Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dced454e-565f-3422-9da3-36ced5e8bf80.roa
File:                     dced454e-565f-3422-9da3-36ced5e8bf80.roa (raw, json)
Hash identifier:          lzE7OYHT3+2GLVWyLkXsneanRDFuuPW5+QTM67HiQtQ=
Subject key identifier:   DE:7C:74:A1:B9:3F:27:B6:53:E7:3E:7D:E1:24:50:97:C2:E5:BD:3E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164FC9A5D43
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dced454e-565f-3422-9da3-36ced5e8bf80.roa
Signing time:             Thu 02 Aug 2018 21:45:32 +0000
ROA not before:           Thu 02 Aug 2018 04:00:00 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.25.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:fc:9a:5d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  2 04:00:00 2018 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=f67dde86-8386-459f-94d6-d04d919f37c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:f2:d7:7f:73:9b:31:89:74:90:0a:40:75:
                    95:c6:12:e4:0c:2b:35:be:9b:65:bc:a3:6b:c0:0a:
                    5e:ea:e5:fc:19:cd:70:22:e4:4e:64:d3:23:d0:38:
                    27:1a:54:d7:82:6f:16:1d:91:39:5f:71:02:e2:d3:
                    44:43:61:60:ec:df:3b:2b:75:4f:11:a9:15:0b:82:
                    50:ea:75:92:16:e9:68:ad:dd:ae:be:59:2e:12:c6:
                    7c:30:12:d7:5c:c2:45:49:b0:ed:44:e1:d2:44:df:
                    24:dd:12:c9:9e:ac:3e:ad:e7:b2:8d:e0:1f:3e:fa:
                    b9:f5:0e:26:9f:b4:34:9d:75:f2:81:e9:52:f0:53:
                    05:c6:67:cc:07:a7:5a:16:4d:2a:a6:39:ea:52:fe:
                    19:45:8c:55:56:71:7d:b7:3d:a3:be:7d:90:b0:44:
                    a5:b4:bf:b8:76:49:f7:81:52:fa:68:5b:f5:dc:af:
                    3d:c5:73:d1:50:4c:cd:a9:77:84:1a:f8:96:96:47:
                    67:8b:e6:bf:02:68:09:5e:48:60:58:4e:01:9d:2c:
                    b1:0c:42:b9:28:cf:b6:fa:52:14:59:5e:2c:26:05:
                    de:af:41:bb:d7:8f:94:26:31:0e:28:ff:c0:09:62:
                    6c:08:a1:a2:e3:ac:38:3b:4e:e3:70:58:d2:4c:5a:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:74:A1:B9:3F:27:B6:53:E7:3E:7D:E1:24:50:97:C2:E5:BD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dced454e-565f-3422-9da3-36ced5e8bf80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:87:d4:e8:0e:fd:3e:9e:75:cb:97:1e:1c:75:6c:5f:7c:97:
         43:4b:4d:4b:e5:ab:ea:72:5a:68:ab:6f:06:f8:d9:29:82:79:
         75:4e:a6:63:b3:19:8c:eb:75:c0:f0:bd:6e:ee:6b:87:99:0d:
         b6:ce:4e:51:64:a4:4b:33:1a:c7:18:54:ee:ce:ea:a7:12:d3:
         b9:ba:9f:4e:68:b2:24:a1:b2:05:c3:05:66:cc:b6:26:1f:c1:
         0a:f3:4d:b9:5f:48:93:6d:66:9a:be:07:21:e9:c4:37:db:c1:
         5c:df:1c:c0:ce:65:c9:74:84:82:ff:e8:c7:9c:1a:ca:3a:14:
         9f:29:ed:64:6c:50:6e:7a:da:f2:2e:e8:30:03:25:f7:29:29:
         d2:98:53:fd:d9:4a:4d:24:40:ec:85:95:0c:0f:17:c9:aa:53:
         fa:7a:62:1a:25:52:f1:9d:be:8f:a8:99:d3:cc:09:b6:e2:79:
         18:28:e9:5d:b0:68:88:32:e8:ac:7c:a5:2c:61:3c:93:90:96:
         50:c9:f1:28:a1:ef:11:81:66:00:05:42:63:eb:06:87:fe:2e:
         f4:37:7b:2e:46:09:ee:39:85:3d:57:c8:a4:4e:2f:e9:f5:dc:
         88:de:83:4a:81:b1:22:39:86:8b:61:2c:93:9b:0c:b1:e6:de:
         a0:a9:14:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:47 2024 by rpki-client on console-fra.rpki-client.org