Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
File:                     654ebbd6-d45d-394f-9ca4-182851f75abc.roa (raw, json)
Hash identifier:          7XqklBFmTlgIl3xSHdtCzu/+2Dco82Gt+1tYx2mUFFw=
Subject key identifier:   4F:C7:4E:5A:89:1D:15:B3:81:B4:BF:76:C4:43:B7:09:2C:26:F2:D3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD1492294D4AFB10EF040
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.17.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d1:49:22:94:d4:af:b1:0e:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=882b9e34-c0f2-48a7-87c2-1494671780ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:ff:03:a7:ff:94:5f:63:4f:02:64:2b:dc:
                    35:9c:38:fe:fa:0a:dd:ac:03:b2:aa:8d:88:f5:36:
                    22:73:7c:3e:72:ef:8c:a8:ab:c2:61:a9:dc:2e:98:
                    55:0d:c7:7e:38:29:cb:5b:8f:f1:bc:d6:9c:ab:b3:
                    51:3c:2c:c3:66:58:2d:1e:be:e0:e4:f0:c8:50:8d:
                    e7:75:57:60:37:0e:e1:ba:f9:3f:27:7a:d7:97:2f:
                    54:52:0c:16:bb:e8:57:a4:7d:eb:f2:02:a8:18:5c:
                    85:be:3f:c6:ae:0a:bc:8f:31:1c:df:ad:b2:df:77:
                    7b:d7:6d:70:04:e3:a7:a0:19:ec:7d:e3:d1:f1:53:
                    7c:3f:6e:81:20:c8:e5:08:15:c1:85:ee:ef:74:39:
                    dc:3f:2a:3a:e6:05:35:26:bc:bf:c0:33:7e:d3:4f:
                    7a:a5:18:5d:b7:d3:df:04:33:53:b6:8d:d8:7e:48:
                    f3:eb:72:e4:57:cb:0b:63:07:25:5b:32:01:4d:79:
                    f5:d7:46:8a:ce:02:ab:17:17:3f:af:59:4f:c7:68:
                    a0:ec:80:c5:2c:27:93:3b:7b:b9:6d:ab:8b:e6:81:
                    b5:30:e8:b7:14:31:bc:47:14:b8:83:ab:00:da:2e:
                    a3:8b:40:16:3b:74:2c:41:07:2b:66:3f:7d:38:99:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C7:4E:5A:89:1D:15:B3:81:B4:BF:76:C4:43:B7:09:2C:26:F2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:68:d9:95:eb:9a:ba:a2:25:db:5c:db:6c:01:df:1b:cd:89:
         dd:db:ca:22:69:70:6d:07:dd:04:3a:39:c3:16:92:bc:5f:32:
         d5:a6:da:3f:82:92:ea:aa:ee:1b:fa:c2:39:e0:a8:bd:6a:96:
         a2:bc:38:b3:0d:6d:d9:8f:d3:88:1e:aa:6a:5a:ef:60:04:88:
         00:0c:61:68:e7:f6:a5:23:04:df:41:42:91:a5:c7:2d:53:57:
         c0:62:7b:be:4e:55:02:42:94:c0:f7:3f:af:e6:29:e1:68:d0:
         34:c6:b2:a7:52:57:a9:a1:3d:44:b8:74:49:13:bb:46:2f:d8:
         d0:a4:3d:d4:ff:09:00:fd:76:c9:02:f3:de:fe:9e:8a:07:74:
         15:12:c9:05:9a:71:c9:76:df:da:f3:43:9f:13:31:61:dd:80:
         25:b9:2d:4c:69:ca:c3:a7:8c:ee:79:d3:73:f3:8e:54:f2:4d:
         fc:59:30:46:2e:af:03:87:df:e9:1a:df:53:78:06:06:02:3e:
         0a:52:79:76:aa:80:0c:e0:b3:a8:ab:86:da:6f:bd:fd:7c:14:
         d5:9a:0e:c6:06:e0:e2:99:1c:50:5c:64:3a:14:36:4d:b4:89:
         40:f7:69:bb:27:b6:0d:95:ca:ef:b9:b6:40:a2:bc:60:c6:e9:
         97:6b:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:12 2025 by rpki-client