Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc012d79-9d36-3c85-9e37-8127eac1658b.roa
File:                     dc012d79-9d36-3c85-9e37-8127eac1658b.roa (raw, json)
Hash identifier:          P8R7j9RRtDu5YpFqwKH0SerOVEaBuQrdNi/3SLjbN/k=
Subject key identifier:   A0:61:A7:A2:35:8E:92:AB:9C:C8:25:C1:9A:74:82:C8:6B:E4:F1:0B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A821A
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc012d79-9d36-3c85-9e37-8127eac1658b.roa
Signing time:             Thu 02 Aug 2018 21:45:41 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.27.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:82:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=d6f678d5-3bd3-47a3-8f0d-62f929eb42ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:ce:ec:c6:a3:2a:21:f2:89:37:94:de:e3:
                    00:0a:11:53:6a:bc:cc:24:14:21:02:46:e5:5b:3f:
                    67:0e:85:90:ac:08:2d:70:e9:b4:2a:d2:2e:36:11:
                    c8:6e:70:37:19:da:73:e7:d9:bf:b3:70:d8:71:36:
                    72:af:40:54:8d:e9:bd:2d:9a:1e:a9:99:3f:7e:ba:
                    98:48:d7:fc:a5:16:41:b5:2f:b2:9b:8e:0f:31:ff:
                    42:55:59:94:77:1b:4b:78:ce:c6:6b:2e:c6:7b:e6:
                    c0:28:67:f0:00:ce:87:23:d0:c4:03:a9:f9:fc:ab:
                    99:d0:8d:cd:81:79:e0:a3:ea:90:52:cf:14:b5:1b:
                    89:5e:f4:c7:8c:10:e2:5e:6d:92:5e:92:7e:7a:0a:
                    ed:82:e9:54:a2:86:6e:58:0a:42:72:36:30:2c:0b:
                    a5:f9:c4:ec:11:db:97:fe:05:43:d2:ed:6e:f2:c3:
                    2b:85:3d:15:eb:b2:ac:2d:0a:d5:6f:58:09:d4:d7:
                    5e:13:26:70:fe:d7:48:0c:8d:b2:90:9a:f3:cd:c8:
                    14:da:5c:eb:ed:4e:12:d3:90:8d:b1:37:cc:fd:7f:
                    f9:3e:7a:30:b1:c8:82:b0:bb:2b:e8:d7:79:8a:2c:
                    1d:78:2c:c7:5a:e9:f7:a1:e5:44:d0:ba:38:c0:a9:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:61:A7:A2:35:8E:92:AB:9C:C8:25:C1:9A:74:82:C8:6B:E4:F1:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc012d79-9d36-3c85-9e37-8127eac1658b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:1e:0b:da:26:ea:6d:1f:a3:ec:b8:b5:cb:86:c7:f1:19:
         ee:43:c9:4b:e5:93:a9:a4:04:e3:a6:f2:0c:bd:19:22:8e:a1:
         aa:ab:a9:e3:3c:86:bb:5a:8b:8d:53:19:1b:11:e3:9a:73:e3:
         aa:90:90:d1:dd:76:57:80:da:91:43:77:d8:5b:38:b5:84:21:
         5d:ff:84:4f:03:a7:2a:cb:27:3c:25:d5:5c:23:03:28:c0:67:
         5a:bd:0e:b3:e8:83:d6:fe:33:82:0c:d1:ca:37:d2:54:c9:36:
         a6:25:49:c1:0b:a3:07:cf:bb:b3:bb:a8:d3:7f:4e:51:b4:a4:
         32:c7:1c:5a:3e:81:05:91:f9:60:b2:c4:8d:9f:60:eb:24:f9:
         ec:93:ff:61:cf:c7:19:be:81:62:f6:07:fb:73:10:5d:71:3f:
         c7:e3:e2:8f:d9:6f:a1:45:8c:56:20:d3:eb:3c:92:04:20:a6:
         9e:fe:b1:d0:56:5d:ff:b4:4e:7c:90:dc:bf:6d:6a:23:76:0e:
         4f:66:5a:68:01:b4:6e:43:b9:30:df:a4:ff:fb:69:b7:01:ea:
         aa:60:93:d9:7d:aa:a1:2a:d9:15:2e:65:44:e8:6d:7e:a1:f5:
         b5:55:f7:30:5c:40:39:f8:03:bb:04:25:d0:98:10:e0:ee:3b:
         05:c7:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:06 2024 by rpki-client on console-ams.rpki-client.org