Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a14972c-288e-3bdc-acb3-6bd643c9298f.roa
File:                     8a14972c-288e-3bdc-acb3-6bd643c9298f.roa (raw, json)
Hash identifier:          U4atm6O6yNZf7gfcZIgIxwHrwWsNHmGDpPPYm4CYMsQ=
Subject key identifier:   AA:27:7D:CF:72:E8:4E:E3:C2:53:14:77:94:DD:20:9D:C5:A5:82:71
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD226DC6B932384E6AC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a14972c-288e-3bdc-acb3-6bd643c9298f.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.18.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d2:26:dc:6b:93:23:84:e6:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=678071e6-0e31-4966-ba6e-8580fbceb486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:da:c2:3a:85:f3:e6:73:2c:1a:0e:45:09:
                    5f:02:9c:62:63:5c:b6:f5:e0:d0:7b:48:24:db:cf:
                    45:e5:f7:d8:61:06:0c:6d:0b:d0:5c:b9:f5:61:2a:
                    8e:22:d7:0a:48:1e:cc:4a:57:2d:74:a7:9d:82:a1:
                    1b:d3:88:16:44:a7:9c:c0:0a:5a:e5:5e:53:da:97:
                    1e:36:b5:2f:13:1d:9e:87:74:59:da:72:f7:74:e2:
                    97:34:10:d4:c0:d2:52:8b:e8:90:b9:cd:62:ea:eb:
                    e4:78:89:8a:2b:a7:93:ad:62:f7:9e:6a:15:63:c1:
                    f7:9e:76:d7:f6:af:76:8b:62:76:8a:07:7c:92:e6:
                    52:38:e6:e5:d3:4b:6c:f0:8c:f9:77:df:44:8e:46:
                    1c:38:aa:2e:20:8c:de:b6:b8:86:a9:5d:31:a9:bb:
                    f5:d0:3b:54:ff:c0:2a:70:99:4f:15:c6:9d:e3:f1:
                    9b:78:1b:3d:df:a7:ec:83:96:b4:04:bb:1f:8e:cd:
                    69:96:3f:b3:c4:e2:ac:d8:dc:5c:cd:1b:a3:a1:2f:
                    ee:a8:f8:bb:fe:d2:e1:09:2a:a6:16:1c:9c:ea:25:
                    62:bf:6b:e2:cb:f5:e0:bb:a2:b6:91:17:e5:3d:47:
                    d9:62:36:27:61:e3:42:03:77:3b:40:3c:d7:dc:b3:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:7D:CF:72:E8:4E:E3:C2:53:14:77:94:DD:20:9D:C5:A5:82:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a14972c-288e-3bdc-acb3-6bd643c9298f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:e7:9d:8b:5c:92:99:f5:a7:9c:79:4e:d8:de:d6:c3:84:
         fc:d5:ba:30:04:68:e7:d2:f2:ff:7e:c3:ab:71:a5:9a:24:5b:
         e5:ab:21:8e:e0:14:84:c0:5b:a7:94:72:8b:f9:05:6e:54:7b:
         a4:11:d1:0b:4e:f4:ab:7b:1d:9d:70:4c:c9:af:f6:b8:e8:0d:
         bb:29:3f:c7:54:2f:b3:13:58:ef:94:46:e0:7c:23:3b:8f:57:
         39:61:0a:55:f6:8f:a6:9a:08:17:a7:da:75:66:fb:b0:84:e8:
         27:7a:2f:04:f2:5d:24:18:ea:e4:5a:58:c1:79:b8:57:a2:59:
         86:69:10:13:3f:73:42:f9:54:e3:15:db:7f:6a:60:d2:2f:79:
         27:2e:9a:f1:9a:e1:62:f8:7b:70:43:ea:88:e3:48:2d:ee:d0:
         cd:25:e3:c3:e1:21:4e:58:f7:bd:52:ab:9b:98:25:67:a5:9b:
         f1:64:ed:59:20:2e:4b:9d:3f:67:16:83:09:3f:3b:1e:a7:d0:
         82:15:59:d6:f1:ba:a7:72:ca:19:df:14:7c:53:d1:21:dc:c9:
         0d:ee:44:a4:3f:eb:3c:da:c4:4b:45:a5:93:f0:1d:10:16:33:
         b5:c7:97:73:3f:0a:b6:66:d5:88:2e:99:32:95:b8:35:e0:76:
         2e:cb:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:22 2025 by rpki-client