Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
File:                     d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa (raw, json)
Hash identifier:          N0sqAouil0sNYK+mews0Z3XDyPLr5i38sy8ecx3+fLM=
Subject key identifier:   68:40:61:F4:02:D6:7E:37:CC:3A:55:6E:14:0F:22:AF:A8:B3:B8:0D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA667C1BDB122B36110811380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        104.21.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:c1:bd:b1:22:b3:61:10:81:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=cf932f59-0ac8-407c-96fe-ffaea74710fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:c5:3d:70:19:95:d0:b3:da:5e:22:28:25:
                    7c:ab:8b:cc:e3:9d:29:58:0f:18:df:65:89:44:fe:
                    23:a2:f0:1b:27:d3:0e:53:5b:9f:ca:1e:4e:86:d5:
                    b1:88:b8:ba:a9:43:9c:e7:5d:b5:e4:2c:d5:f1:30:
                    f4:03:81:e4:53:0c:4f:8c:08:2a:88:81:a1:cc:69:
                    31:e6:2e:52:38:c3:09:39:7c:76:c1:73:ec:4c:ea:
                    8b:41:f2:a1:0b:ed:29:f7:e2:42:9b:14:05:2d:97:
                    ae:4b:ab:6b:17:e2:22:dd:16:a7:44:e0:79:cd:d7:
                    f3:37:43:24:2d:33:35:60:2e:3b:5d:23:30:b0:7f:
                    03:39:33:e0:ea:81:4a:91:32:81:c8:38:75:87:48:
                    a5:d8:ca:44:0b:af:3b:e8:0f:93:94:b3:4e:83:dc:
                    b4:02:3f:e0:e6:7a:ac:90:b2:6d:5e:89:a4:f9:a9:
                    27:8b:c2:e9:f9:f7:0b:bb:34:07:41:30:d5:7b:73:
                    9c:67:60:fb:a7:0c:5a:0a:f6:f9:2c:a2:02:7d:d3:
                    08:d2:83:90:1e:c1:ef:2a:9e:19:19:1f:90:db:b4:
                    de:96:d8:86:1d:fd:c5:59:95:ba:7b:6b:41:2a:5e:
                    58:d8:f6:f4:9b:0d:d0:38:61:c3:38:ab:a3:d1:6f:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:40:61:F4:02:D6:7E:37:CC:3A:55:6E:14:0F:22:AF:A8:B3:B8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.21.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:83:8b:55:79:ef:71:2d:12:78:1b:d9:68:ed:12:39:e8:a4:
         ed:50:22:f7:43:7c:2f:bf:f6:14:d5:64:53:8d:0e:5e:34:87:
         f8:4a:f2:b6:b5:4e:d9:03:3e:54:1d:40:00:fd:03:68:52:6d:
         87:3b:26:7d:7b:25:f3:2d:a4:91:11:c8:58:54:96:4d:d5:d6:
         9f:7d:6e:8d:c6:db:eb:87:22:81:a4:24:2f:12:ab:32:a7:53:
         9e:d3:85:e8:8a:d9:78:b9:ad:dd:0d:f7:e4:2e:8c:92:a7:aa:
         bc:ba:f8:f5:c2:94:0b:aa:49:8f:f0:65:ad:85:f3:71:86:fe:
         9b:a4:e1:2e:07:d8:3c:7b:f5:5b:ac:15:dd:53:d7:32:fc:93:
         67:08:6e:ee:2c:86:82:4b:78:d9:3f:b6:1d:82:2b:f4:c3:eb:
         78:7a:2e:3a:c2:1e:d2:5e:5b:b4:df:25:b1:52:c0:19:82:3a:
         7e:72:c4:62:9d:2f:aa:23:c1:41:c6:7e:8b:9f:97:65:ac:6b:
         d8:88:6c:74:34:0f:1b:41:3e:1e:4d:2b:9f:fd:0e:ef:95:30:
         3c:18:a3:6d:4b:a5:ad:aa:38:1e:bb:68:b8:be:33:0e:7d:8a:
         c5:16:1a:6c:fd:8f:35:a6:ac:bf:95:f7:52:5f:e6:79:9f:60:
         29:96:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:36:27 2025 by rpki-client