Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fab82ef5-1fbe-3300-b439-36915df574cc.roa
File:                     fab82ef5-1fbe-3300-b439-36915df574cc.roa (raw, json)
Hash identifier:          dlHvYTh02t0YUK1a4UXVlQ0Ik9d7ltj9qglGU7KKwOs=
Subject key identifier:   12:E4:13:E9:A4:35:7D:AC:37:B0:9B:23:13:54:1D:99:A6:2C:F7:E6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676228E52E
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fab82ef5-1fbe-3300-b439-36915df574cc.roa
Signing time:             Fri 30 Nov 2018 01:08:26 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.23.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:e5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=86d3ac9a-9366-4114-831a-5feb7fe38bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:62:85:f0:c9:6d:6b:9e:d3:07:33:e0:af:
                    b2:ed:20:58:7d:fd:67:34:c4:a9:ec:16:6b:4f:e1:
                    82:d3:a9:7a:9d:fd:61:5e:43:bc:d9:0e:c6:29:ea:
                    60:a8:33:e1:82:d8:2f:8a:a7:13:c5:3e:05:44:74:
                    3b:51:5e:c8:55:24:ed:c2:50:d0:9b:56:0b:3e:91:
                    81:52:9e:b5:68:3e:69:f4:17:c1:4e:5c:9d:c4:b1:
                    52:e3:7d:a8:45:5c:a6:af:56:4f:4c:2f:ef:14:fc:
                    5e:9f:0c:49:8a:59:4a:f0:8d:f0:25:3f:1d:cf:2c:
                    07:54:3b:a5:10:27:05:ed:05:3c:de:49:4c:9d:3c:
                    e3:8e:40:aa:8d:57:34:87:17:67:3c:12:10:c3:b7:
                    de:45:a9:53:b9:82:b2:89:c6:f9:be:ba:04:04:4c:
                    e2:66:90:6d:32:83:cb:a8:fc:82:79:63:41:ef:2e:
                    6c:e7:98:52:8a:8e:70:db:b5:fd:3b:d6:58:42:68:
                    c9:de:cc:ea:54:56:cf:af:f5:92:1b:bc:b6:c8:c4:
                    a3:90:ea:2c:bd:89:49:8f:52:04:da:e0:66:5a:61:
                    bb:3c:b8:99:f1:05:88:de:91:5f:48:49:a2:21:ae:
                    d0:ec:0d:0b:23:37:53:3e:4d:c1:0b:7b:1f:54:c0:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E4:13:E9:A4:35:7D:AC:37:B0:9B:23:13:54:1D:99:A6:2C:F7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fab82ef5-1fbe-3300-b439-36915df574cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:7d:6d:34:fc:34:a7:70:8d:b4:19:e7:2a:a1:04:c8:63:56:
         6c:7a:99:11:3e:84:a9:4a:27:e2:e9:c4:d2:95:ba:9a:03:1f:
         f3:81:65:04:27:cc:52:39:29:eb:e0:de:ef:b6:18:3e:8c:e0:
         4f:8c:a2:75:69:81:a6:72:b7:4d:11:e2:23:53:28:18:d7:fa:
         54:2b:92:07:20:ad:25:79:7f:93:e2:ea:24:4e:11:48:7f:ea:
         d6:b6:f2:42:89:e1:c2:83:14:d5:03:36:92:7b:60:7c:78:1f:
         6e:0b:a4:44:91:f0:94:64:5c:69:d6:ef:0a:73:5c:f7:79:e5:
         ed:81:8b:0a:07:dc:89:e4:38:78:85:c6:e6:cb:9e:7e:f0:e9:
         fa:0a:d7:a7:14:35:44:e1:9a:60:f5:6d:0e:0d:f7:30:b9:42:
         60:6e:8e:df:d2:c8:eb:cf:e6:9c:56:da:99:07:39:57:79:eb:
         26:e0:fb:02:c3:a5:fb:02:56:cb:3e:9f:b6:f1:9c:3e:fa:d8:
         f4:a7:c0:a1:43:34:2e:04:86:88:8b:e7:d2:35:91:9a:44:a5:
         6a:0a:1d:ee:19:da:9a:3c:7b:b0:d0:e2:7a:bb:32:bb:4e:c0:
         dc:2f:84:6c:e7:9f:b1:2f:01:a9:70:28:8e:65:15:9a:c6:b7:
         66:13:db:c7
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Io5S4wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDg2
ZDNhYzlhLTkzNjYtNDExNC04MzFhLTVmZWI3ZmUzOGJmMDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMZkYoXwyW1rntMHM+Cvsu0gWH39ZzTEqewWa0/h
gtOpep39YV5DvNkOxinqYKgz4YLYL4qnE8U+BUR0O1FeyFUk7cJQ0JtWCz6RgVKe
tWg+afQXwU5cncSxUuN9qEVcpq9WT0wv7xT8Xp8MSYpZSvCN8CU/Hc8sB1Q7pRAn
Be0FPN5JTJ08445Aqo1XNIcXZzwSEMO33kWpU7mCsonG+b66BARM4maQbTKDy6j8
gnljQe8ubOeYUoqOcNu1/TvWWEJoyd7M6lRWz6/1khu8tsjEo5DqLL2JSY9SBNrg
Zlphuzy4mfEFiN6RX0hJoiGu0OwNCyM3Uz5NwQt7H1TA7IcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQS5BPppDV9rDewmyMTVB2Zpiz35jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2ZhYjgyZWY1LTFmYmUtMzMw
MC1iNDM5LTM2OTE1ZGY1NzRjYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGgXcDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAr31tNPw0p3CNtBnnKqEEyGNWbHqZET6EqUon4unE0pW6mgMf84FlBCfMUjkp
6+De77YYPozgT4yidWmBpnK3TRHiI1MoGNf6VCuSByCtJXl/k+LqJE4RSH/q1rby
QonhwoMU1QM2kntgfHgfbgukRJHwlGRcadbvCnNc93nl7YGLCgfcieQ4eIXG5sue
fvDp+grXpxQ1ROGaYPVtDg33MLlCYG6O39LI68/mnFbamQc5V3nrJuD7AsOl+wJW
yz6ftvGcPvrY9KfAoUM0LgSGiIvn0jWRmkSlagod7hnamjx7sNDiersyu07A3C+E
bOefsS8BqXAojmUVmsa3ZhPbxw==
-----END CERTIFICATE-----
Generated at Sat May 11 02:48:13 2024 by rpki-client on console-fra.rpki-client.org