Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbde1f6-3879-3478-bb6a-c27fa7ee41ff.roa
File:                     1dbde1f6-3879-3478-bb6a-c27fa7ee41ff.roa (raw, json)
Hash identifier:          XgJDPHNz3SbStdaEMzyQcAyrRnapLUXgxmaVU2uTKsc=
Subject key identifier:   9A:42:E5:12:08:03:26:FD:F7:02:DD:52:71:5A:88:19:39:74:7A:B7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD6641EC0A0705662B6A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbde1f6-3879-3478-bb6a-c27fa7ee41ff.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.24.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d6:64:1e:c0:a0:70:56:62:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=da235d68-7f7e-4eff-b254-e46ad3b465b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:9b:04:96:a8:ce:e9:28:77:94:e4:16:b0:
                    45:bb:09:cc:40:a9:cd:5d:2f:74:80:42:e6:57:40:
                    1d:26:63:d4:62:e4:70:71:71:e3:84:68:fa:ba:d2:
                    84:51:f5:33:ca:bf:8d:7d:2a:b1:cb:47:8f:61:c9:
                    1a:98:78:6b:5b:e4:f4:b1:31:4c:7b:85:8b:b9:4f:
                    2f:cd:4e:f7:3e:58:93:f3:6a:5e:ba:85:b4:26:db:
                    23:b0:93:cf:82:49:e4:6c:10:26:b4:d6:82:8c:2e:
                    23:63:2d:36:1e:a4:a4:74:e8:77:e8:46:f8:73:3b:
                    fe:96:8b:e5:df:63:30:98:8e:3d:93:76:a6:97:bf:
                    d3:02:ce:1d:0f:98:ca:14:5e:68:5a:ee:ea:e3:3e:
                    98:43:db:db:c0:1f:42:64:ea:38:63:e3:7c:9c:98:
                    61:01:be:59:2f:7b:d2:dd:1b:f2:31:45:d3:3c:ea:
                    1c:72:c3:f7:b8:45:7a:cd:13:c6:03:52:30:97:df:
                    14:35:dd:64:8f:5d:7b:b4:be:6e:68:7a:87:59:b5:
                    a4:42:1f:73:35:a3:79:23:8e:36:24:ff:5c:21:85:
                    8d:54:51:ff:04:94:d1:bf:e4:eb:29:43:1c:23:ab:
                    a6:fa:d6:b6:bf:dc:7e:4b:76:48:dc:bd:08:6a:2e:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:42:E5:12:08:03:26:FD:F7:02:DD:52:71:5A:88:19:39:74:7A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbde1f6-3879-3478-bb6a-c27fa7ee41ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:08:c8:3c:55:10:2c:96:5f:bd:f5:b9:79:4f:6c:fa:2b:26:
         67:e1:29:2c:ff:d7:0e:c3:c7:6e:03:99:d4:32:66:e7:82:5c:
         2f:a4:35:f5:be:e5:e4:2a:99:e9:1d:5f:90:52:ee:54:22:eb:
         1c:ba:f1:4b:f0:58:1b:39:a3:c7:c3:ec:d2:2c:f0:f9:f5:d8:
         ce:bc:fa:65:8f:b0:f4:87:68:da:63:e7:90:c8:f4:40:2c:4d:
         ab:6d:7a:32:04:84:3d:4a:39:73:1e:4a:c4:88:1d:69:55:fa:
         5a:3f:e5:ad:3c:2f:4b:44:1c:c2:e5:70:ab:41:af:ca:25:4c:
         cf:05:3f:c0:08:2c:cd:ad:f9:c6:76:28:22:1a:3f:a0:d6:0e:
         ef:9f:5f:9b:31:0e:cf:70:0e:94:34:4d:8a:90:5b:cc:e3:8a:
         be:6b:5b:b8:a8:99:bf:a9:a3:3b:cb:cc:86:e6:28:d6:c1:1e:
         52:67:27:15:8d:b6:3a:39:67:b5:7c:25:4a:c2:e9:0c:cd:4b:
         8a:18:13:a8:8d:8b:7f:c3:29:8a:5c:a9:de:9f:42:55:38:55:
         e1:f5:d3:37:15:34:ea:c4:7e:89:16:03:86:b4:0c:cc:9c:27:
         f8:54:a9:91:12:e7:4a:0a:81:2d:58:58:b2:7c:2f:b9:3b:09:
         f2:ce:75:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79ZkHsCgcFZitqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZGEyMzVkNjgtN2Y3ZS00ZWZmLWIyNTQtZTQ2YWQzYjQ2NWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnibBJaozukod5TkFrBFuwnMQKnNXS90gELm
V0AdJmPUYuRwcXHjhGj6utKEUfUzyr+NfSqxy0ePYckamHhrW+T0sTFMe4WLuU8v
zU73PliT82peuoW0JtsjsJPPgknkbBAmtNaCjC4jYy02HqSkdOh36Eb4czv+lovl
32MwmI49k3aml7/TAs4dD5jKFF5oWu7q4z6YQ9vbwB9CZOo4Y+N8nJhhAb5ZL3vS
3RvyMUXTPOoccsP3uEV6zRPGA1Iwl98UNd1kj117tL5uaHqHWbWkQh9zNaN5I442
JP9cIYWNVFH/BJTRv+TrKUMcI6um+ta2v9x+S3ZI3L0Iai4g7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpC5RIIAyb99wLdUnFaiBk5dHq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWRiZGUxZjYtMzg3OS0z
NDc4LWJiNmEtYzI3ZmE3ZWU0MWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYIyDxVECyWX731uXlPbPorJmfhKSz/1w7Dx24DmdQyZueCXC+kNfW+
5eQqmekdX5BS7lQi6xy68UvwWBs5o8fD7NIs8Pn12M68+mWPsPSHaNpj55DI9EAs
TattejIEhD1KOXMeSsSIHWlV+lo/5a08L0tEHMLlcKtBr8olTM8FP8AILM2t+cZ2
KCIaP6DWDu+fX5sxDs9wDpQ0TYqQW8zjir5rW7iomb+pozvLzIbmKNbBHlJnJxWN
tjo5Z7V8JUrC6QzNS4oYE6iNi3/DKYpcqd6fQlU4VeH10zcVNOrEfokWA4a0DMyc
J/hUqZES50oKgS1YWLJ8L7k7CfLOdUM=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:14 2025 by rpki-client