Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad05ae47-3393-3fc4-8cf2-8bc0cbf468f6.roa
File:                     ad05ae47-3393-3fc4-8cf2-8bc0cbf468f6.roa (raw, json)
Hash identifier:          VVdUCHSnoSJisjd7WSyTacig8slu9+RRG2bWaFnTG9M=
Subject key identifier:   23:F7:8A:B9:CF:04:9D:7E:A9:4A:14:EB:6D:55:82:D5:13:23:21:EE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A8145FFAB291EACF29371A4A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad05ae47-3393-3fc4-8cf2-8bc0cbf468f6.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        104.23.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:45:ff:ab:29:1e:ac:f2:93:71:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=beaf692f-eeac-4c79-918a-57908ac27112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:87:68:bf:8e:ba:a0:d6:3c:7a:de:80:98:
                    3d:57:05:80:ae:bb:9f:63:91:66:52:bb:85:1b:db:
                    13:f9:a9:20:77:0c:76:6f:ef:96:ae:88:ab:6c:9b:
                    e7:92:d6:b4:16:d5:76:26:d3:9b:7d:d1:3a:5f:90:
                    8c:0a:8b:6b:98:18:eb:e0:96:10:ca:0d:0c:c3:14:
                    c3:c0:bf:c9:db:4c:4f:03:42:a3:46:64:9f:62:67:
                    db:8b:84:cf:57:50:4f:ab:e4:e5:07:5c:df:fc:3c:
                    cc:79:e8:a1:48:cf:29:29:6e:0d:96:91:18:b1:e8:
                    18:62:98:71:94:2a:34:a7:d2:b6:9d:9c:5b:b8:0b:
                    7a:f5:db:e2:f1:df:3e:0e:0e:ce:ff:c1:a5:7b:a1:
                    83:05:37:56:ff:05:9c:a5:11:2f:ce:9f:da:87:94:
                    09:c9:8e:8f:60:85:ac:7d:3a:1d:d3:03:79:aa:4e:
                    9a:51:6d:4a:0c:63:57:c6:4a:f0:03:e0:57:c4:82:
                    6b:2a:20:fd:41:2a:cc:e4:a0:53:b6:68:02:9c:cb:
                    74:7b:85:02:7f:78:43:aa:c1:04:b6:08:4d:ee:9f:
                    1b:3b:18:a8:6d:ef:1a:06:63:9a:d0:07:e0:ec:50:
                    7a:7b:65:22:80:96:6e:6e:27:5c:e7:ef:6a:32:b0:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F7:8A:B9:CF:04:9D:7E:A9:4A:14:EB:6D:55:82:D5:13:23:21:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad05ae47-3393-3fc4-8cf2-8bc0cbf468f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3f:1f:61:2d:87:c4:df:2d:73:54:c9:a8:a7:62:83:7f:1e:
         ff:60:76:3c:a6:d8:9b:f7:4b:ec:39:45:bf:3d:43:c5:e9:8f:
         6c:2e:34:3f:46:a5:93:ed:55:f0:ad:55:6c:fb:6d:43:9b:e1:
         a2:f7:9b:d0:e4:eb:b4:9e:8a:4c:7a:ed:ec:4c:4d:2b:b2:f8:
         5e:e4:7e:f6:de:1c:64:7e:27:09:be:5c:c6:35:79:ce:16:45:
         8f:60:d7:c6:a5:85:ee:1a:cb:16:f5:43:46:18:f9:69:8b:9e:
         49:02:f3:6d:e1:8b:7e:75:2e:9d:9d:60:b4:43:39:d2:8b:9d:
         c0:14:de:18:76:0b:a5:53:11:9b:b7:df:11:4a:fc:22:56:0d:
         19:a0:40:0f:70:0b:48:06:bc:12:d4:f8:31:8d:db:dd:92:75:
         ad:c9:94:67:a3:1a:a3:61:d1:b5:65:fd:2c:67:99:b2:83:35:
         0c:36:63:73:d4:75:9b:52:97:ba:5c:3b:8d:1e:21:6e:f1:01:
         e1:61:59:42:0b:f4:59:79:66:b9:45:c9:72:14:51:a2:a0:f8:
         35:af:bd:b9:f9:ee:e4:e8:b4:af:94:7e:04:db:03:bf:66:aa:
         ed:c3:b3:1d:25:b9:7e:49:43:e3:b0:b6:60:61:36:4e:56:54:
         a3:5d:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:04:31 2025 by rpki-client