Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb315c7f-790d-3247-a71a-800d1d409d51.roa
File:                     bb315c7f-790d-3247-a71a-800d1d409d51.roa (raw, json)
Hash identifier:          eIBDpdoPk2eugQz9v1hjbvBiXIyhvxqg+dbsVmIqFhU=
Subject key identifier:   7C:92:FA:4C:38:7B:AA:A2:49:24:74:9A:FD:D9:F3:D3:35:7B:2C:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD1655749FACFC4742F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb315c7f-790d-3247-a71a-800d1d409d51.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.17.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d1:65:57:49:fa:cf:c4:74:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=200da079-bcad-4b5e-bb24-d18a2026e94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:3e:b9:38:b7:c4:62:7e:a9:e1:76:8b:b4:
                    98:26:61:84:79:db:5c:1d:32:7b:7e:9e:0c:c6:3f:
                    52:4b:3c:3d:6f:9b:2c:2c:1a:38:46:41:a4:41:a4:
                    53:c6:c4:a4:c1:e8:a4:90:be:fb:60:1d:30:89:4f:
                    1e:70:b5:8d:ce:b8:ba:18:fb:f8:9a:29:f6:c2:99:
                    c9:cc:b1:26:1f:7b:a4:07:dd:f4:5f:b2:d9:fa:2c:
                    b8:ab:67:83:de:96:3e:6b:b7:9c:72:4b:7c:5e:3e:
                    51:42:2f:57:ef:f7:c5:1a:a7:1a:9a:9f:67:8f:61:
                    84:e0:be:54:f4:34:ea:8f:00:bf:8b:98:ad:ac:7f:
                    8c:c1:90:33:ef:aa:03:76:04:19:e0:40:16:48:b5:
                    5d:d9:da:52:af:78:e9:7a:5c:86:c2:1e:07:fe:4d:
                    65:2a:8a:50:30:e9:a4:75:49:15:3f:bc:c4:f8:16:
                    5d:4f:d5:1c:25:d1:8a:10:94:21:bb:b3:78:9f:07:
                    3b:f0:e3:85:e2:56:30:83:ae:32:bf:d8:9a:a1:00:
                    8b:ee:51:03:64:49:a4:a3:34:12:83:a5:e9:dc:1c:
                    e8:7e:54:5f:b0:33:c8:e0:3e:29:34:50:a1:b3:87:
                    4f:29:3a:e9:13:4d:bc:0f:d3:e9:dd:72:f7:29:c9:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:92:FA:4C:38:7B:AA:A2:49:24:74:9A:FD:D9:F3:D3:35:7B:2C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb315c7f-790d-3247-a71a-800d1d409d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:b0:43:1a:54:b8:7d:2b:35:44:9d:41:e5:46:06:8f:61:
         7f:f9:20:1c:0a:dc:4b:05:31:59:24:25:31:5b:76:e4:67:c3:
         f7:ee:56:3b:75:10:24:1d:e2:9c:95:48:67:77:05:e8:c6:1f:
         16:91:a6:f1:37:ee:8a:38:29:98:28:0b:6e:80:f2:51:11:ba:
         49:44:0c:fb:bd:a6:8a:13:54:1a:a6:e5:2f:2f:1e:3b:03:51:
         aa:62:07:e7:0a:72:ae:d3:2b:8e:52:72:7d:18:64:93:3b:6a:
         5c:ac:72:27:41:c1:2f:10:ad:3e:ec:15:61:ae:ba:42:4d:41:
         8f:9f:0b:14:99:aa:75:79:53:dd:93:24:27:50:81:04:18:33:
         90:f4:af:fa:1f:95:df:15:91:06:99:20:fc:6a:95:16:ff:85:
         6f:77:98:d7:a7:d2:0b:c5:2e:fa:f2:4e:25:af:73:e9:71:4a:
         82:5f:e6:cd:24:0d:d3:3f:89:f2:73:dc:c8:61:0e:f4:04:44:
         83:8f:ab:57:de:b6:1c:ed:80:17:7f:b7:c1:a4:9a:42:3b:2f:
         6f:17:cf:27:2b:cd:c7:12:5f:07:6f:5f:50:b0:80:22:f2:17:
         ab:ec:e5:f6:1f:f5:89:c8:90:69:c2:22:d1:f3:db:aa:56:b3:
         18:82:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:47:24 2025 by rpki-client