Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa
File:                     02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa (raw, json)
Hash identifier:          Q90PTsU0vpZ7hJHACR6WGC3GBn/wWK6Chs/vQZHT1Tc=
Subject key identifier:   47:7B:F8:6A:5F:48:2F:A6:ED:8B:92:47:FF:95:D8:7A:50:BE:C3:58
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C01D4791200612BD2FE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        104.31.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:01:d4:79:12:00:61:2b:d2:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=d88e2d00-659c-40df-b74f-c63eb3f09fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:b5:aa:ae:22:d2:65:28:71:79:e5:f2:87:
                    c6:b7:43:ad:8b:f9:c3:7d:1b:ac:05:f8:e8:07:98:
                    17:7f:3f:30:40:b4:84:ee:ff:71:60:70:33:d7:9b:
                    14:16:8c:a5:9e:07:4f:cf:82:b3:92:48:57:aa:6b:
                    87:29:a8:05:4d:6f:2f:12:ec:76:6f:2e:e1:79:66:
                    3e:93:41:a7:7d:dd:ef:c3:97:be:5f:aa:8b:9d:06:
                    46:e8:7e:4b:3a:1b:92:5f:63:7b:35:09:01:b7:7d:
                    58:5a:46:50:69:8f:15:5a:4b:dc:7f:eb:ed:bc:e3:
                    e8:8c:86:94:98:4a:62:0e:51:65:ba:d7:2a:4e:88:
                    5c:15:86:d0:e3:1f:da:ab:0d:a4:0c:0c:a2:62:ec:
                    fd:e8:03:08:99:f7:36:c5:ca:41:07:da:ef:1e:cc:
                    76:7a:8a:ed:90:d8:1b:e8:78:a1:13:82:b4:49:cd:
                    94:00:98:6d:6a:b2:db:df:ac:4c:12:4c:28:df:46:
                    76:b3:81:5f:e2:c7:c8:48:29:78:f9:0a:ed:7c:79:
                    67:f1:28:b9:88:6d:87:5a:f3:34:c9:8d:3a:47:9e:
                    96:6f:e2:a6:29:46:c4:a4:f9:54:05:79:fd:9d:fc:
                    77:73:d0:92:e4:37:90:29:42:6d:ce:19:66:c4:fe:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:F8:6A:5F:48:2F:A6:ED:8B:92:47:FF:95:D8:7A:50:BE:C3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:88:a1:24:b8:13:5b:16:3d:b6:1b:16:2d:9e:c9:a1:82:1a:
         63:cc:54:33:bd:6c:5d:a9:b6:ca:d3:5a:59:2d:50:ac:77:4c:
         ee:d7:20:d2:4b:3b:23:68:8d:86:a8:22:5b:96:25:d9:69:04:
         cc:81:f2:da:a1:82:12:55:67:b3:5e:77:29:65:cb:d9:7b:c5:
         90:03:60:3e:e2:62:b2:3e:66:14:72:20:3d:2f:88:16:e7:27:
         a8:25:45:54:04:89:2e:0a:43:f0:80:fe:de:29:36:f6:39:b6:
         ea:d1:7b:1c:c3:4e:e2:59:00:6d:1b:eb:b1:77:9b:32:12:29:
         b0:b3:51:1c:dc:f0:4a:db:21:6a:2d:b8:9f:26:60:1c:ca:a4:
         4a:ee:49:70:17:c9:fa:2d:2c:27:34:87:71:52:c5:88:0d:f0:
         f7:10:9e:d1:3c:79:3b:83:26:3a:bf:f1:99:9f:65:15:f1:6c:
         05:16:79:a5:7c:93:bb:27:ea:66:9a:92:09:c9:61:a9:cc:80:
         03:4c:a1:d9:cd:2d:2a:6c:06:42:f5:f3:46:ce:2e:b4:bf:ef:
         d9:e2:3d:4a:a7:c5:db:44:97:ea:7b:9a:3f:65:25:07:5a:ba:
         49:25:d8:72:f2:a3:a7:e3:70:ec:d5:a4:56:cd:ac:e6:c1:48:
         54:b7:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:13 2025 by rpki-client