Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa
File:                     5f27d521-7a00-308c-a254-7b4b123cddaf.roa (raw, json)
Hash identifier:          VIiclMIpFV6zc96Cyun29nrWkPfz0/k4tLB2wmvCU5g=
Subject key identifier:   26:EE:64:89:E5:5A:B5:E9:5D:87:0E:6D:0B:6D:FA:40:C5:A3:AE:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD44359C12EC18C900B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.19.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d4:43:59:c1:2e:c1:8c:90:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=ef8fdf3c-a6bd-4333-8324-13e7a2134245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:b9:d0:ab:9a:ca:5e:ec:2b:18:76:3d:f1:
                    04:f0:70:54:17:6a:16:aa:17:70:3b:5d:16:3e:6e:
                    c9:3b:24:26:a8:ac:a3:50:2a:26:35:80:90:8a:07:
                    dc:ce:a5:c8:c6:bc:c7:cf:65:a5:39:f3:7c:33:5e:
                    cb:29:f9:5b:06:1e:67:93:53:0f:09:90:78:59:c3:
                    11:77:c6:21:24:18:b5:d6:4f:1c:27:82:49:b8:33:
                    1c:a7:f1:e3:40:52:1e:4e:85:1b:38:8c:fc:b9:48:
                    9a:17:e0:cf:26:ed:8d:40:1c:8b:4b:ea:21:65:65:
                    9e:5f:63:d0:9c:6f:a1:c5:a0:ea:d8:65:31:fb:f9:
                    ee:49:8d:de:62:7a:e9:6d:d8:7f:24:61:00:76:21:
                    94:d2:05:c6:1a:05:55:8a:fa:28:85:ea:bb:da:12:
                    c4:ef:e5:a6:3d:6e:8a:fa:06:84:63:11:84:9e:d8:
                    b2:b3:30:98:4b:35:a1:07:b1:5d:a0:b5:a0:e1:41:
                    e9:a4:e0:2a:59:69:04:a7:83:c2:0e:39:53:7e:6d:
                    53:ce:83:0a:2f:ed:2b:66:b4:a4:17:c6:77:aa:f0:
                    f3:5b:f2:cb:cb:0b:8a:a1:42:ca:bb:2a:70:4b:9f:
                    37:2f:76:5c:51:d1:5f:7c:b1:20:04:d3:d6:e4:77:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EE:64:89:E5:5A:B5:E9:5D:87:0E:6D:0B:6D:FA:40:C5:A3:AE:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:45:7a:f3:c9:c2:8a:d2:34:08:6c:e6:73:47:5c:0d:cb:
         14:5a:f9:5e:2f:89:e9:d1:8c:ec:3e:5a:5c:62:fb:b3:ec:b0:
         56:ef:ef:a6:40:28:87:df:aa:c5:61:75:7b:1f:fd:51:83:8d:
         55:c9:db:00:3f:f5:52:97:92:d7:0b:c5:6d:f7:45:2a:19:48:
         f5:71:95:9c:b5:79:4e:af:8d:f0:f1:0e:f1:d1:a9:1b:06:43:
         5c:d3:3f:9d:bc:10:a1:b5:5a:c0:54:85:50:a6:78:b8:c7:84:
         13:5e:6f:1f:74:e4:de:ee:fc:35:5e:43:55:b2:da:d3:6f:1b:
         e7:30:36:64:05:f8:54:31:26:92:eb:cc:a9:3d:13:64:b1:3b:
         c8:ea:d0:36:bc:27:17:32:3c:78:dc:13:a3:ea:f9:6f:ce:d8:
         01:bb:b9:83:5c:a9:2a:5d:90:ac:d2:b3:00:a6:d3:2b:20:c2:
         8f:0f:c9:35:b2:4f:27:7c:0a:95:0b:0a:ca:fb:e3:42:4f:a9:
         c9:2a:2a:2f:f8:8b:99:33:6e:b2:a4:87:ef:06:be:cc:a0:e0:
         2e:2e:62:25:da:d7:2a:78:1d:6b:f2:5f:8c:13:c3:20:a5:55:
         aa:81:62:14:87:5f:a4:57:94:67:6c:44:fd:d2:d8:44:df:60:
         41:54:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:43:26 2025 by rpki-client