Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa
File:                     02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa (raw, json)
Hash identifier:          UpYjbRA+UyjYYbMcOAaXLHTRZGhEH4EfUYT4xWz4Khs=
Subject key identifier:   10:77:2F:5D:06:29:A3:36:C4:4B:F2:B9:4F:49:BF:55:D0:F3:97:BB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550FBFA2D2488DABC68700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.31.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0f:bf:a2:d2:48:8d:ab:c6:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=86b5a398-6f4d-4bc5-b930-82d67d052e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:4f:9f:23:a7:e2:01:e0:80:5c:bd:33:92:
                    07:ff:39:a5:e3:20:21:10:d4:6e:8b:0b:5d:db:81:
                    9c:59:15:2f:bf:12:59:ef:91:be:c2:76:c4:6f:8d:
                    8d:90:5d:dd:46:17:7a:fe:79:57:6b:81:6c:4a:8e:
                    cb:ea:f2:b5:32:a0:2b:18:4a:a4:a6:81:8c:1d:59:
                    55:1d:da:31:57:3a:b0:4f:3b:9f:e4:ac:58:3d:a3:
                    3c:84:38:0c:bb:39:ff:8d:61:4b:32:6f:11:fa:86:
                    ce:00:58:1b:b6:40:d2:10:10:45:da:97:f3:7b:f7:
                    2f:5b:2d:cb:29:35:40:55:7e:59:e1:cc:19:87:79:
                    42:b3:52:c4:99:ee:d3:69:f6:9d:12:89:70:35:93:
                    72:97:37:50:fb:32:06:fd:5b:e4:b3:90:0b:66:d0:
                    8d:20:90:5e:17:dd:80:69:c9:52:3c:13:33:0a:98:
                    bf:3a:47:3d:db:c9:de:37:44:6b:b7:87:9e:3a:37:
                    0e:a6:9e:a3:77:de:cd:ba:ad:fe:45:78:64:d0:c2:
                    a7:85:39:dd:9f:95:c6:bc:ff:a3:46:f8:cc:35:55:
                    66:93:51:c6:6a:a9:f9:02:cc:e5:ab:60:6e:35:28:
                    90:2d:b6:7b:14:d8:ba:cd:53:06:f1:0b:a6:8a:3c:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:77:2F:5D:06:29:A3:36:C4:4B:F2:B9:4F:49:BF:55:D0:F3:97:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02d16420-a41b-34c5-8ed0-f2d11cbd84f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:f1:13:49:5b:88:4a:cd:6e:0f:c8:8a:cb:e1:b6:5d:61:
         76:f1:89:75:f3:ec:7d:1f:3c:0f:56:52:ef:ae:a5:da:69:c2:
         f1:12:ce:57:35:16:38:a7:64:4d:fc:53:37:c6:be:b3:54:7a:
         1d:5f:0b:1d:67:53:ba:fe:61:d0:d3:cc:af:bc:5f:cc:82:33:
         f5:9d:76:6e:a9:51:25:1f:c2:12:b9:2c:20:6f:7a:df:fd:09:
         dd:99:2c:22:5d:0d:6a:54:93:51:c2:c5:98:89:17:65:4e:2a:
         af:e6:49:8c:50:73:34:ba:82:c6:09:f5:2c:e2:04:a2:83:be:
         9f:2c:31:fb:2d:b2:cc:53:48:e1:53:84:7d:f9:4d:04:b8:c3:
         8d:42:61:ae:f6:d1:72:99:3c:00:89:ce:e1:4a:eb:2a:f6:28:
         04:9d:86:48:8e:7d:de:94:d8:bc:d8:f2:cb:08:c0:eb:d4:d1:
         78:7e:e8:c2:a2:c5:5b:18:75:86:ac:93:3d:dc:bd:f9:fd:72:
         f2:76:3a:0c:40:e3:37:a3:fc:ff:66:b9:79:19:04:ad:cf:49:
         a8:81:2d:bd:80:17:be:02:de:7b:12:7f:f3:11:a4:b8:bc:ee:
         05:8e:6f:ca:04:be:26:8a:55:db:53:85:1a:4b:38:43:fd:4d:
         48:24:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:38 2025 by rpki-client