Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db56bef-fa1a-32c6-9814-f0a7c91842fb.roa
File:                     8db56bef-fa1a-32c6-9814-f0a7c91842fb.roa (raw, json)
Hash identifier:          /o51E6G8Grt3QW5SqTksjeYN2Xa6T1WDImiZVXCmxN0=
Subject key identifier:   9B:CD:33:5B:38:D5:21:5D:39:17:00:30:8B:11:C9:FB:94:F0:50:E0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFCA96FB7A61FF43E0A77D
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db56bef-fa1a-32c6-9814-f0a7c91842fb.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.19.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:ca:96:fb:7a:61:ff:43:e0:a7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=b36881e6-309e-4443-9bd0-163200120233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:97:12:71:47:68:32:c0:b7:91:1b:c4:3c:
                    e6:4f:b9:8c:f0:c8:44:5a:74:48:71:45:6d:70:41:
                    d3:0b:b1:d1:19:72:63:7b:63:f9:4b:e5:b0:fc:aa:
                    c6:aa:7c:58:25:a5:2e:7d:e0:cb:66:26:31:4d:d7:
                    06:5a:55:9d:65:c6:71:3d:82:ac:53:5a:c5:17:9b:
                    8b:48:af:93:79:8c:4e:51:74:f7:be:77:b7:88:cb:
                    3b:49:b4:f2:b1:03:8c:ce:91:9f:03:e0:f9:97:20:
                    0f:92:8c:49:b5:8d:23:de:37:cf:72:45:57:9c:82:
                    3e:03:de:85:fb:5a:d9:cc:57:6d:c7:40:79:f1:e8:
                    f2:d6:3f:fa:d1:11:e1:c3:fe:50:3c:f8:39:14:e6:
                    3a:d5:f9:f1:52:f2:aa:32:a7:71:5d:d8:61:0d:9e:
                    b2:42:76:62:c3:70:b3:4c:7a:51:ae:e5:3b:8f:ff:
                    86:17:4b:c5:bc:c3:76:1e:b1:45:5c:6d:b0:84:7f:
                    34:e4:fa:60:c5:b6:9f:cf:97:ae:56:04:00:0b:8e:
                    bb:ae:1e:e1:6e:e3:8c:a9:0e:37:16:07:20:96:9b:
                    2b:4e:a5:69:48:69:4f:ed:c5:e4:1d:f9:d0:23:ed:
                    5c:51:6f:44:ba:71:d1:08:88:cb:6d:2e:75:29:c6:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CD:33:5B:38:D5:21:5D:39:17:00:30:8B:11:C9:FB:94:F0:50:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db56bef-fa1a-32c6-9814-f0a7c91842fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:7f:1d:3a:17:df:c9:f1:65:fc:61:a5:b6:c4:7c:32:f9:
         9e:26:3d:3c:8b:28:dd:4b:13:fa:32:49:a6:9e:fd:fa:4b:f9:
         f7:50:dc:ba:79:ef:2a:b6:a4:46:7f:fc:d7:85:d6:b7:5a:86:
         dd:12:2a:8e:7a:99:39:99:06:a0:d4:9a:d2:36:a3:1d:3a:af:
         34:72:ad:fa:a3:27:e4:76:8f:b8:4d:b4:35:9d:bb:fb:b0:77:
         d5:37:e2:36:8c:71:3c:11:b1:ae:0a:44:f9:ec:d5:4b:c7:21:
         7f:bf:0d:00:98:10:0c:cb:81:46:4a:ac:5c:b5:e6:fd:50:34:
         3c:94:c4:df:ce:67:97:a6:03:39:23:42:3b:48:4f:3f:00:29:
         b9:38:bc:63:d4:e3:09:f8:4d:95:72:55:ae:f6:42:8c:98:94:
         c7:1f:1a:13:b9:56:c8:a9:d8:a8:35:e0:b3:ee:1c:68:d5:b2:
         2e:5f:a4:a3:2a:03:2b:71:6e:6d:9a:e9:1b:5d:d5:0e:67:1c:
         96:d0:70:e2:f7:9f:7a:1d:e8:ce:4b:50:30:7e:ea:cb:b0:df:
         2b:1e:6a:c2:24:e8:65:f5:4d:51:eb:c9:22:1d:f1:db:7e:12:
         c9:9e:e3:93:d4:6c:59:fd:a3:de:71:c9:5d:24:1c:23:7e:57:
         2d:d0:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:53:53 2025 by rpki-client