Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7d57332-f51b-309d-89ac-21f771a01817.roa
File:                     b7d57332-f51b-309d-89ac-21f771a01817.roa (raw, json)
Hash identifier:          7qAndYYO8zfD7gFNbX4fnEap0Bpmi5VJ6iJzIJ0e5Ok=
Subject key identifier:   A5:38:6D:92:33:14:D0:F5:B0:E1:8C:79:B9:C5:8C:57:5A:06:D8:E6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550FEC0D70748D8D99DDE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7d57332-f51b-309d-89ac-21f771a01817.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.31.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0f:ec:0d:70:74:8d:8d:99:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=13c0b194-bb87-4873-a02b-68f90fd0c143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:fa:4a:69:55:4c:c5:ba:a3:fc:32:57:f1:
                    5c:eb:37:b7:91:78:ba:9a:10:85:eb:07:5c:20:80:
                    55:4b:ee:0f:50:60:3a:ae:17:a5:20:0b:42:8d:ec:
                    2e:1c:7c:8b:40:65:46:f5:b5:dc:5d:e8:13:6f:af:
                    2f:b4:8c:dd:f9:d7:a4:d4:91:1f:6c:48:17:9e:69:
                    56:25:35:a1:ad:9d:1d:01:ee:a1:6b:93:bf:c6:19:
                    73:5c:e9:30:95:bd:60:15:d5:4b:28:80:ef:4c:ee:
                    11:59:6c:bf:22:a4:b2:65:80:ba:39:1f:71:47:e4:
                    d4:7f:96:15:67:b6:5d:af:08:2e:63:dd:ad:2d:ef:
                    97:f1:28:2a:57:4a:db:ce:69:73:92:8f:af:af:4c:
                    03:ae:63:1f:46:38:f0:37:32:4e:9c:e2:4d:37:51:
                    62:a4:6f:43:e9:2c:d3:45:59:bb:13:98:e7:ee:c9:
                    a5:eb:8f:fb:ae:6a:b0:d1:99:f2:a1:dd:55:a8:59:
                    38:1a:98:82:36:9f:80:ae:3c:a7:23:fa:b2:be:fd:
                    b9:7b:49:67:d6:65:11:2c:81:e2:8d:ab:d7:c3:8b:
                    eb:a2:46:65:f6:47:68:a2:e5:a4:29:7b:c1:a1:07:
                    67:a5:0a:b4:0e:da:4c:b4:20:93:fc:2c:d5:21:af:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:38:6D:92:33:14:D0:F5:B0:E1:8C:79:B9:C5:8C:57:5A:06:D8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7d57332-f51b-309d-89ac-21f771a01817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:e2:fe:62:4a:b1:c4:a9:97:e9:1a:dd:f8:7a:20:d0:5f:
         d0:3b:ba:9c:30:7c:5a:7a:a6:e6:ca:29:84:33:1d:d3:f9:f5:
         57:21:30:1e:b3:39:23:91:4c:06:a2:d3:5f:ee:36:c7:66:88:
         b1:84:9b:75:af:b2:e1:d1:35:f2:d7:6a:48:22:b3:2b:76:e1:
         c6:30:ae:fb:b8:0c:bd:dc:c3:9d:ae:71:9b:b3:1d:80:1c:a1:
         cc:6b:a5:a0:7b:47:63:a5:ab:d3:d5:e2:f6:cf:dc:7d:d9:61:
         70:fe:c2:45:4b:0c:9b:23:00:42:28:df:2b:ae:da:ea:fd:b6:
         a3:d9:9d:f2:db:3d:ac:71:6a:97:7d:bf:4c:1a:76:32:c1:18:
         82:8a:59:95:46:9e:5b:47:ef:89:f1:82:12:7b:c8:9b:bb:4c:
         5d:a2:59:53:5f:de:2f:50:36:43:05:7b:83:e9:8b:e6:d7:a7:
         83:fa:5d:09:c0:d2:55:51:8b:45:0a:24:21:72:bb:13:50:91:
         b6:f0:0d:b0:c2:b7:22:af:ec:5d:5f:df:91:3f:8b:0b:b2:5b:
         91:5e:a9:f0:16:11:38:7f:b9:15:93:ac:94:12:24:9c:5e:eb:
         95:c9:c3:55:b1:0a:39:a8:f9:21:e9:18:0d:e5:bc:40:7a:b8:
         84:5f:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:54:00 2025 by rpki-client