Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa
File:                     10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa (raw, json)
Hash identifier:          sDKm5HulCnuduSVaM0O2U4HP3niKUg3XsXh6UZaotwI=
Subject key identifier:   E6:79:52:F2:2B:0A:65:24:CC:3D:94:2E:96:F2:32:80:F8:D4:4A:5F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584988CB83DB5A9545366F6B62A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa
Signing time:             Tue 15 Apr 2025 12:53:49 +0000
ROA not before:           Tue 15 Apr 2025 12:53:49 +0000
ROA not after:            Mon 14 Jul 2025 12:53:49 +0000
asID:                     13335
IP address blocks:        104.23.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cb:83:db:5a:95:45:36:6f:6b:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 15 12:53:49 2025 GMT
            Not After : Jul 14 12:53:49 2025 GMT
        Subject: CN=442f9cce-0c6a-4af7-9308-05ea100792f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5c:da:3f:8c:5d:28:7b:d1:e3:7d:33:87:99:
                    e9:61:dc:06:05:a5:93:f8:dc:5e:81:c3:8f:69:27:
                    3b:37:64:2c:c7:b2:27:85:1a:41:2c:c3:6c:b6:5a:
                    7f:de:48:46:80:c3:fc:13:15:9f:1c:b3:fc:4a:fa:
                    27:c0:43:e6:67:94:8c:60:86:42:93:74:26:c0:38:
                    d4:13:ff:01:44:e4:63:27:e3:2c:7f:bf:dc:0b:70:
                    43:5e:26:f5:03:20:34:82:77:f9:ef:9a:4a:01:50:
                    0e:99:0f:c0:71:a8:59:75:6c:60:21:76:5c:22:1b:
                    18:36:d2:09:39:8c:a3:be:39:a6:02:0d:35:eb:6b:
                    2c:30:32:b7:d5:6b:e7:6a:05:85:a3:5d:02:22:69:
                    be:cc:09:05:9b:98:ff:cb:0f:02:62:2a:e2:04:d3:
                    37:eb:e2:cb:6c:3e:1a:2d:dc:ff:8a:3c:bf:ba:30:
                    45:92:2a:c1:d9:55:2e:e5:cf:ce:f2:f1:87:51:d4:
                    be:6b:2c:7f:8e:45:ec:36:e1:0a:8e:c5:c1:63:f0:
                    b3:16:b3:32:1e:16:7f:66:d2:36:78:9b:5e:21:bc:
                    df:a4:dd:09:4d:cd:49:32:5b:ad:75:bb:4c:da:66:
                    fb:19:d7:be:4e:bb:bc:f5:b0:d5:bc:e8:a0:ec:6c:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:52:F2:2B:0A:65:24:CC:3D:94:2E:96:F2:32:80:F8:D4:4A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10f572fe-f57e-34de-91ea-ec56b6d1ec0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:7b:48:44:e8:3b:46:0c:b9:f7:30:0a:df:8b:49:d6:83:
         be:16:a4:dd:9d:8e:a0:53:d2:2c:fa:bb:5d:36:69:65:1d:36:
         74:d4:4c:86:42:e8:f9:d1:fa:99:71:f9:d2:52:10:d9:ad:b3:
         ee:18:69:e9:08:27:e8:48:ce:a0:d6:43:6b:95:84:95:31:7b:
         19:f7:95:6b:cf:ba:fb:66:2f:b8:14:7f:5b:9f:3c:c2:fd:b0:
         2b:9b:3b:f5:e0:22:c4:47:8f:62:fe:c8:d3:36:59:df:d6:0f:
         a9:4c:08:4c:a9:77:d7:6e:bc:dc:4f:31:76:f7:31:7b:de:8f:
         f4:9e:aa:96:37:08:cc:ae:79:7c:4e:5c:15:09:81:85:7c:e5:
         57:c9:77:27:2c:2a:8f:37:2d:ff:6c:8d:72:88:35:38:31:06:
         e6:92:47:3c:78:c6:d6:e4:5f:60:43:37:bd:a7:7f:90:8d:01:
         9b:16:dc:94:ef:e3:1d:df:9c:e5:e1:c2:85:c3:15:02:34:d4:
         d4:c9:c0:cc:c9:1f:be:56:11:d1:b9:31:e5:c5:c2:2f:6d:c0:
         19:e1:30:8d:f1:36:43:ff:e3:84:d2:28:f8:1b:14:57:51:71:
         14:c5:0c:06:21:89:9b:b1:56:17:37:11:20:18:4d:87:82:15:
         ef:39:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:48 2025 by rpki-client