Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/228d8952-8838-3554-87b2-4e9d1a705892.roa
File:                     228d8952-8838-3554-87b2-4e9d1a705892.roa (raw, json)
Hash identifier:          fDaz433F6HZNEE4ii1wPnSafxCqoxSzlOoRfnykclII=
Subject key identifier:   13:34:BB:5A:4F:5D:2B:5D:A2:F9:15:98:44:C3:7F:AF:22:7D:01:84
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6BBA1AFED5BAE19D16030
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/228d8952-8838-3554-87b2-4e9d1a705892.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.16.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:bb:a1:af:ed:5b:ae:19:d1:60:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=80749218-e71c-4fd0-ae98-02da2fc4e4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:27:e2:24:b1:e1:63:6a:b8:cf:7a:77:62:
                    49:a3:97:cd:60:ce:f0:6b:0d:bf:ae:2f:f1:76:8e:
                    89:cd:49:08:bf:13:ca:b0:3c:49:db:7b:fb:63:75:
                    0e:71:87:2f:05:a7:0e:d5:ce:5d:b1:64:d2:79:5b:
                    e0:ed:55:38:e5:61:f3:66:76:11:ae:91:9c:86:55:
                    60:a7:f2:f6:44:ba:27:6a:be:1e:c2:98:ac:af:6f:
                    6a:bf:8a:80:2b:7e:71:a9:a3:d2:33:61:62:00:eb:
                    69:cf:03:53:8a:85:80:36:97:d0:d2:50:47:eb:62:
                    9e:64:61:2b:e4:8a:7d:05:55:21:ce:e1:6e:ec:15:
                    bd:60:32:28:38:00:49:a1:72:77:4e:0a:f9:21:4d:
                    54:99:22:24:3c:6b:ec:72:68:81:75:e5:49:13:5f:
                    00:58:4b:2f:5d:6c:70:77:15:9d:23:cf:d9:27:c2:
                    27:5a:11:46:4b:a8:2c:36:6f:66:df:8b:e7:3f:f0:
                    03:8c:5e:de:ea:53:c9:4e:ae:d3:b8:e7:d7:00:f7:
                    c5:97:25:df:69:e0:fa:ed:cd:aa:a1:81:d6:fb:e0:
                    21:c1:3d:63:aa:63:de:4c:4f:ac:2b:fb:2a:87:f8:
                    6a:cb:c1:db:b9:fc:38:26:6a:e6:7c:70:27:79:41:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:BB:5A:4F:5D:2B:5D:A2:F9:15:98:44:C3:7F:AF:22:7D:01:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/228d8952-8838-3554-87b2-4e9d1a705892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:66:d8:01:6b:95:90:f5:d8:47:7b:d3:10:fe:9d:19:cf:ca:
         0e:84:1a:53:ef:83:16:5e:61:e0:82:17:d1:cd:53:8c:f5:cb:
         78:19:3b:2b:eb:36:b9:72:4b:7d:26:59:6c:9c:40:05:18:54:
         2b:33:65:42:d5:c7:a6:bd:d8:d1:4b:b5:5f:83:0f:5d:45:9c:
         6c:87:bb:1f:22:c4:e3:95:70:9a:24:4a:7e:ed:a1:34:c4:bd:
         07:83:71:54:7e:31:b6:56:82:b2:f2:c9:4a:42:4a:85:8d:39:
         01:e9:a9:61:ef:6c:72:67:33:3e:b6:81:e0:06:1c:c6:d5:b8:
         f1:8a:1a:a7:53:35:6c:d9:53:7a:f7:14:a3:8f:40:eb:b7:40:
         cd:eb:71:9f:a2:e3:a0:36:72:6f:ca:b8:54:fe:cf:34:3b:9c:
         28:82:4b:d9:13:4b:93:43:3c:57:5f:12:06:a9:28:7c:c3:c3:
         f5:80:22:1f:38:34:eb:6d:b2:f8:5a:09:de:21:9e:30:8e:41:
         2a:00:30:ce:64:5d:df:37:0c:a3:b8:74:c3:85:b6:e5:52:96:
         f7:ec:56:52:e6:65:65:cf:ea:48:f2:d2:1c:c5:17:66:a2:8b:
         ae:15:75:f7:23:6e:68:a5:b8:bd:c7:ee:e5:34:62:f7:96:20:
         40:85:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:52 2025 by rpki-client