Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22fd7a59-e74f-3a6e-930b-a47ceb2ba828.roa
File:                     22fd7a59-e74f-3a6e-930b-a47ceb2ba828.roa (raw, json)
Hash identifier:          +GFt/xHKxGls82MwLWmMJOrpX6MLplqE6ldwEKdH6J0=
Subject key identifier:   08:EB:69:1D:C6:9F:A7:87:B9:E2:AA:97:BE:9B:D8:C5:91:B6:97:91
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD74A8772E60A74FB27C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22fd7a59-e74f-3a6e-930b-a47ceb2ba828.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.27.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d7:4a:87:72:e6:0a:74:fb:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=89fe36de-3701-4f7f-a41e-70e7fdcda54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:b1:a1:bb:b1:0f:10:9a:97:12:49:7a:cb:
                    53:0a:7c:a2:0d:e4:c2:d6:ff:eb:87:cb:c2:b2:39:
                    ef:f3:fe:1e:d6:74:eb:7a:50:02:12:ac:e1:c4:39:
                    30:63:56:a1:bb:46:dc:90:fa:2d:16:53:bc:1c:8f:
                    d4:93:e1:81:58:0a:37:02:93:85:0d:40:6d:58:c3:
                    8a:c4:d5:16:e3:ad:54:15:9e:9c:26:a9:e4:49:99:
                    fd:2b:53:de:cc:b2:b6:64:e4:ba:d2:aa:5a:1c:59:
                    f6:b6:02:b9:cc:11:dd:a0:3c:f4:07:2b:83:85:73:
                    53:fe:da:51:a0:ea:48:74:c7:aa:ab:9d:57:ae:14:
                    7b:58:11:ad:15:56:8b:df:a9:aa:3d:1d:33:0c:5a:
                    ed:cb:c2:19:e8:a4:ef:78:1c:57:55:cf:6e:b5:e6:
                    55:17:73:da:3e:aa:ff:da:fd:67:0e:ac:47:13:e0:
                    cf:49:2c:b7:32:12:71:84:b7:47:04:39:d5:18:f0:
                    bd:db:09:51:70:0a:ab:6b:b7:bd:8a:69:24:6c:93:
                    24:b8:53:87:55:57:7c:c7:eb:ee:94:0f:0e:6a:40:
                    16:29:00:6c:31:c5:68:8c:b4:18:ea:e9:e6:4b:e1:
                    28:14:35:c7:5e:f3:c8:c9:08:d6:65:e9:dc:ce:87:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:69:1D:C6:9F:A7:87:B9:E2:AA:97:BE:9B:D8:C5:91:B6:97:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22fd7a59-e74f-3a6e-930b-a47ceb2ba828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:ab:5b:70:97:fe:77:aa:ec:53:e1:99:83:4d:18:be:e6:
         07:ba:f4:72:33:5d:d9:84:b0:e3:dc:e3:01:77:6c:fd:84:7f:
         79:b2:b6:20:db:df:5d:31:e7:f6:c1:12:f4:2c:51:fe:40:b8:
         7f:f0:ad:d7:b2:80:ea:c6:0c:a3:fd:46:15:44:18:44:57:f8:
         31:2a:cb:d3:6f:d3:e1:81:20:4b:ad:e6:c9:45:f9:4b:bd:02:
         ba:50:1f:76:0c:9f:96:71:f8:d8:06:f0:82:b9:43:8f:9d:9a:
         d8:aa:5b:f4:48:38:02:6a:9e:f2:50:81:72:17:f3:7a:7a:b9:
         21:21:5b:39:26:ae:13:06:2f:88:55:fd:82:c5:b6:3a:ab:93:
         08:3f:3d:22:9e:49:57:0d:48:bc:05:c8:ac:e7:cf:b2:02:5a:
         6c:35:d6:f0:22:dd:50:03:0d:1c:2d:17:1f:d7:a7:a6:b8:5f:
         a0:4c:33:b5:28:2e:59:66:26:67:e9:c0:01:4a:4a:c0:09:a3:
         ef:c0:4b:8e:bb:cc:48:5d:17:96:5c:a9:3d:e9:2d:6d:e0:98:
         e9:40:cc:fb:2b:1f:d1:6c:53:25:fa:e9:df:6a:a3:f5:22:28:
         32:e6:09:7d:6e:a2:7b:51:12:b2:1f:ef:d6:86:2f:9f:5f:0b:
         c9:47:65:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79dKh3LmCnT7J8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
ODlmZTM2ZGUtMzcwMS00ZjdmLWE0MWUtNzBlN2ZkY2RhNTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AuxobuxDxCalxJJestTCnyiDeTC1v/rh8vC
sjnv8/4e1nTrelACEqzhxDkwY1ahu0bckPotFlO8HI/Uk+GBWAo3ApOFDUBtWMOK
xNUW461UFZ6cJqnkSZn9K1PezLK2ZOS60qpaHFn2tgK5zBHdoDz0ByuDhXNT/tpR
oOpIdMeqq51XrhR7WBGtFVaL36mqPR0zDFrty8IZ6KTveBxXVc9uteZVF3PaPqr/
2v1nDqxHE+DPSSy3MhJxhLdHBDnVGPC92wlRcAqra7e9imkkbJMkuFOHVVd8x+vu
lA8OakAWKQBsMcVojLQY6unmS+EoFDXHXvPIyQjWZenczocNoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAjraR3Gn6eHueKql76b2MWRtpeRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjJmZDdhNTktZTc0Zi0z
YTZlLTkzMGItYTQ3Y2ViMmJhODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuWq1twl/53quxT4ZmDTRi+5ge69HIzXdmEsOPc4wF3bP2Ef3mytiDb
310x5/bBEvQsUf5AuH/wrdeygOrGDKP9RhVEGERX+DEqy9Nv0+GBIEut5slF+Uu9
ArpQH3YMn5Zx+NgG8IK5Q4+dmtiqW/RIOAJqnvJQgXIX83p6uSEhWzkmrhMGL4hV
/YLFtjqrkwg/PSKeSVcNSLwFyKznz7ICWmw11vAi3VADDRwtFx/Xp6a4X6BMM7Uo
LllmJmfpwAFKSsAJo+/AS467zEhdF5ZcqT3pLW3gmOlAzPsrH9FsUyX66d9qo/Ui
KDLmCX1uontRErIf79aGL59fC8lHZTU=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:10 2025 by rpki-client