhMeOgqrASNLB3cXI1m0qUhVwKsN4+gVQM6rpqOZcOw=
Subject key identifier:   0B:95:BB:85:16:64:ED:B1:5A:A2:80:4E:5E:5A:DE:56:02:CC:54:9A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164F6CB44A6
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da6faa31-3ae5-380c-90fc-3d37b41ad9e6.roa
Signing time:             Wed 01 Aug 2018 18:41:13 +0000
ROA not before:           Wed 01 Aug 2018 04:00:00 +0000
ROA not after:            Fri 30 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.27.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:f6:cb:44:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  1 04:00:00 2018 GMT
            Not After : Jul 30 04:00:00 2027 GMT
        Subject: CN=9928c579-b89a-427d-9ddc-d744a767f01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:93:a3:5d:89:7c:c6:bd:74:fa:cb:be:0d:
                    35:de:fa:e8:7e:bd:cb:a4:a2:23:0d:ab:ef:4e:31:
                    65:57:65:9d:03:9d:68:4d:7d:82:f3:c9:75:5b:7e:
                    10:c3:a2:86:12:36:c8:49:82:01:60:cb:7f:52:b3:
                    e0:8a:30:a8:2d:29:40:ee:81:2c:b5:20:ff:da:4d:
                    75:cd:46:92:2c:3a:5d:da:39:4c:a1:07:5e:a0:71:
                    10:6f:f0:58:92:90:89:e9:c7:c4:47:13:cc:55:3f:
                    4d:cd:d8:69:a2:bd:51:ca:7a:6e:93:56:b7:dc:d4:
                    db:74:2f:dd:1c:96:98:d7:25:b7:cb:e9:29:89:01:
                    95:78:6a:84:53:06:e3:1b:5d:41:44:8c:e1:fd:93:
                    51:8f:87:28:b5:eb:30:65:36:ed:bc:34:8a:fe:ba:
                    75:4d:d4:0f:cf:99:79:80:73:ad:20:96:2f:de:28:
                    ee:da:82:8c:61:a5:09:a9:d3:6b:6f:60:11:ca:90:
                    88:c0:48:05:78:30:aa:00:a8:ad:94:07:ee:66:43:
                    f5:61:6a:93:1e:99:46:22:d0:5b:6c:0a:e9:9f:f1:
                    c7:b7:74:d8:53:b0:77:a0:5d:a9:07:b0:9e:bb:21:
                    f2:17:97:ab:f6:72:39:b3:f0:e5:b8:d8:bb:da:b4:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:BB:85:16:64:ED:B1:5A:A2:80:4E:5E:5A:DE:56:02:CC:54:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da6faa31-3ae5-380c-90fc-3d37b41ad9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:d7:e7:34:3e:9f:6c:7a:f0:c9:4c:a0:2d:76:f5:e2:9a:
         17:3b:80:00:be:5b:75:1b:b6:3b:a6:84:1a:b3:0b:8f:b6:8b:
         4b:38:88:35:df:42:d9:d7:f5:24:14:b6:cd:11:40:f6:0e:f1:
         d5:40:56:ee:a7:63:77:60:73:1c:46:42:89:5a:0e:42:cd:b7:
         44:67:cb:45:76:62:9c:e9:aa:8e:d8:b0:ab:41:ce:b1:b3:36:
         46:21:bc:9a:38:14:fd:f9:53:e6:af:85:54:c5:15:db:48:6b:
         07:9a:50:bf:ab:15:7e:77:76:fd:26:e3:08:f2:0f:ea:9e:1c:
         7d:bd:09:ea:07:6f:ab:bc:3d:86:f6:37:82:42:c8:d8:f2:fb:
         6d:4f:6b:30:cd:34:2b:f1:5e:fb:30:65:13:cd:56:cb:c8:4f:
         1e:bf:f9:7f:20:d0:49:58:11:19:4c:2f:a3:06:2f:f5:72:25:
         d2:0b:5b:74:92:1b:9e:1a:bf:37:d0:d4:14:19:05:b5:f4:48:
         d8:19:31:ec:33:16:3e:05:11:ac:e6:10:67:14:0a:ea:57:ee:
         88:6b:b5:f1:55:b5:1a:ab:49:c8:81:4b:67:61:b3:60:85:34:
         d7:19:2e:7d:c7:98:47:93:fb:9d:f3:4a:a4:bc:f8:cf:bd:55:
         34:ac:36:fc
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZPbLRKYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODA4MDEwNDAwMDBaFw0yNzA3MzAwNDAwMDBaMC8xLTArBgNVBAMTJDk5
MjhjNTc5LWI4OWEtNDI3ZC05ZGRjLWQ3NDRhNzY3ZjAxYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALMpk6NdiXzGvXT6y74NNd766H69y6SiIw2r704x
ZVdlnQOdaE19gvPJdVt+EMOihhI2yEmCAWDLf1Kz4IowqC0pQO6BLLUg/9pNdc1G
kiw6Xdo5TKEHXqBxEG/wWJKQienHxEcTzFU/Tc3YaaK9Ucp6bpNWt9zU23Qv3RyW
mNclt8vpKYkBlXhqhFMG4xtdQUSM4f2TUY+HKLXrMGU27bw0iv66dU3UD8+ZeYBz
rSCWL94o7tqCjGGlCanTa29gEcqQiMBIBXgwqgCorZQH7mZD9WFqkx6ZRiLQW2wK
6Z/xx7d02FOwd6BdqQewnrsh8heXq/ZyObPw5bjYu9q0jzECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQLlbuFFmTtsVqigE5eWt5WAsxUmjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2RhNmZhYTMxLTNhZTUtMzgw
Yy05MGZjLTNkMzdiNDFhZDllNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgbgDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAkfHX5zQ+n2x68MlMoC129eKaFzuAAL5bdRu2O6aEGrMLj7aLSziINd9C2df1
JBS2zRFA9g7x1UBW7qdjd2BzHEZCiVoOQs23RGfLRXZinOmqjtiwq0HOsbM2RiG8
mjgU/flT5q+FVMUV20hrB5pQv6sVfnd2/SbjCPIP6p4cfb0J6gdvq7w9hvY3gkLI
2PL7bU9rMM00K/Fe+zBlE81Wy8hPHr/5fyDQSVgRGUwvowYv9XIl0gtbdJIbnhq/
N9DUFBkFtfRI2Bkx7DMWPgURrOYQZxQK6lfuiGu18VW1GqtJyIFLZ2GzYIU01xku
fceYR5P7nfNKpLz4z71VNKw2/A==
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:45 2024 by rpki-client on console-fra.rpki-client.org