Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/552722f1-a67d-365b-9c3d-71e24357c812.roa
File:                     552722f1-a67d-365b-9c3d-71e24357c812.roa (raw, json)
Hash identifier:          EfTcucSyIIIAudrvjzGl1tZ/RxQwijGShm4926tivXI=
Subject key identifier:   6F:4A:74:94:A0:E5:58:8C:FE:A0:A8:9E:84:83:BD:38:E0:A2:5B:5F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B153C28E84E81E73A48660000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/552722f1-a67d-365b-9c3d-71e24357c812.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        104.23.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:28:e8:4e:81:e7:3a:48:66:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=25134135-c0d9-4efc-9f04-29d5b2aea63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:77:4a:dd:cf:c5:28:7a:47:0e:e4:16:99:87:
                    0b:56:50:c2:fd:b4:f3:01:b8:44:ef:9f:3d:85:ed:
                    ab:2b:4c:62:95:0d:1a:c0:59:3f:57:d8:d9:03:b3:
                    5b:35:28:f8:e3:58:f9:07:3d:a9:f2:3c:07:f7:40:
                    82:32:f0:39:a1:a8:9c:4c:d3:a0:d9:40:29:63:2b:
                    3d:31:92:ed:e2:40:12:ae:52:06:8d:09:5f:10:44:
                    3d:4b:86:e2:bf:33:3d:87:ac:65:6a:ae:ca:81:eb:
                    81:a7:8a:4e:ba:cc:5a:81:e1:95:31:4a:45:bd:d8:
                    c4:67:66:98:8b:71:d2:26:5f:87:28:dd:cf:f4:76:
                    0a:c8:21:72:14:c1:f3:04:9a:00:53:08:94:18:a7:
                    9e:b9:8d:56:36:d4:d0:fd:a3:8b:5f:cb:19:e1:90:
                    cd:36:93:25:dd:88:c2:27:af:a2:12:32:3a:c3:0a:
                    1f:b0:ce:1c:19:4c:c9:f7:0c:a3:4a:07:6a:54:52:
                    22:de:68:63:1c:47:33:92:37:15:d7:bc:25:a5:59:
                    43:e6:84:64:c4:63:5a:8e:58:f2:5b:eb:2c:04:b3:
                    6e:2b:b4:55:73:74:8f:89:9d:88:b0:5c:64:90:2d:
                    e0:84:79:ba:3c:6a:19:d1:95:3c:23:ea:14:38:ea:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:74:94:A0:E5:58:8C:FE:A0:A8:9E:84:83:BD:38:E0:A2:5B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/552722f1-a67d-365b-9c3d-71e24357c812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:38:f2:9d:5d:8c:51:cb:8a:ec:6d:e2:7b:e5:78:0a:c1:03:
         b6:38:02:03:dd:66:10:22:d3:e4:dd:af:36:d0:a9:a3:ee:ae:
         9f:c1:6f:ff:26:99:cf:15:9f:8d:19:01:1e:29:31:aa:82:5b:
         fc:0b:58:8c:fd:cb:28:11:7e:46:82:d9:17:b0:01:c7:e7:8c:
         05:de:bd:18:0a:ad:e8:c5:86:a3:1a:80:04:70:c2:4a:42:9b:
         71:6e:91:a3:4c:f0:07:fc:65:78:ac:28:0f:d2:11:66:81:36:
         44:21:5a:96:76:3f:1b:5d:ca:ce:5e:58:c0:35:aa:11:ad:3e:
         d6:56:1a:f4:42:5b:e5:f2:16:38:5f:b8:31:bd:cb:72:84:5f:
         7d:f7:bd:15:12:ce:a7:9d:1c:02:84:0b:06:8c:b5:2e:05:30:
         49:75:06:b1:0f:95:1f:db:9e:b3:3c:6d:c6:17:0a:ed:67:df:
         78:6d:46:80:65:12:0c:2a:7b:13:be:c6:ab:a2:02:50:39:f2:
         79:7a:0a:02:49:1e:9b:e3:28:39:ee:df:42:c4:f5:a0:d5:a0:
         1f:d2:3d:71:6f:72:85:07:cf:51:d2:7e:2f:be:8f:2d:2f:67:
         da:1a:67:4a:f2:37:1c:36:e8:ed:42:4d:d9:94:2f:4d:00:4b:
         20:bb:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:38:21 2025 by rpki-client