Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05715eb2-016d-3904-806c-d7e7025f704d.roa
File:                     05715eb2-016d-3904-806c-d7e7025f704d.roa (raw, json)
Hash identifier:          Gme6MSkoSwqn3Z4GF0LtZvNHRAu9Ekg37tEqj4wS4vg=
Subject key identifier:   CA:5F:54:B3:48:3C:25:FF:F2:FD:7E:A4:42:39:A8:42:42:4B:09:D7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD5E65B596286D18D5DC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05715eb2-016d-3904-806c-d7e7025f704d.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.23.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d5:e6:5b:59:62:86:d1:8d:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=07c107a9-0dac-4d8b-8c25-d608734c0b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:b7:01:fe:fe:99:f5:28:31:04:d4:b1:a0:
                    88:6f:90:47:be:bd:03:24:7e:b3:ed:7a:b4:85:72:
                    37:91:32:34:74:27:77:6e:8e:6e:0d:a0:6e:fb:69:
                    1e:8f:6b:3d:c9:12:2a:52:05:6e:94:ec:b8:6d:98:
                    00:c0:d4:8f:81:a3:f5:b4:5e:fd:e6:43:e2:5d:a2:
                    2b:87:9d:dc:0e:13:bb:b4:ab:09:3b:96:5c:2c:74:
                    69:82:19:79:11:b0:ca:82:94:7f:8b:7d:ae:f5:a0:
                    61:de:cd:3d:69:18:53:43:89:0a:e5:5e:b9:82:10:
                    f3:e4:e8:32:8b:95:f6:de:47:c9:cf:a9:e5:cc:e0:
                    77:ff:5b:43:16:74:46:21:37:93:96:68:dd:6c:17:
                    b4:4d:cf:10:b8:f8:fc:9c:a7:36:74:5b:fc:43:de:
                    00:21:fe:7d:84:e7:3b:dd:1f:e1:3e:d1:41:3d:e3:
                    a2:17:3c:b9:72:d3:f0:2e:71:b6:3a:00:93:bf:83:
                    dc:54:dd:b1:58:d5:24:95:61:ee:8a:27:f0:a9:ac:
                    97:49:b6:2e:5e:dc:07:19:e6:fc:6e:8a:63:da:5a:
                    3d:a8:3b:95:47:ab:35:69:67:97:30:8d:ea:a1:96:
                    f6:cf:a9:30:3f:72:ce:4a:5c:9c:38:83:d0:1e:25:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5F:54:B3:48:3C:25:FF:F2:FD:7E:A4:42:39:A8:42:42:4B:09:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05715eb2-016d-3904-806c-d7e7025f704d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:07:43:13:c6:50:03:54:e6:b3:a1:f3:19:f6:ed:64:ab:e4:
         42:c6:35:82:9c:8e:a9:30:84:31:0a:63:7e:70:f7:ea:16:ca:
         52:85:14:3f:84:bc:fe:6d:a3:ac:4c:af:37:47:01:7c:0d:76:
         4a:e0:b7:e3:e1:67:2f:87:db:c8:f9:b7:7e:43:98:6b:1e:b7:
         10:40:36:79:2a:bd:c3:4d:13:52:f7:18:f6:1d:e6:6c:47:58:
         9d:f8:1f:d8:36:fb:6b:9d:bf:68:08:1e:c1:fa:dd:68:bd:74:
         da:ee:22:ec:8f:c7:de:67:44:77:1f:e0:13:3a:78:43:f2:34:
         6e:8a:55:10:68:6a:82:97:f1:b2:93:64:15:c5:b8:41:e9:79:
         19:0c:26:72:ff:b3:d6:e2:d6:3e:fc:e8:58:32:40:fe:d8:b6:
         8c:4b:be:f3:84:d6:26:e3:64:24:27:62:de:82:7d:e7:21:59:
         2c:64:a1:3f:35:d4:75:e8:00:5a:68:c6:2f:4a:57:24:20:7f:
         7f:88:fe:a7:69:8a:a7:a0:52:0e:3b:ef:47:26:2e:83:ba:40:
         26:78:58:64:ff:57:68:e3:42:2b:b6:3b:27:20:8e:70:d3:4d:
         a1:c8:99:8b:a5:2c:42:3a:0f:18:a5:7c:4c:60:4c:80:6d:75:
         dd:c1:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:01 2025 by rpki-client