Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa
File:                     4d40595a-41f2-3ac1-9657-ddc78350cd29.roa (raw, json)
Hash identifier:          TzFEyV08bFapwyFFMG20K7/+AFzHlHBhv+z5mbU/BuI=
Subject key identifier:   24:FC:CD:BF:12:BC:0F:B9:91:EA:F0:07:AD:F0:01:32:C4:30:E2:DB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFCB1668AB71E20A5C7580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.19.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:cb:16:68:ab:71:e2:0a:5c:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=f177e05f-0dd5-4ed2-ae8a-7782eb8e2d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:47:9b:e7:74:ed:40:b8:0b:4c:7e:1b:9a:66:
                    de:ba:34:85:61:0a:e3:5b:d9:ef:15:e6:a5:b5:4c:
                    92:6c:da:56:99:ef:f3:c9:ea:60:66:63:bc:3b:d3:
                    2f:b3:27:61:80:85:e0:7a:ab:94:ab:fb:eb:8d:6a:
                    63:31:cd:d4:05:9f:5a:c9:2c:fe:d2:f7:ca:b9:04:
                    60:3f:94:0a:7a:8a:fd:dd:c3:c5:07:a1:f8:4a:69:
                    63:65:30:fb:6a:0a:d3:37:26:ce:5f:63:7d:d3:65:
                    78:6a:f7:72:ac:ff:41:db:37:f4:cf:a3:c0:e9:32:
                    8c:da:40:a1:f5:6f:af:d6:13:12:6b:07:d3:19:2e:
                    74:57:e1:d1:d5:af:bc:a2:5b:73:1f:b0:18:41:ce:
                    d5:5f:b9:61:80:47:cc:14:3e:16:cc:14:58:c2:c5:
                    17:61:34:c5:eb:5b:a5:bf:d2:90:3f:60:8c:40:1d:
                    0e:b7:82:e2:e4:2b:00:bd:78:45:84:7c:5f:6f:c4:
                    78:7d:76:a3:e1:5f:ee:70:45:2d:f4:2c:92:f6:6a:
                    af:22:51:b1:9d:4b:f3:76:70:74:32:ce:f7:8a:a4:
                    05:5a:16:3c:53:31:af:6c:8d:63:31:cf:0d:1f:fa:
                    51:df:07:43:3a:11:27:26:8e:f6:66:53:6d:57:1e:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FC:CD:BF:12:BC:0F:B9:91:EA:F0:07:AD:F0:01:32:C4:30:E2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2f:35:d6:54:26:76:56:ad:7c:88:65:f9:2a:80:de:5b:28:
         10:9d:f4:7f:77:59:76:1e:fb:55:cb:8a:6d:d9:40:8d:ee:e9:
         18:0a:3e:34:75:e6:32:44:85:73:bc:cd:c3:e4:ee:78:2c:cc:
         23:07:65:77:ed:f6:74:88:7a:a7:04:62:b5:1d:4f:6b:c2:69:
         95:93:2d:c9:86:80:13:40:f2:54:04:72:49:54:84:3a:76:ff:
         a6:04:01:f3:44:5d:10:19:5d:5c:91:cd:c4:8f:6c:c5:36:e8:
         6e:16:00:c0:01:3b:8a:f6:0e:69:07:86:a3:66:9b:8c:69:c2:
         46:22:ea:3b:6d:16:73:e4:e2:10:43:0e:09:c7:b8:41:bf:b8:
         75:19:7d:03:49:59:e3:a3:14:c8:6d:c2:c5:d2:98:4c:0d:d9:
         1e:ae:67:87:c7:64:fc:a7:ba:9e:a2:45:d6:50:07:f7:08:b6:
         b8:9c:5e:69:8c:39:30:b1:b9:23:dc:a8:98:11:1c:21:89:07:
         ce:9b:af:a2:73:60:1b:99:75:b8:d7:e7:19:12:ec:51:4b:93:
         3d:a2:91:34:67:bf:63:e0:02:0d:04:4e:51:3e:18:53:92:58:
         7a:09:3a:b3:81:f5:89:95:2f:ad:12:73:29:31:a9:c8:19:5f:
         7c:5e:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:41 2025 by rpki-client