Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa
File:                     5390d515-f56d-3bfc-9fdd-f680b36665ae.roa (raw, json)
Hash identifier:          vsw9rxj0hznu/GlM/mNJ5Q08zeUctUX+LHkRx3tmOGY=
Subject key identifier:   B3:4A:5C:77:22:BD:D0:60:7E:73:EA:61:1D:36:A1:1A:41:8D:03:73
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C48F3AE044BBB3696F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.20.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c4:8f:3a:e0:44:bb:b3:69:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=79fed53b-117e-4bb6-92b2-70132f6c5bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:d1:0c:21:d0:12:11:76:ac:8a:bb:ef:17:
                    41:f5:49:bc:cf:7d:53:52:19:18:35:f6:35:6b:f6:
                    16:37:37:1e:45:ab:4c:e3:a1:ea:d7:e2:99:a4:7b:
                    c2:67:0b:35:52:63:20:64:4f:90:fb:38:d3:24:89:
                    94:d6:d7:c9:91:0c:6a:23:38:29:52:49:44:b5:69:
                    5d:0a:77:7c:a1:07:54:9d:b8:43:a7:40:1b:5f:fc:
                    39:5a:55:fa:19:b9:c0:23:35:2a:c2:30:52:99:ca:
                    80:fa:5a:e1:d3:ac:f2:7b:f1:c5:19:d9:ef:3d:0b:
                    d4:b8:29:c1:c7:e6:5c:ff:58:e2:f7:77:e3:a6:e0:
                    c2:24:79:2e:00:cf:78:e8:97:8a:62:ce:b7:07:f6:
                    8c:ac:df:a6:ff:c2:3d:f8:3c:67:1d:a5:df:84:05:
                    5a:49:fb:f8:04:02:bd:0f:f5:73:79:13:c0:8f:23:
                    ef:06:1e:11:eb:98:d4:cf:fe:05:95:6b:b0:93:bb:
                    ae:28:c4:0f:d1:62:6f:76:24:a5:7e:f3:95:87:24:
                    e7:3b:7b:1c:de:ea:80:f4:5d:6e:79:5c:a5:53:7e:
                    f5:34:c7:81:57:64:ec:3c:84:67:25:77:6f:fb:e9:
                    bd:45:3a:6a:d5:8c:eb:0a:d3:6e:2c:96:59:b3:5c:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4A:5C:77:22:BD:D0:60:7E:73:EA:61:1D:36:A1:1A:41:8D:03:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:eb:b6:22:52:b1:30:92:7a:11:9e:01:b7:cb:27:cd:1e:
         3a:05:a1:df:bc:83:5b:d2:16:3b:aa:8a:2f:2a:22:13:ca:49:
         57:e7:57:ef:29:34:42:6e:0f:6c:35:49:2a:10:a6:8d:ca:d9:
         13:2d:c0:02:63:5f:8c:f6:c5:07:fa:eb:38:80:6a:a8:5c:5e:
         12:8f:0f:54:80:fe:b3:d1:91:38:e8:8a:de:23:05:06:bc:f6:
         77:78:d9:e9:61:3c:4c:f3:43:f3:c1:ea:6e:f8:47:59:5a:b3:
         2d:09:ab:d4:56:6a:b6:5f:a8:d6:93:dd:75:43:ca:6b:83:3d:
         3b:40:5a:62:8f:cc:78:12:f6:af:35:ce:8f:2f:56:c0:27:29:
         6c:58:7a:5d:0d:3e:7a:d6:4e:f1:40:9c:4d:b0:c9:79:b5:25:
         53:4a:b3:a7:7e:03:6b:1f:ab:70:f8:1a:bd:fb:00:cd:ec:60:
         da:65:1e:4f:5d:3d:d1:88:6a:80:46:bd:3a:9b:64:96:e5:25:
         69:90:f4:d6:f6:72:e5:de:85:b3:fa:33:f6:77:42:75:59:01:
         e3:41:cd:e8:8f:6c:68:01:22:7c:61:cb:95:66:01:6e:bf:4c:
         3a:b2:c8:1f:46:36:ca:e9:5b:b7:16:7b:9a:26:bb:cb:3c:d5:
         98:1a:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:25 2025 by rpki-client