Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb4c60f4-10cc-396c-b8a0-c7c4d40674a6.roa
File:                     fb4c60f4-10cc-396c-b8a0-c7c4d40674a6.roa (raw, json)
Hash identifier:          /6hhGBTs5rU+9uvwSaCAGAl6UOnkdZb+w9//u4XuRrY=
Subject key identifier:   15:04:E1:80:27:F3:A4:16:54:49:61:C8:B1:BC:8B:82:1A:52:F8:54
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762288DF1
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb4c60f4-10cc-396c-b8a0-c7c4d40674a6.roa
Signing time:             Fri 30 Nov 2018 01:08:04 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.17.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:8d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=b0b83398-ef73-48a1-976f-3194dd1daf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:63:90:46:32:72:17:0f:68:02:25:29:be:
                    0c:47:73:94:0e:16:fa:0e:78:08:6b:3c:45:25:99:
                    14:18:b4:a3:82:8a:bf:05:ce:19:f6:8e:33:98:1b:
                    d7:17:02:cf:fb:ac:92:e7:95:81:1b:dc:e2:40:a7:
                    c1:c8:2b:61:15:25:9a:f6:3f:0d:79:89:f0:42:e6:
                    61:8e:fd:f1:07:39:3e:06:11:9e:8d:e1:67:b3:c0:
                    08:5b:4d:76:35:60:88:6d:e9:7a:eb:76:08:bc:22:
                    67:2c:f4:fb:61:c9:2d:42:67:eb:d2:3c:ba:29:8b:
                    07:01:f3:e3:14:e2:2e:ae:1a:a3:16:af:0b:2f:a5:
                    ff:6d:27:9f:a9:eb:cc:ab:c8:c0:ee:83:98:3a:bb:
                    60:6b:3f:30:f7:c3:ad:bc:29:96:b6:5a:79:32:14:
                    c0:b6:c8:e7:4b:5b:ad:ec:4b:3f:b4:62:c9:5e:5c:
                    a1:f3:f1:e1:1d:e5:36:87:d0:26:e5:7a:30:14:29:
                    7a:da:64:9f:6a:ad:8d:6d:64:83:0c:f9:f3:12:79:
                    d8:1f:0f:04:19:9b:05:e1:b2:f3:c0:9b:d6:09:47:
                    63:d9:3f:e0:e8:a6:4f:06:d6:d0:f8:be:7e:ea:6d:
                    d4:f0:19:90:9e:96:d4:1e:20:8b:fb:17:91:b4:78:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:E1:80:27:F3:A4:16:54:49:61:C8:B1:BC:8B:82:1A:52:F8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb4c60f4-10cc-396c-b8a0-c7c4d40674a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4e:f0:1a:17:63:31:5e:a8:6f:d1:c9:e8:8e:18:f6:c1:d3:
         5a:ca:53:e8:3a:c4:b6:fb:ce:77:76:50:68:4e:10:c9:d1:f4:
         5f:c0:ca:14:db:af:eb:9a:7c:e0:28:bb:5b:04:6c:93:dd:d0:
         82:2c:1e:a8:bd:9c:b0:4b:55:80:27:59:d2:1f:ea:f8:3e:f7:
         bd:fe:35:bf:86:59:76:25:42:b1:81:c5:33:02:06:1d:7b:02:
         0a:2c:d1:1e:39:8c:03:4c:25:43:16:19:5b:79:7d:11:ec:98:
         2b:29:01:66:d4:03:9c:e2:56:aa:8a:74:a2:0b:70:b7:76:1a:
         47:ba:2f:6a:1b:98:b0:15:45:fc:cd:4e:9e:0f:3f:4a:6e:df:
         e2:83:97:c9:63:11:56:08:2f:b0:72:c7:23:2b:62:12:16:78:
         1f:da:6b:4e:d6:e5:a9:9d:0f:5f:16:31:a1:ef:43:65:39:5c:
         88:78:6f:71:e0:8b:c9:3a:c3:bc:19:58:4c:67:df:e5:d5:22:
         35:23:23:4e:86:38:c9:d9:49:a6:3f:0c:e8:f7:af:28:51:ed:
         10:f3:a7:0d:19:38:3a:a9:b1:f7:ae:82:d6:fc:c2:ee:cd:f3:
         d2:71:90:2b:d2:00:5c:9d:5d:ca:83:88:4e:06:56:43:0c:69:
         76:f1:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:51:10 2024 by rpki-client on console-ams.rpki-client.org