Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e6334e9-4c16-3341-abf3-73e42421beec.roa
File:                     2e6334e9-4c16-3341-abf3-73e42421beec.roa (raw, json)
Hash identifier:          1vsTS5KhqqSTmxVV5sUesZlky57706IyM3dJ3plFpaE=
Subject key identifier:   B6:E0:44:27:B6:AE:1D:B2:60:C0:DA:3F:5A:C6:0F:EC:C6:98:27:43
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFC93C142C5C16DDE01280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e6334e9-4c16-3341-abf3-73e42421beec.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.18.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c9:3c:14:2c:5c:16:dd:e0:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=6c14b6fb-ac76-4fc0-aca6-d185167b4550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:25:d5:96:ec:ab:43:46:ea:9e:73:23:37:
                    ff:73:61:ce:53:21:69:67:8d:2a:9f:97:8a:62:18:
                    13:e7:34:97:32:b3:b9:17:89:74:56:38:35:aa:62:
                    18:e1:6d:9b:06:75:2f:e8:a1:c5:32:cd:57:82:c4:
                    23:cf:9a:a5:b1:7b:74:e7:77:9e:07:69:5b:b8:fe:
                    48:72:56:bf:22:2f:85:77:14:a6:58:57:42:4a:91:
                    51:66:39:76:53:1d:c2:95:7f:de:94:3c:60:be:e8:
                    66:50:5c:6e:6b:58:d0:11:79:f9:42:04:71:c0:ce:
                    3b:e1:81:12:51:82:c4:b8:12:ad:ec:97:f7:64:d7:
                    c9:f1:cc:76:0e:5c:1a:39:15:bc:3d:99:58:7b:17:
                    08:cb:74:ef:dd:16:13:fe:44:03:fb:82:8d:44:65:
                    0a:e5:cf:a7:e1:2d:71:43:5a:d0:00:c2:50:db:f5:
                    b0:2e:51:f0:1a:6a:35:41:83:f4:5f:5f:15:ed:91:
                    01:fd:0a:5e:94:9e:86:3e:61:2b:e9:a9:75:5b:68:
                    00:7f:15:30:c2:8a:83:b9:72:7d:54:de:6c:4d:6c:
                    b7:e6:ed:67:aa:b1:dd:79:df:e2:46:f4:e9:5a:de:
                    df:77:8d:ab:c0:0d:e6:fc:b3:64:17:cd:b5:2c:6d:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:44:27:B6:AE:1D:B2:60:C0:DA:3F:5A:C6:0F:EC:C6:98:27:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e6334e9-4c16-3341-abf3-73e42421beec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:fe:fb:e4:d7:ba:f9:36:96:e2:e0:a7:e2:f3:44:13:eb:
         2f:c4:93:13:f3:53:74:e1:0b:df:2c:e8:7c:8d:ac:e7:c3:6a:
         cb:f6:f6:d4:3f:84:e8:34:cb:ee:54:04:97:10:d5:90:b0:22:
         71:29:17:63:9f:9d:96:12:47:b6:7b:70:7c:69:f5:5d:2c:57:
         18:c6:8e:ad:5c:a3:91:3d:bd:8a:07:b5:02:7a:47:9c:51:75:
         ba:a3:97:20:18:63:3d:e9:e3:3f:a2:7d:e1:d9:03:99:ac:8d:
         7c:c6:a9:2b:cf:53:fc:56:64:93:ce:8e:1d:9b:d0:88:8c:06:
         a0:a7:4e:93:1d:9b:70:0f:31:a5:23:50:50:69:39:d4:92:d4:
         21:9d:ba:52:1a:5a:35:c9:d6:e4:16:3f:a9:a9:fe:e9:79:09:
         55:eb:e8:be:5b:8b:6b:14:3f:bd:42:d4:da:be:4c:8f:ec:43:
         e9:c7:0e:d9:24:fc:7e:b2:9e:c4:b8:2e:19:24:81:8d:62:27:
         70:e9:04:10:26:8c:40:72:f7:3e:b6:08:b2:63:db:be:e3:8e:
         25:a6:61:10:c2:41:62:83:61:ba:86:bf:9f:fc:39:78:d6:df:
         61:77:e5:19:c1:15:0e:dc:a7:c7:3c:e1:e6:57:52:2e:2b:c0:
         fa:32:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:55:28 2025 by rpki-client