Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14e476ba-666e-361b-8a0a-2f29d8f068f8.roa
File:                     14e476ba-666e-361b-8a0a-2f29d8f068f8.roa (raw, json)
Hash identifier:          7Z9KV3NY1/1hby6ywxy/ObV9+v4DCWvSQkGbAgj59EE=
Subject key identifier:   98:DC:13:9B:26:83:7F:E2:63:38:D2:AC:C7:06:CC:9A:8A:B9:44:AC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD6A38CE8725DC4D91060
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14e476ba-666e-361b-8a0a-2f29d8f068f8.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.25.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d6:a3:8c:e8:72:5d:c4:d9:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=f61721a8-9ba7-4ec3-a80a-983a9b2a56c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:5d:05:49:ba:6a:da:1e:7d:9e:1b:e8:d8:
                    cf:1c:9c:c2:08:50:c8:86:53:ea:2a:cd:57:db:e3:
                    ea:b7:49:92:30:45:1c:9d:e4:00:ae:2d:dc:33:59:
                    56:78:26:93:e9:18:c1:9f:0f:c8:c8:b0:e6:a5:dd:
                    18:73:e0:9e:2e:4e:11:af:66:56:ab:a0:27:f7:b8:
                    2e:f8:2e:3e:b8:37:b0:42:ed:ff:96:01:16:7c:92:
                    59:86:f2:35:94:3b:24:18:52:73:11:64:9e:92:92:
                    c7:a0:92:2b:f4:ba:f3:8e:3d:26:ff:43:34:50:ca:
                    a1:bc:79:de:5a:5c:a7:24:e3:88:f9:78:c9:c0:66:
                    d5:00:b0:42:a9:55:c2:e9:ed:38:80:ff:26:2c:1f:
                    c2:09:c3:66:9f:8e:ab:d1:e7:34:db:81:7e:1b:4c:
                    ca:06:7a:3e:22:d7:c0:46:91:e9:63:58:7d:3c:33:
                    aa:5e:45:63:f7:08:34:b0:dd:75:65:b0:e6:df:e6:
                    71:c2:09:4b:7a:aa:aa:d7:43:6e:f9:7b:06:50:bb:
                    de:d5:1a:c3:75:fe:c8:b6:f2:fb:8e:7e:bc:64:ba:
                    c6:f7:60:09:49:c7:cb:40:59:e5:8a:2b:c5:05:fd:
                    78:38:5a:5f:80:cd:32:29:c7:53:60:2d:c1:fd:8e:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DC:13:9B:26:83:7F:E2:63:38:D2:AC:C7:06:CC:9A:8A:B9:44:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14e476ba-666e-361b-8a0a-2f29d8f068f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:5e:e0:5e:ce:f4:0b:10:9b:15:67:e5:08:b6:7f:a8:78:
         9b:cb:88:b4:e4:ac:ae:d0:ca:60:f6:70:df:19:82:cf:f6:3f:
         d5:bf:90:eb:62:ff:e3:38:5f:28:63:ea:79:34:7c:2e:98:e3:
         91:f9:e5:13:ca:45:47:7c:b3:62:ce:78:25:0f:53:7a:04:bd:
         57:c2:bc:e5:1d:8c:25:97:4d:9a:dd:73:5a:bd:a8:29:ff:f5:
         bb:37:ba:cb:8e:41:a0:1d:f1:21:9c:11:f1:b1:b4:fd:57:58:
         fa:f2:2b:f7:a9:07:80:e8:84:f1:66:61:7f:2b:31:e7:fb:a4:
         12:2e:4c:d6:96:ee:1b:50:8c:38:cc:d7:9b:14:ab:f5:6d:9a:
         8e:d8:bd:e3:9d:80:ca:7b:7d:31:c5:12:ee:1e:87:8a:de:0c:
         09:0c:eb:5a:95:26:bc:64:d5:9d:0b:60:8c:87:3f:d9:e3:84:
         0e:83:9c:af:0d:89:b2:71:6f:06:e7:1f:07:4b:8b:8d:c6:b8:
         d3:13:68:38:ed:5f:6f:00:7c:9b:2e:46:d2:51:ba:6f:08:a6:
         60:1a:fc:37:ad:d0:a3:dc:c0:5f:fd:47:58:cf:10:13:03:18:
         56:ab:f2:07:3e:c9:17:32:0b:68:7a:b4:b7:ab:35:6d:42:82:
         ae:9b:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:30 2025 by rpki-client