Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac3b67e-ef68-398d-8199-84a5029a6cb2.roa
File:                     fac3b67e-ef68-398d-8199-84a5029a6cb2.roa (raw, json)
Hash identifier:          Q97irkWOjON0LeAVFYC+ZdRypNC5yxTkVHXP32rI6Yg=
Subject key identifier:   C0:E2:EF:67:D1:5D:6B:B2:DB:31:C3:FA:8B:4F:DE:0C:BA:16:86:66
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622868BA
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac3b67e-ef68-398d-8199-84a5029a6cb2.roa
Signing time:             Fri 30 Nov 2018 01:07:54 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.20.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:68:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=64504d4e-cdfe-4eb8-9b3e-b5c47ecf28d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:30:ef:40:84:b2:26:56:99:43:f1:6c:32:
                    62:72:48:14:87:ee:6e:20:c3:2b:2e:92:ba:9c:3a:
                    0c:b2:d4:4a:2e:23:34:ce:fa:94:ad:20:b2:c5:44:
                    d3:f0:d4:07:6e:11:17:60:76:b8:76:bf:f3:f4:07:
                    fb:a0:5f:9b:e8:95:c2:d2:5f:32:9f:3e:ea:b7:52:
                    f2:87:6e:cc:25:14:b2:19:d4:10:12:aa:ef:c9:93:
                    70:2d:ff:f9:32:2e:b6:b1:c5:97:07:58:77:b0:33:
                    0e:17:f3:d2:b3:b2:f4:f2:36:4a:ba:bc:84:6b:a2:
                    6b:a1:5f:d8:e9:76:8d:fa:ec:a7:2d:c7:de:14:2e:
                    b0:ba:c6:18:f0:0f:6f:b1:88:30:35:83:5d:3c:45:
                    a6:1b:97:4c:3b:31:af:49:60:81:61:f5:e7:b2:8d:
                    5a:64:05:61:60:f8:db:19:27:6c:ed:2e:46:4f:c6:
                    6c:18:1b:46:e5:62:66:ff:e2:1c:85:2d:97:ad:cf:
                    da:c6:af:b3:b4:04:d7:6e:46:53:b0:b7:fe:59:3f:
                    21:53:c5:3d:5c:36:72:cb:3c:14:ef:2c:f3:66:50:
                    d2:ce:7f:21:f6:ce:d9:84:99:77:78:2d:20:43:c8:
                    34:5c:39:71:c0:98:07:9c:35:a8:51:98:32:fa:31:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:EF:67:D1:5D:6B:B2:DB:31:C3:FA:8B:4F:DE:0C:BA:16:86:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac3b67e-ef68-398d-8199-84a5029a6cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:d6:d9:ea:e4:38:2b:be:f2:43:3e:2f:5a:b5:64:1c:9b:d7:
         66:9c:32:aa:e5:ec:ea:fe:81:21:76:1e:4f:e2:b6:95:55:be:
         70:66:16:5e:7c:b8:50:f7:44:3f:b0:f0:be:ca:3d:80:62:42:
         e3:09:57:a2:20:10:10:a1:bc:8d:78:ed:0b:af:09:e8:31:02:
         e0:91:4e:de:d2:48:5e:08:82:1d:03:59:f1:25:8a:d0:d6:b3:
         78:8c:10:65:44:74:74:16:44:02:80:5c:60:05:d0:47:f9:3f:
         59:38:e5:b7:ae:40:40:e9:6b:3a:96:b9:c6:de:09:38:e5:92:
         52:12:0c:af:ca:28:bb:ef:b8:3a:20:66:f8:d2:06:65:ee:37:
         04:43:0f:5b:42:53:94:e5:71:1c:69:04:41:5c:59:04:78:c3:
         b0:e1:02:64:13:15:e9:56:83:6c:23:57:6f:15:b0:86:39:6f:
         b4:98:80:e4:0f:a1:53:23:2a:4f:ef:6e:2f:44:3b:07:19:75:
         06:69:f1:47:97:39:8a:3e:14:23:df:6a:6a:7d:68:09:2e:e4:
         ec:67:3e:1b:b8:82:3d:2e:91:1c:b5:c7:79:9e:54:41:1b:52:
         eb:06:b9:6b:13:6f:0a:a4:26:a7:c8:21:2d:e4:21:3e:c4:59:
         0c:ba:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:17 2024 by rpki-client on console-ams.rpki-client.org