Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f596fb-ab4e-33f8-8432-1d9fa0589521.roa
File:                     43f596fb-ab4e-33f8-8432-1d9fa0589521.roa (raw, json)
Hash identifier:          BMQWyHIWUCGBxGJmjK+LET1oodrGq4S957gOYP0IAoE=
Subject key identifier:   C7:F9:0B:F5:B1:F7:B8:DA:F6:6E:E1:C2:85:72:6C:E1:D5:F9:39:91
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550F5B554064DD247173C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f596fb-ab4e-33f8-8432-1d9fa0589521.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.30.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0f:5b:55:40:64:dd:24:71:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=62eb97d1-a4db-4136-ae00-5b325887ad35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:ba:c3:24:02:f6:8f:47:48:f9:8f:49:22:
                    cb:71:c5:8e:db:b5:55:78:6f:f0:cc:5b:55:08:58:
                    d2:e0:0f:25:e5:e4:73:07:7b:0b:50:73:a3:79:5d:
                    32:8f:1c:b7:6a:3c:35:8a:01:1c:b2:7c:f5:1f:f1:
                    eb:3d:67:c4:b2:19:c4:cf:8e:b8:13:1e:13:a4:30:
                    15:0f:38:65:c0:e8:20:5a:5d:89:d3:3a:45:87:36:
                    bb:7f:7c:99:0c:2c:54:48:69:90:e1:ed:4c:dc:47:
                    6b:b4:f3:93:3c:77:5e:f8:f4:fa:b8:1e:2c:c8:57:
                    32:c4:16:0d:86:f2:9d:65:04:63:0c:11:29:3e:92:
                    fb:c9:7c:e7:18:28:1a:5b:df:91:ad:16:ad:43:a0:
                    82:fc:52:99:40:cc:f3:58:ad:1a:41:27:fd:80:c9:
                    f3:2e:60:a8:90:60:70:e7:82:dd:ec:45:b8:c9:30:
                    24:b7:17:d5:e4:df:80:70:5a:89:09:95:8d:ad:18:
                    ce:8a:b4:7a:03:1a:3d:5d:9d:b7:4e:d4:6f:83:86:
                    3c:06:ba:41:e3:3c:e3:99:3c:94:a7:cb:dd:d1:59:
                    0a:11:fc:b9:c4:64:08:38:cb:cb:dd:68:62:79:79:
                    76:24:22:7d:b3:07:9b:60:08:42:21:ca:90:51:4d:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F9:0B:F5:B1:F7:B8:DA:F6:6E:E1:C2:85:72:6C:E1:D5:F9:39:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f596fb-ab4e-33f8-8432-1d9fa0589521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.30.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:a5:dd:74:e4:f3:90:c2:f2:97:8e:9b:9b:ac:c3:ef:af:
         82:63:c6:7f:c2:e0:74:4a:88:8f:7b:08:e3:22:43:4e:fb:80:
         98:3c:97:e1:33:b4:d0:02:ff:7e:0a:da:10:7f:a1:08:72:9f:
         48:b6:53:d1:45:29:3f:f1:3a:a6:a7:0b:eb:ae:fd:75:e9:bd:
         10:b9:78:f8:08:1b:83:48:99:a5:5d:fb:21:d2:50:88:37:ee:
         cc:65:01:d6:a3:f2:0f:db:7b:b7:50:12:62:ea:41:53:d8:21:
         b5:0a:18:fd:c5:dd:ee:80:36:af:86:17:1b:f5:a4:ac:ba:56:
         74:69:fc:03:ce:8d:80:ed:ba:c6:a5:d5:36:6e:34:3a:83:9c:
         d2:46:78:1d:2c:2f:bf:fa:5d:ed:cb:31:ec:ed:2a:05:80:bf:
         09:5d:7f:fd:ad:55:2a:a9:6e:67:aa:f2:74:b0:3d:6f:0c:83:
         6e:bc:3e:1f:c7:d8:d6:99:e9:c5:5c:82:f6:64:c2:66:a1:3d:
         72:26:5c:95:49:17:0b:3f:45:15:2c:48:0c:e3:83:4f:2c:fb:
         0c:0a:84:a7:9c:92:dc:94:d2:95:68:d5:a8:13:85:72:4b:d6:
         c0:eb:e7:c8:91:f2:15:4f:34:78:6f:dd:51:78:a9:91:d2:61:
         64:ed:8c:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ9bVUBk3SRxc8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
NjJlYjk3ZDEtYTRkYi00MTM2LWFlMDAtNWIzMjU4ODdhZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCG6wyQC9o9HSPmPSSLLccWO27VVeG/wzFtV
CFjS4A8l5eRzB3sLUHOjeV0yjxy3ajw1igEcsnz1H/HrPWfEshnEz464Ex4TpDAV
DzhlwOggWl2J0zpFhza7f3yZDCxUSGmQ4e1M3EdrtPOTPHde+PT6uB4syFcyxBYN
hvKdZQRjDBEpPpL7yXznGCgaW9+RrRatQ6CC/FKZQMzzWK0aQSf9gMnzLmCokGBw
54Ld7EW4yTAktxfV5N+AcFqJCZWNrRjOirR6Axo9XZ23TtRvg4Y8BrpB4zzjmTyU
p8vd0VkKEfy5xGQIOMvL3WhieXl2JCJ9swebYAhCIcqQUU1BKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMf5C/Wx97ja9m7hwoVybOHV+TmRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDNmNTk2ZmItYWI0ZS0z
M2Y4LTg0MzItMWQ5ZmEwNTg5NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB6HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACANpd105POQwvKXjpubrMPvr4Jjxn/C4HRKiI97COMiQ077gJg8l+Ez
tNAC/34K2hB/oQhyn0i2U9FFKT/xOqanC+uu/XXpvRC5ePgIG4NImaVd+yHSUIg3
7sxlAdaj8g/be7dQEmLqQVPYIbUKGP3F3e6ANq+GFxv1pKy6VnRp/APOjYDtusal
1TZuNDqDnNJGeB0sL7/6Xe3LMeztKgWAvwldf/2tVSqpbmeq8nSwPW8Mg268Ph/H
2NaZ6cVcgvZkwmahPXImXJVJFws/RRUsSAzjg08s+wwKhKecktyU0pVo1agThXJL
1sDr58iR8hVPNHhv3VF4qZHSYWTtjM0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:22 2025 by rpki-client