Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa
File:                     1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa (raw, json)
Hash identifier:          WlBP94Qc7FUBtOgmN/IOIcYZOJOFf1ukEgWjk6mLGiY=
Subject key identifier:   8B:11:7C:CA:76:19:C2:FB:CF:8B:7E:51:88:48:12:42:C0:04:BC:3C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E654E7C77B6A7667D16B4380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.23.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:e7:c7:7b:6a:76:67:d1:6b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=7f2d4034-48d6-433d-8846-55585c640564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:9f:8e:30:b5:43:76:81:2e:8d:7b:b0:63:
                    1a:48:8f:92:17:7f:50:87:e2:23:28:56:81:71:15:
                    d4:e0:64:f4:1b:32:5d:89:74:68:00:a4:ed:e2:5c:
                    5a:4e:cb:4e:23:ca:ff:84:b3:e7:52:9e:bd:fb:5c:
                    df:0e:16:eb:fd:62:54:0e:ff:64:a9:cd:7e:aa:54:
                    84:4e:bf:a6:a2:1f:fc:86:bd:ca:a5:e7:35:95:f4:
                    88:9c:0a:d4:ce:2c:ff:0e:e9:53:3a:db:70:54:c5:
                    bc:ee:be:09:31:80:19:17:87:fe:34:e3:98:89:54:
                    9e:37:ca:2d:0e:8e:32:7a:b6:76:11:44:88:4a:70:
                    f5:a1:b7:82:bd:8e:92:77:93:0d:38:11:09:e7:92:
                    3f:d8:d4:30:75:42:04:d5:53:4b:8c:b2:45:71:01:
                    27:29:09:1e:8b:ad:88:0a:56:2e:e9:da:e5:ca:1f:
                    92:8f:a8:0a:48:ef:bc:88:17:58:57:76:ae:29:12:
                    1d:64:f3:d4:d8:e7:42:e3:51:41:7f:6f:c8:17:6d:
                    33:a3:ec:53:9b:0d:89:72:aa:cb:85:2d:e9:d4:29:
                    6f:9d:bd:15:5b:89:f7:d7:ca:1c:77:5a:b1:7e:b7:
                    31:cd:e3:19:3e:52:05:d1:27:97:1f:af:4f:7c:65:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:11:7C:CA:76:19:C2:FB:CF:8B:7E:51:88:48:12:42:C0:04:BC:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:65:22:37:b9:a1:03:f1:ea:d4:02:64:50:d4:ea:02:f7:
         52:2d:4e:e2:99:5a:7b:93:01:c8:33:ff:da:a9:33:40:a6:69:
         81:8b:97:46:35:44:8f:7b:a1:b0:85:bb:a1:18:f2:ef:86:8a:
         30:a2:5f:56:e3:af:29:26:1b:73:72:f6:fa:68:81:98:fc:82:
         e6:b9:16:d2:b1:44:83:89:19:71:56:8e:23:5c:3c:46:06:4e:
         e8:b9:43:9e:18:a9:5a:52:35:0e:74:2a:d0:cd:11:f1:25:c4:
         75:4a:b6:72:08:e3:5c:be:13:40:1e:8c:f5:84:3a:ae:48:48:
         fa:5a:4b:b5:9e:e3:e1:5a:83:d1:6e:2b:1a:93:40:ab:74:e0:
         31:45:d6:c9:11:6c:85:69:0a:90:54:50:67:b7:bf:1a:2c:e5:
         41:c2:99:f6:4e:99:70:22:fb:3d:1f:d0:aa:e3:5a:98:27:6e:
         db:71:f2:8a:3f:ed:2a:56:2c:a3:32:f9:3d:1b:b0:74:c6:d2:
         bd:c9:5c:15:d9:36:26:53:63:6d:63:0a:50:e5:ce:92:de:03:
         fd:69:08:96:16:67:01:2f:66:f7:11:c9:37:c7:49:63:21:7c:
         7c:3a:3e:b5:7c:2b:6f:20:34:82:4a:c2:21:78:c3:da:39:d1:
         65:d6:fe:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVOfHe2p2Z9FrQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
N2YyZDQwMzQtNDhkNi00MzNkLTg4NDYtNTU1ODVjNjQwNTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPmfjjC1Q3aBLo17sGMaSI+SF39Qh+IjKFaB
cRXU4GT0GzJdiXRoAKTt4lxaTstOI8r/hLPnUp69+1zfDhbr/WJUDv9kqc1+qlSE
Tr+moh/8hr3Kpec1lfSInArUziz/DulTOttwVMW87r4JMYAZF4f+NOOYiVSeN8ot
Do4yerZ2EUSISnD1obeCvY6Sd5MNOBEJ55I/2NQwdUIE1VNLjLJFcQEnKQkei62I
ClYu6drlyh+Sj6gKSO+8iBdYV3auKRIdZPPU2OdC41FBf2/IF20zo+xTmw2JcqrL
hS3p1Clvnb0VW4n318ocd1qxfrcxzeMZPlIF0SeXH69PfGWFKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsRfMp2GcL7z4t+UYhIEkLABLw8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWE4ODBiMmItNzhjYi0z
ZDEwLThkOTUtODJhY2IxNTFmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWpZSI3uaED8erUAmRQ1OoC91ItTuKZWnuTAcgz/9qpM0CmaYGLl0Y1
RI97obCFu6EY8u+GijCiX1bjrykmG3Ny9vpogZj8gua5FtKxRIOJGXFWjiNcPEYG
Tui5Q54YqVpSNQ50KtDNEfElxHVKtnII41y+E0AejPWEOq5ISPpaS7We4+Fag9Fu
KxqTQKt04DFF1skRbIVpCpBUUGe3vxos5UHCmfZOmXAi+z0f0KrjWpgnbttx8oo/
7SpWLKMy+T0bsHTG0r3JXBXZNiZTY21jClDlzpLeA/1pCJYWZwEvZvcRyTfHSWMh
fHw6PrV8K28gNIJKwiF4w9o50WXW/r8=
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:00:06 2025 by rpki-client