Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91fcac8-b58c-3cf6-9140-721754e0a941.roa
File:                     f91fcac8-b58c-3cf6-9140-721754e0a941.roa (raw, json)
Hash identifier:          eIHEa2ocH9BE2SxbZ6A7rumt67O8I6/3mi2WnqQXFBo=
Subject key identifier:   95:39:77:30:9A:3D:2A:6E:EC:E6:2F:48:6F:0B:76:90:CE:BC:A6:2B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E84E5970C668CBCD60BF82E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91fcac8-b58c-3cf6-9140-721754e0a941.roa
Signing time:             Mon 19 May 2025 17:59:14 +0000
ROA not before:           Mon 19 May 2025 17:59:14 +0000
ROA not after:            Sun 17 Aug 2025 17:59:14 +0000
asID:                     202623
IP address blocks:        104.23.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e8:4e:59:70:c6:68:cb:cd:60:bf:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 17:59:14 2025 GMT
            Not After : Aug 17 17:59:14 2025 GMT
        Subject: CN=66fa572f-f246-422a-9269-a41476f96650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:06:a1:cc:75:82:e7:77:bc:71:b2:e6:ce:
                    ec:0e:86:39:1c:81:31:89:c7:ef:a8:b9:d3:26:4a:
                    e2:3c:a3:eb:e7:4d:8f:ac:16:a5:11:a4:6f:49:b1:
                    6a:b5:44:c6:76:60:e8:f6:7f:1b:0f:bf:72:8f:7a:
                    4c:5f:59:ae:12:a1:1e:f4:a5:93:d0:11:44:bc:1c:
                    d8:ef:c0:81:88:d5:b0:1a:88:be:51:ed:56:4e:41:
                    f7:e7:e3:6b:e7:48:8d:42:cf:81:f4:0d:bf:c5:d9:
                    69:10:fd:fa:02:4f:f3:1c:07:39:f9:7c:6d:ab:4b:
                    2c:04:7b:c2:10:a8:a2:3d:ff:9c:56:62:6a:66:2a:
                    a1:b5:e4:fd:71:6c:8d:db:f0:ef:e1:d7:6a:b7:76:
                    93:e9:c8:db:2f:12:23:f3:7c:11:de:bb:1d:58:80:
                    d6:37:db:a1:88:df:8f:da:f3:94:22:5a:38:1f:2e:
                    7d:1b:49:57:86:0f:e6:b4:04:68:30:52:a5:ab:bc:
                    0f:70:94:64:8e:a4:50:b7:7d:90:b6:61:e2:a1:de:
                    08:fc:ee:8e:f5:43:09:e0:09:16:0f:e5:4b:f8:e8:
                    2b:a9:b6:f3:35:49:a9:3d:9b:3c:89:24:56:93:94:
                    5b:fc:92:71:33:0a:4c:f7:8f:6b:56:65:70:16:d4:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:39:77:30:9A:3D:2A:6E:EC:E6:2F:48:6F:0B:76:90:CE:BC:A6:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91fcac8-b58c-3cf6-9140-721754e0a941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:18:52:76:85:65:86:a9:ef:42:75:81:96:31:3e:03:0c:3c:
         38:85:5d:25:62:7f:12:8b:11:53:68:f3:0c:ee:8f:54:5e:af:
         9b:10:76:fe:36:f7:e9:c8:18:be:e3:a9:6d:ed:d0:37:4f:2f:
         7a:ac:13:8d:3e:cd:73:c7:c1:d0:1d:33:d3:48:bf:b5:bc:61:
         45:0b:6b:7d:06:f8:02:59:c7:48:d8:04:94:d8:e0:42:cb:b4:
         1e:57:d7:c7:ef:80:88:c9:4d:b1:38:2c:5c:ad:39:cf:98:31:
         d3:c3:cf:04:da:09:ea:5e:60:9e:28:a7:4e:df:86:ff:7c:1a:
         51:5e:24:2c:df:51:9d:a4:a2:c2:ee:e6:3e:54:60:cb:69:0b:
         d7:29:02:f1:ba:ff:3b:be:8f:00:95:09:09:d4:3b:b3:ef:79:
         95:b4:71:21:c2:4e:af:56:e8:9f:8c:89:1a:a5:5f:dd:14:4f:
         4e:d9:fc:b3:89:cd:75:8d:14:fd:10:bc:86:20:a9:3e:6a:ad:
         94:19:a7:7c:68:78:ac:7b:32:b1:9d:92:4d:da:01:20:85:20:
         ba:b7:91:cb:ff:d3:80:2e:71:94:b1:fd:9a:c3:66:6f:78:f7:
         d7:1f:e1:9b:35:ad:46:12:6d:6f:d9:2d:83:9e:cf:d0:d1:33:
         81:a6:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:17 2025 by rpki-client