Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f0a65541-99c4-38a2-9025-3552b812d484.roa
File:                     f0a65541-99c4-38a2-9025-3552b812d484.roa (raw, json)
Hash identifier:          XM6QJOzoPoi39CuqO3fuft/9D1poW/LOSskNWoWF868=
Subject key identifier:   01:8D:8C:12:E5:D2:DB:A4:F2:0E:96:2D:F0:4A:C9:2F:DD:56:32:F5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762287EB3
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f0a65541-99c4-38a2-9025-3552b812d484.roa
Signing time:             Fri 30 Nov 2018 01:08:00 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.16.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:7e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=5583cc3f-2259-4b18-97c4-866f90ab1470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:4d:34:b6:4f:30:57:14:2c:a1:dd:9d:13:
                    fe:dd:11:1e:24:2f:dd:53:87:07:d6:58:95:c0:83:
                    0f:af:c9:6e:a1:39:64:50:e4:b4:9a:8f:9f:64:52:
                    96:c3:e8:49:93:39:c6:7e:7b:6e:c0:cf:01:70:dd:
                    7c:9c:ce:f7:bc:0a:3f:bd:f3:96:02:78:88:f7:8b:
                    57:13:4b:55:13:54:74:58:9b:72:bc:b2:38:e1:fa:
                    57:63:84:72:5f:65:f4:7d:73:c1:03:5f:fd:74:b9:
                    cc:49:06:b1:9d:a4:3d:63:2d:2e:e6:2e:0f:7f:5f:
                    91:a5:a8:ef:3e:d8:12:c6:59:b1:65:e0:9c:69:79:
                    9b:68:82:bd:b2:45:55:99:38:48:11:f6:1e:b8:4c:
                    2b:02:4d:a1:a6:29:ef:68:c8:45:75:f2:d6:8a:24:
                    3c:46:58:ef:06:56:21:ad:57:84:de:0c:35:b4:13:
                    3e:05:fd:ac:a1:f4:52:2b:6d:50:84:b3:b2:c2:ac:
                    ba:d3:0b:70:e5:bc:0b:7b:42:fe:38:b6:69:81:f8:
                    a0:e6:d5:2a:62:1f:c1:79:d0:6d:04:2e:82:90:61:
                    f6:f7:68:04:f9:b3:a9:cd:47:b1:f7:b9:0a:ba:9d:
                    2e:db:7d:fb:a9:b1:17:5e:3c:d2:a5:20:85:c4:04:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8D:8C:12:E5:D2:DB:A4:F2:0E:96:2D:F0:4A:C9:2F:DD:56:32:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f0a65541-99c4-38a2-9025-3552b812d484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:33:d9:30:28:8b:4d:97:af:93:18:2f:24:2c:d4:ac:41:e0:
         3f:a9:9c:e8:04:b9:4b:9f:f9:d6:c6:78:4b:34:c7:b8:3a:b5:
         fa:88:4a:a5:38:36:11:5d:cd:c0:a9:99:d1:d0:12:d9:db:25:
         bc:90:6c:bd:69:a2:9d:77:57:51:68:f2:c7:9d:eb:be:67:24:
         ec:a5:a8:08:91:4a:7d:8b:99:ce:5f:c7:a6:86:43:76:8c:49:
         a8:18:31:cf:15:8b:4a:e1:46:5a:35:0c:15:04:2f:31:24:fd:
         56:52:f1:65:9e:df:6f:cd:45:ca:80:13:bf:cf:ba:96:4a:52:
         e3:71:7c:d5:ae:ff:79:08:8b:83:aa:2a:e5:26:6d:ca:fb:87:
         ad:8a:73:ca:a4:a4:9b:e3:8c:a1:93:7b:89:2e:e0:08:43:9c:
         a1:8e:d4:5b:1a:a5:0a:b2:10:03:e9:f9:ea:4d:47:97:5f:1d:
         29:cb:98:26:98:0a:87:32:74:d6:dc:14:47:18:62:cd:f1:74:
         82:ee:15:c5:db:a5:d3:08:21:bc:53:6f:b7:67:45:e1:72:79:
         e2:6a:b4:01:87:0a:78:ac:7b:e8:f9:25:c3:e7:65:b4:1b:9c:
         10:d5:d7:ea:4d:e7:c4:cb:3c:98:7e:c2:d7:8d:59:e0:09:2f:
         bb:cf:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:17 2024 by rpki-client on console-ams.rpki-client.org