Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa
File:                     cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa (raw, json)
Hash identifier:          3oVIrA5SAMx/1E4+TB35dFAOuAh768dkACjpGk7n/RY=
Subject key identifier:   CF:B1:F1:B3:35:AA:DC:CE:93:DC:B5:7D:AF:E8:6A:34:A5:71:2F:E9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858492FD5D4CA4309724929229B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa
Signing time:             Fri 14 Mar 2025 16:07:40 +0000
ROA not before:           Fri 14 Mar 2025 16:07:40 +0000
ROA not after:            Thu 12 Jun 2025 16:07:40 +0000
asID:                     13335
IP address blocks:        104.23.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2f:d5:d4:ca:43:09:72:49:29:22:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar 14 16:07:40 2025 GMT
            Not After : Jun 12 16:07:40 2025 GMT
        Subject: CN=d4b06971-b774-434d-ab2c-cfa4210a9a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:0e:d9:c8:f1:7d:2a:9c:60:5f:bc:60:ea:
                    49:bc:cf:0d:a9:8a:d0:97:bc:ba:01:14:23:88:1a:
                    bc:5f:82:59:cb:21:95:5e:4c:a9:6b:25:f7:9f:91:
                    3b:c3:2e:ad:17:b7:8d:7f:3f:b9:90:cc:73:b0:61:
                    62:fa:9a:81:00:12:32:0f:7e:40:97:27:27:19:cd:
                    ca:9d:cd:a8:d8:46:cd:27:0e:18:64:bc:59:b4:48:
                    18:0e:b2:51:ee:63:12:2b:85:1e:c2:19:8a:df:00:
                    8e:aa:52:65:65:1b:ce:29:c5:6a:c9:cd:f8:68:db:
                    c3:04:67:9b:5e:ac:8f:90:a0:b5:c2:92:8b:dc:d8:
                    dd:89:42:24:af:62:b2:5a:ea:f5:74:d0:5f:38:d8:
                    6c:cc:cf:da:d3:c6:0b:8a:fe:93:d0:b4:8c:62:5d:
                    ba:a5:4e:43:3a:a9:32:3f:77:f5:45:6a:fc:7c:d9:
                    da:fb:f2:00:65:d4:45:b9:ba:1c:3b:5e:af:8e:fa:
                    5f:be:89:4f:dc:f7:95:f0:42:13:3e:de:0e:18:b2:
                    e9:68:21:4f:d4:6e:2b:0d:42:b4:d3:e9:04:48:80:
                    c7:9a:f8:d3:86:50:d0:4f:b6:09:e5:ee:0a:e0:ca:
                    87:97:b1:c2:5d:8d:b9:a9:ba:73:12:08:8c:d7:40:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:F1:B3:35:AA:DC:CE:93:DC:B5:7D:AF:E8:6A:34:A5:71:2F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cee03cd0-5ba0-3642-b9dc-990b81aeec6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:71:b3:b7:42:31:61:d2:6d:d4:f9:8e:48:34:4c:0e:6e:7c:
         99:2f:bb:43:aa:7c:30:42:74:ce:48:45:f9:d3:84:7f:5f:67:
         f7:d3:3d:15:97:ba:fe:c8:10:12:10:82:26:51:42:88:11:13:
         64:cc:7f:25:a0:68:53:95:59:f0:d0:83:6f:36:57:98:fe:25:
         36:2c:1f:13:fe:ee:7e:d1:68:c2:a2:69:ae:c9:77:ef:97:8f:
         52:c5:b9:44:2b:08:73:03:ca:4e:18:5c:95:10:00:7b:76:fd:
         3c:c4:35:1e:18:a7:f5:01:2d:7f:67:2f:e3:8b:d0:ca:be:e2:
         dc:3a:c2:2f:fb:d7:30:5c:10:26:a8:9b:fc:99:ff:11:40:7f:
         0a:03:7b:e6:73:d0:ad:b9:53:fc:f7:f4:2b:88:ea:fb:eb:51:
         83:40:4d:a4:3c:95:d9:f9:8b:90:25:e4:c8:b9:fc:8d:c5:c5:
         19:0b:8d:09:fe:76:62:07:27:51:ec:03:39:dd:99:32:13:46:
         c5:5c:fa:2c:11:94:80:9a:82:aa:a0:bf:fa:dd:e4:94:47:b8:
         79:34:03:19:ea:8c:8c:f7:a6:76:fb:98:d5:9d:f3:0e:f0:09:
         16:cd:7b:fb:5e:29:66:ed:ac:2e:16:c7:c5:53:05:f0:d6:51:
         73:b2:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:43:59 2025 by rpki-client