Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e63e235-f50f-34bc-a834-b7116ce1ea05.roa
File:                     7e63e235-f50f-34bc-a834-b7116ce1ea05.roa (raw, json)
Hash identifier:          fiLtcJq4nSQCGHL5XTrS6jxNhJNlGtRD9jEhPHrryBM=
Subject key identifier:   81:56:93:1E:34:06:68:3D:AE:4E:A8:17:0C:23:7C:FA:68:18:89:93
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFC83270A94202D31BD680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e63e235-f50f-34bc-a834-b7116ce1ea05.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.17.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c8:32:70:a9:42:02:d3:1b:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=55fb2984-61a8-43d4-a67b-93005faaf52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:3d:e0:d8:cf:13:42:61:9e:9b:65:f1:71:
                    48:17:a4:62:e3:82:01:a2:83:7a:01:98:da:75:9f:
                    69:6d:4e:65:d0:8b:85:3b:22:13:61:4a:da:6e:b4:
                    d6:8f:bf:58:72:2e:27:5c:a6:9f:15:9a:40:84:bb:
                    22:7b:5c:e9:88:00:a8:f9:a4:6e:db:18:e6:a5:36:
                    67:bd:a0:d9:7c:ad:ea:a3:a2:60:fe:48:38:28:4d:
                    43:48:a6:b1:58:94:d2:51:8b:9e:24:c8:24:1d:5a:
                    56:91:82:d3:be:31:4b:56:ab:af:52:06:bc:26:d3:
                    af:02:6a:46:7f:65:df:67:92:1f:52:40:b4:74:0f:
                    6b:a2:83:90:55:e7:d9:9b:59:48:be:63:5c:a5:8b:
                    f3:0d:3f:ed:bf:7a:e8:ec:53:6a:95:b2:3a:d2:29:
                    70:25:a8:1a:6d:e4:25:ff:ea:03:a9:87:5c:18:94:
                    64:5a:bc:fd:5b:3a:08:d1:8b:6d:b9:1a:45:f6:9f:
                    bd:9b:5c:7a:e6:98:98:5f:14:b8:84:01:73:5f:81:
                    ab:67:48:dd:b5:6a:e4:bc:d9:d2:89:2e:6a:44:82:
                    22:aa:ed:eb:4e:9d:b2:47:38:7a:82:e7:8c:d2:68:
                    3c:85:7c:97:9a:19:52:72:58:a2:a0:96:5b:8d:79:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:56:93:1E:34:06:68:3D:AE:4E:A8:17:0C:23:7C:FA:68:18:89:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e63e235-f50f-34bc-a834-b7116ce1ea05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:98:f6:f0:93:1b:f5:ba:80:f1:51:2a:34:15:1f:96:19:3b:
         9a:20:c5:64:f9:81:6b:94:94:ac:08:71:9e:17:b5:00:70:57:
         8a:f3:68:e0:ce:77:1b:9c:26:ee:f8:64:7d:32:5e:bd:87:0e:
         d3:5f:03:9f:66:d4:a1:3a:f9:e5:dc:bb:d1:ea:49:e6:35:fb:
         53:f5:f8:0d:3e:5e:65:2e:5a:6d:e2:8d:48:7c:15:0b:6f:30:
         e4:af:b0:1a:2e:16:9c:15:9c:4d:32:7f:09:a1:15:e1:8b:81:
         a5:00:61:40:8b:b0:47:a9:dd:e0:a6:60:64:cd:03:74:2f:91:
         21:4f:6c:5b:8a:4d:f3:a4:ee:06:4f:ed:40:9c:0f:e5:00:02:
         cf:7d:c2:55:25:7f:f6:4f:af:5d:cb:e2:1f:27:68:df:f5:fe:
         f2:4a:98:71:a3:b7:e3:57:94:55:29:aa:64:87:a2:3f:0f:ce:
         fc:00:80:68:23:f9:72:3f:97:77:ff:bd:f9:8e:9e:7d:48:d2:
         77:5d:75:5c:93:e4:fe:5a:e3:34:d6:1b:2b:8d:82:c0:f8:b8:
         98:34:7b:21:ad:ac:f4:9e:56:ec:f0:dc:6b:e9:81:6a:55:ff:
         0c:89:c1:74:79:34:ba:b2:cf:db:ad:9a:e8:78:83:d0:c7:5f:
         3a:1d:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:50 2025 by rpki-client