Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f580837-4a0f-3079-8988-dc16fea04018.roa
File:                     5f580837-4a0f-3079-8988-dc16fea04018.roa (raw, json)
Hash identifier:          41B62bfnIFrHZPYpAth1bzZ18/N+lGiKlEDhkN6BiCk=
Subject key identifier:   F4:0E:A3:4C:E2:8E:F8:A7:BD:7E:9C:2C:D0:E6:86:F0:FE:B2:BB:A4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD6C3897ACF3EB0126540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f580837-4a0f-3079-8988-dc16fea04018.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.25.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d6:c3:89:7a:cf:3e:b0:12:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=c23ea285-f184-4bc3-84ac-32998828a149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:37:28:49:9e:8d:27:a1:90:36:65:2a:5b:
                    c4:27:29:99:45:4d:c4:41:e0:f9:9a:eb:d6:08:66:
                    b1:3f:14:9d:1c:1c:0c:ab:eb:3a:1a:92:72:e5:dc:
                    64:94:15:ea:6c:69:a2:dd:6a:af:f2:e5:8c:06:13:
                    fa:ec:28:5a:55:a4:31:f8:83:c5:61:64:95:ce:10:
                    75:5b:f6:3e:97:a1:1e:3b:b1:e1:8c:11:af:01:35:
                    54:47:dd:69:af:9e:51:d2:1a:8d:f4:8b:71:f6:52:
                    8f:17:47:c8:2b:b8:6f:31:69:2e:2a:e8:29:c3:8b:
                    ec:ae:13:df:e5:2f:50:e3:28:73:fc:26:08:29:35:
                    13:4a:2b:d4:44:46:66:0a:29:1e:2b:ab:8c:5a:c5:
                    2e:c1:21:2b:cb:61:c4:9b:04:38:b5:f4:a6:79:8a:
                    76:ef:1c:52:37:f1:58:6d:c8:fe:22:c2:96:d2:4b:
                    f2:b3:92:8e:93:8e:2d:95:e1:dd:c5:47:cd:80:7c:
                    b0:6b:4f:4a:db:3d:b2:aa:c5:ac:c4:7f:7c:b7:6b:
                    b1:f9:0f:04:58:61:0c:50:3d:f0:a3:dc:ca:96:cf:
                    01:3d:ca:2b:f6:c0:88:18:7a:78:ed:22:6f:02:ca:
                    eb:a4:ea:cc:50:13:aa:6e:f6:d2:51:57:07:dd:de:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:A3:4C:E2:8E:F8:A7:BD:7E:9C:2C:D0:E6:86:F0:FE:B2:BB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f580837-4a0f-3079-8988-dc16fea04018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:7a:cb:5a:81:cb:ee:c8:c9:3a:6c:0d:8f:14:ad:df:8d:
         d0:ad:19:33:0f:8e:b0:2f:7d:1a:fb:11:7a:cc:c6:81:cc:a1:
         98:9c:52:60:a3:c4:6c:87:9f:be:84:d9:8e:40:95:a6:e0:ec:
         4e:57:f2:f1:20:c0:68:05:27:b0:6a:56:b9:20:e8:88:af:1a:
         bf:54:e3:62:a5:90:1a:77:77:bb:dc:d8:04:76:4f:14:17:92:
         4a:32:c1:ef:9e:8a:c5:04:c4:43:a0:34:f3:b4:1a:38:84:ca:
         4a:06:66:0d:12:14:c1:78:ca:13:3b:f6:7b:5f:84:f8:1e:4c:
         42:fa:a9:1d:85:d7:17:7c:3f:61:57:ea:6a:8b:82:c9:c2:a4:
         f0:77:14:cf:e4:08:d6:7e:61:22:97:25:12:08:0e:0b:c9:8a:
         20:b1:0a:4b:75:7f:c6:84:cb:85:54:3f:a5:39:03:24:10:ed:
         88:04:ee:4d:78:cb:1d:20:dc:1c:19:eb:e1:f3:db:6b:bc:e7:
         ec:4f:38:db:83:f2:13:ea:3b:5f:8b:84:6a:42:51:1a:06:0a:
         4e:59:ad:4e:c8:76:46:8b:dc:ca:cc:32:7d:fa:27:94:3d:ab:
         4f:8a:bf:3d:8c:8e:e8:3a:11:df:52:75:b9:8f:18:33:7a:3e:
         29:ce:72:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79bDiXrPPrASZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
YzIzZWEyODUtZjE4NC00YmMzLTg0YWMtMzI5OTg4MjhhMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyE3KEmejSehkDZlKlvEJymZRU3EQeD5muvW
CGaxPxSdHBwMq+s6GpJy5dxklBXqbGmi3Wqv8uWMBhP67ChaVaQx+IPFYWSVzhB1
W/Y+l6EeO7HhjBGvATVUR91pr55R0hqN9Itx9lKPF0fIK7hvMWkuKugpw4vsrhPf
5S9Q4yhz/CYIKTUTSivUREZmCikeK6uMWsUuwSEry2HEmwQ4tfSmeYp27xxSN/FY
bcj+IsKW0kvys5KOk44tleHdxUfNgHywa09K2z2yqsWsxH98t2ux+Q8EWGEMUD3w
o9zKls8BPcor9sCIGHp47SJvAsrrpOrMUBOqbvbSUVcH3d4lkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQOo0zijvinvX6cLNDmhvD+srukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWY1ODA4MzctNGEwZi0z
MDc5LTg5ODgtZGMxNmZlYTA0MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHvestagcvuyMk6bA2PFK3fjdCtGTMPjrAvfRr7EXrMxoHMoZicUmCj
xGyHn76E2Y5Alabg7E5X8vEgwGgFJ7BqVrkg6IivGr9U42KlkBp3d7vc2AR2TxQX
kkoywe+eisUExEOgNPO0GjiEykoGZg0SFMF4yhM79ntfhPgeTEL6qR2F1xd8P2FX
6mqLgsnCpPB3FM/kCNZ+YSKXJRIIDgvJiiCxCkt1f8aEy4VUP6U5AyQQ7YgE7k14
yx0g3BwZ6+Hz22u85+xPONuD8hPqO1+LhGpCURoGCk5ZrU7IdkaL3MrMMn36J5Q9
q0+Kvz2Mjug6Ed9SdbmPGDN6PinOcqM=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:14:13 2025 by rpki-client