Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa
File:                     986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa (raw, json)
Hash identifier:          kRWWoIcKQemGACUQO0ju1A8gW/sEn2rokc0y2hduhk4=
Subject key identifier:   87:2B:AA:93:8C:6F:52:88:B7:57:47:08:88:6B:A9:67:98:22:56:5D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584908817E522FB2CA5D0AE9E480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        104.27.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7e:52:2f:b2:ca:5d:0a:e9:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=9d28176a-9dbb-43f5-b891-dff99bc6ecb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:4a:84:c8:5c:1c:32:61:dd:d1:f3:bb:d7:
                    02:3a:ab:d6:1a:2c:5b:e2:ad:ac:6c:ff:71:f3:70:
                    bf:88:7d:cb:1e:26:69:a9:7e:50:99:8c:8d:7e:29:
                    64:37:5e:86:ad:d3:05:f4:4b:da:20:ed:f6:4d:bf:
                    6a:52:87:09:a4:5e:b8:f8:f1:d1:b1:33:62:4d:ca:
                    29:28:33:f2:36:96:c7:79:a7:da:f7:0a:fd:1f:d3:
                    55:46:88:4c:57:9d:f2:22:14:61:1c:c8:ed:f9:e1:
                    00:18:12:93:9b:84:fc:e5:d7:b5:72:7f:53:69:01:
                    41:cd:46:e3:c3:e6:13:29:a3:64:73:af:56:b1:e6:
                    58:af:5e:00:b8:26:4d:22:f3:fa:c5:93:03:fd:6e:
                    9b:13:42:f9:9f:5d:01:45:83:36:1d:7a:2e:f3:a5:
                    dc:c2:f6:de:02:d8:95:cb:11:b5:62:7f:b0:ea:b1:
                    af:00:00:bf:16:68:9a:e0:93:8a:2f:b7:25:9d:ee:
                    d9:29:a7:39:0a:c2:d3:a5:ec:23:bf:5c:d4:37:1a:
                    81:2b:bc:c9:2d:c9:34:dc:de:b5:8e:aa:15:b5:a6:
                    23:68:58:ea:f2:16:4f:d4:14:5f:79:bb:e4:78:06:
                    da:16:33:5b:13:b8:8d:a1:ff:a8:7b:27:00:d6:13:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2B:AA:93:8C:6F:52:88:B7:57:47:08:88:6B:A9:67:98:22:56:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:22:46:67:08:0a:a6:0c:e2:5f:37:b1:0f:2f:4e:d9:a5:1b:
         9a:af:2e:28:60:4f:f2:e9:09:99:b9:0a:b3:c1:72:d4:36:11:
         a3:cd:5e:b2:d7:c5:4d:61:db:4d:e7:68:cc:cf:91:6b:e3:a3:
         1d:83:ec:02:1c:ee:2a:ad:d1:fe:17:52:53:f7:21:52:92:59:
         0f:78:88:f0:94:d1:44:7b:d9:b9:75:15:23:53:be:75:1d:24:
         27:e6:4e:52:3d:04:77:0f:1a:f0:18:08:f0:21:e2:11:a3:c2:
         8f:53:e9:7c:8d:1d:03:04:1e:25:46:53:ee:d9:72:d7:44:a6:
         d7:3e:3a:27:99:6b:9a:3b:65:ec:95:36:98:55:af:fe:f3:15:
         c8:d1:b2:7f:4c:e8:40:0a:f2:0b:6a:78:ae:0f:e2:02:c8:60:
         05:be:a2:b1:d2:02:50:38:78:9b:e9:17:2f:22:94:87:80:0f:
         c6:e0:73:91:9d:de:41:a3:ff:62:1d:eb:d5:16:2c:ec:60:d4:
         d7:0e:19:7f:3d:26:ab:7b:13:a1:f4:1d:b1:26:a0:e8:a3:d5:
         d2:ce:92:95:23:9a:00:2b:58:16:59:c4:13:84:23:2e:d8:52:
         8c:3e:19:b3:c9:fa:da:da:20:e7:4d:9f:08:26:82:ff:65:2f:
         e3:be:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:26 2025 by rpki-client