Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa
File:                     c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa (raw, json)
Hash identifier:          4HvG1FMNq3NCyqSs63VWTGnpUbb2dQMkbFqGGP9V1A0=
Subject key identifier:   32:7B:35:CC:3D:FF:B0:4F:DA:1D:D7:93:B0:67:94:39:80:6A:10:51
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E65502A9FC0AF30D3CFE6280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.31.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:02:a9:fc:0a:f3:0d:3c:fe:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=f939cd55-f54b-40c7-8128-737dd400993f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fb:fe:06:8b:e6:d7:73:08:de:cd:8a:7e:52:
                    e2:ae:4a:de:ac:59:4c:a6:64:56:90:d0:c5:a4:4f:
                    ce:55:eb:79:71:c8:d9:4c:17:6b:b3:5d:c2:3c:7d:
                    5e:ea:8e:1c:eb:5b:f1:65:84:fb:34:53:ea:98:80:
                    e1:fa:0e:95:66:db:07:ae:ec:d8:a8:f8:e3:7d:fa:
                    f9:ec:a2:c6:2e:0f:ad:f6:93:9d:cf:13:1d:16:81:
                    7e:78:4b:31:69:97:92:64:db:b1:ee:0b:df:4e:0b:
                    d1:35:43:3d:74:75:b7:94:d2:52:18:98:6a:45:b2:
                    76:4d:23:ef:78:d5:d5:40:b2:98:ac:c1:11:e0:87:
                    1a:00:2a:2b:0f:72:50:6f:a0:25:ed:a8:9a:87:bd:
                    2d:2c:c8:db:61:e4:16:d3:3a:74:f4:ed:d4:79:f7:
                    c6:40:f3:2e:d8:82:09:ea:07:ca:e2:26:3e:81:76:
                    f7:d4:63:7e:9f:87:4b:b0:97:46:30:5c:41:79:0f:
                    88:f6:62:6c:a7:0e:c8:a4:9c:95:36:09:b8:80:dc:
                    4d:4f:65:81:62:0a:be:6a:9b:32:9b:7f:8d:56:d6:
                    47:ae:25:9f:9b:9d:75:a5:8e:ee:28:37:ad:6e:f8:
                    75:69:e0:f0:4e:70:48:c0:7e:a4:9b:46:a7:42:b8:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:35:CC:3D:FF:B0:4F:DA:1D:D7:93:B0:67:94:39:80:6A:10:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ce:93:17:47:52:eb:06:4d:b9:b0:2d:22:cc:42:f8:ab:64:
         81:97:1c:8e:33:ff:39:e6:e5:1a:8c:fc:34:28:69:50:83:11:
         1c:d4:a4:d1:9b:b8:e3:58:00:d0:34:55:e3:d1:e7:ea:15:96:
         50:d5:e8:14:9e:14:74:34:19:de:3b:65:dc:b2:1b:e2:d8:b5:
         7b:c2:68:38:2a:8c:7d:8d:15:21:72:d5:98:f1:b5:44:d0:82:
         91:c1:b0:46:f3:9f:47:e9:1e:6c:4b:70:fc:ef:43:5e:24:65:
         40:98:5a:19:d1:1b:4a:bf:b8:d1:5e:b1:4e:43:95:c8:c7:c9:
         f4:f5:b0:09:cb:22:02:55:43:c8:a1:97:3f:a5:d7:c9:89:34:
         7a:ca:f5:51:a6:aa:4c:7e:e4:bb:f9:b7:f7:c9:f6:e1:dc:85:
         f2:df:bf:e7:ab:06:dd:01:f2:bf:57:c8:ab:5a:4e:0e:9b:60:
         09:c5:c9:58:67:e3:e8:48:5b:82:c8:97:53:3c:97:52:09:90:
         9b:83:4a:9c:cd:51:78:33:21:1e:8f:07:c5:c6:5c:5e:3f:6d:
         85:45:6e:a9:e2:d5:5c:2b:12:63:4f:3b:e1:b2:4d:47:92:49:
         96:f1:47:49:3a:84:f5:2d:ae:39:b4:8a:c4:11:ac:06:a7:53:
         f5:a1:8c:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQKp/ArzDTz+YoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
ZjkzOWNkNTUtZjU0Yi00MGM3LTgxMjgtNzM3ZGQ0MDA5OTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/v+Bovm13MI3s2KflLirkrerFlMpmRWkNDF
pE/OVet5ccjZTBdrs13CPH1e6o4c61vxZYT7NFPqmIDh+g6VZtsHruzYqPjjffr5
7KLGLg+t9pOdzxMdFoF+eEsxaZeSZNux7gvfTgvRNUM9dHW3lNJSGJhqRbJ2TSPv
eNXVQLKYrMER4IcaACorD3JQb6Al7aiah70tLMjbYeQW0zp09O3UeffGQPMu2IIJ
6gfK4iY+gXb31GN+n4dLsJdGMFxBeQ+I9mJspw7IpJyVNgm4gNxNT2WBYgq+apsy
m3+NVtZHriWfm511pY7uKDetbvh1aeDwTnBIwH6km0anQrgcqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJ7Ncw9/7BP2h3Xk7BnlDmAahBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzc3ZGRmY2EtN2EzOS0z
ZGIxLThkMzgtYjljYjZjOTkxNTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaB8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMHOkxdHUusGTbmwLSLMQvirZIGXHI4z/znm5RqM/DQoaVCDERzUpNGb
uONYANA0VePR5+oVllDV6BSeFHQ0Gd47ZdyyG+LYtXvCaDgqjH2NFSFy1ZjxtUTQ
gpHBsEbzn0fpHmxLcPzvQ14kZUCYWhnRG0q/uNFesU5DlcjHyfT1sAnLIgJVQ8ih
lz+l18mJNHrK9VGmqkx+5Lv5t/fJ9uHchfLfv+erBt0B8r9XyKtaTg6bYAnFyVhn
4+hIW4LIl1M8l1IJkJuDSpzNUXgzIR6PB8XGXF4/bYVFbqni1VwrEmNPO+GyTUeS
SZbxR0k6hPUtrjm0isQRrAanU/WhjFI=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:30 2025 by rpki-client