Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa
File:                     e2b4887c-e7b9-3380-80da-0297ac7dfded.roa (raw, json)
Hash identifier:          NRmfhyWE48imMNsodNK8dZ4tKBb25Yoi7smj1IeMegg=
Subject key identifier:   66:61:F2:A7:E8:87:06:0E:5E:49:ED:6D:36:09:14:1E:4F:15:5F:5A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFCBB4AC3B6BDC66DD1E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        104.21.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:cb:b4:ac:3b:6b:dc:66:dd:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=b42158d7-373a-47a0-abb8-dce0e2bc0547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:f8:39:59:f4:67:2f:38:a9:1e:5e:9a:fc:
                    2c:8f:81:a6:0f:e2:2f:fe:b2:3a:76:ad:87:8f:c1:
                    a2:ae:d6:4e:a3:fd:be:b3:78:de:79:13:75:c8:d6:
                    46:4f:b2:fc:08:5b:fa:a0:30:c5:9b:f5:d2:be:7a:
                    7e:27:0e:1c:3d:c5:d0:ce:d4:9f:49:a1:fe:c3:45:
                    85:9b:27:38:a7:91:dc:c9:ee:e1:8c:c4:40:06:dd:
                    57:5c:74:da:90:02:a8:2a:c5:2a:24:3e:26:02:b4:
                    92:2e:77:7f:39:0c:15:05:b3:21:e0:ab:7e:47:96:
                    c3:df:64:b0:01:04:22:13:90:e7:c6:6a:2e:6b:cc:
                    c1:b0:94:19:87:82:24:7d:a7:43:d3:30:a1:5b:14:
                    73:db:61:2e:37:35:c8:12:f8:62:79:e2:26:16:ef:
                    68:81:2d:b2:18:cf:fe:e5:32:57:90:cd:a6:f8:7b:
                    6b:91:76:7f:53:cf:02:49:20:cf:88:71:a6:aa:2b:
                    48:d5:cb:5e:06:52:af:29:98:bd:44:ae:82:bc:d9:
                    cc:98:37:93:25:9b:f9:13:17:9f:fb:66:81:10:9d:
                    5e:94:ba:0e:75:48:a0:da:a5:93:fc:39:9a:77:9a:
                    69:b9:76:89:e6:22:81:88:49:c6:d2:60:dd:10:4c:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:61:F2:A7:E8:87:06:0E:5E:49:ED:6D:36:09:14:1E:4F:15:5F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.21.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:d4:77:8f:e9:9d:f7:d1:86:4b:c1:e0:2b:1e:92:1b:e5:
         25:c9:da:c6:23:8e:2a:49:89:c9:82:0c:e5:1a:18:7f:33:c1:
         94:9d:7c:70:b4:ad:68:b2:90:36:6f:54:ac:7f:5b:ed:69:08:
         26:bc:6a:4b:a7:90:7d:e0:4a:dc:82:7a:e4:46:08:57:3f:16:
         e7:2e:59:7f:aa:ea:e2:8f:be:af:52:9b:d5:ea:9f:ab:54:82:
         f9:2b:aa:42:6c:08:61:ca:16:0a:12:11:77:82:5c:02:c1:94:
         7a:9a:88:0d:33:23:80:91:d1:d3:9d:02:f1:85:a9:19:98:a2:
         3b:cb:bf:b9:8d:a5:26:c3:b5:57:a2:9f:1e:ac:e3:c2:76:fb:
         d8:94:3b:0f:89:13:5f:22:cf:80:51:68:13:4b:53:92:24:5e:
         76:c9:e1:b0:c2:b3:16:b7:a8:7f:64:c3:c5:7e:3e:ba:18:52:
         1d:27:f1:bc:42:15:0f:68:60:0d:d9:a1:1e:6f:46:71:80:03:
         8b:04:17:16:da:05:4a:12:e3:30:d2:94:b8:73:34:e5:1c:3b:
         18:65:bc:ee:91:30:2a:5a:aa:bd:1e:46:e7:df:93:80:08:94:
         33:66:7f:45:d0:e2:dd:f4:22:2a:c5:35:6a:b7:c1:0c:5a:96:
         8e:89:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:48 2025 by rpki-client