Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200ff806-7d55-3b0c-a669-b108a93a32ad.roa
File:                     200ff806-7d55-3b0c-a669-b108a93a32ad.roa (raw, json)
Hash identifier:          EF6n6A6LY2wGSF1Tj7TW7XEFGj2Ge4xbYiEQGT+M3UI=
Subject key identifier:   0B:A9:7F:51:1E:04:06:B7:BE:EB:9A:AB:AD:F5:B0:B1:FB:5A:53:B8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A8146620B96243F895E1C2D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200ff806-7d55-3b0c-a669-b108a93a32ad.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        104.23.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:62:0b:96:24:3f:89:5e:1c:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=5f2e8d6e-dcff-4755-a011-0c29cf715d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:2b:f4:57:b9:11:43:e1:b2:43:f0:06:78:
                    ae:57:43:f3:f1:dc:29:d5:49:24:8e:55:1c:4d:c8:
                    23:9a:7c:ca:51:a4:04:ae:80:c5:df:b0:f6:e6:b9:
                    00:3c:e5:f3:b1:61:97:d8:8a:81:95:82:1a:0c:31:
                    46:db:a0:c0:e8:2d:96:b0:05:02:9f:2a:77:99:95:
                    d6:3d:96:fd:7b:bd:63:80:cc:7e:4b:18:a9:25:49:
                    96:03:42:9d:d6:fc:dd:ef:46:0d:8f:89:27:fa:ca:
                    4e:ee:d1:12:5a:49:48:03:b1:e4:e0:a2:60:21:f8:
                    ad:af:ef:15:65:0a:00:7d:ed:9d:0d:97:9f:10:3c:
                    d7:2f:92:ba:3a:19:89:40:e5:9c:44:90:9b:06:5a:
                    85:bc:bf:14:b9:00:6c:b4:56:fd:7b:46:0c:42:60:
                    c4:48:85:ba:cb:cf:b0:4b:41:56:97:fa:9e:b3:92:
                    2c:82:f5:d8:3d:d7:20:32:9e:7c:ed:4e:57:19:51:
                    8b:2b:b0:7d:05:15:42:51:99:cd:ac:22:02:ab:c2:
                    42:41:6d:21:53:02:8a:d2:bb:e2:81:0d:1d:f3:20:
                    c5:7b:32:3f:b2:72:7f:6a:14:6f:36:f4:79:f3:25:
                    54:3a:17:01:36:41:4a:58:4f:e5:00:70:09:64:7e:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A9:7F:51:1E:04:06:B7:BE:EB:9A:AB:AD:F5:B0:B1:FB:5A:53:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200ff806-7d55-3b0c-a669-b108a93a32ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:97:01:08:e9:b0:37:9f:94:d2:fc:15:8d:68:c3:e5:8a:28:
         90:07:eb:d6:2a:ae:a1:83:4a:30:90:ca:59:df:9c:a2:77:d7:
         06:8c:e6:5a:f2:ef:61:da:0d:97:ac:3c:64:8b:21:de:ec:3b:
         1a:bb:67:54:41:e3:40:71:cc:23:b9:b3:f6:10:36:12:4b:67:
         65:50:19:35:c2:66:e9:4c:25:c9:cf:f2:5e:54:3c:20:53:cc:
         6a:f9:ab:64:3a:17:c6:19:70:4e:24:38:ea:d6:13:ad:26:4c:
         41:83:b0:4d:68:8d:e0:f6:ba:69:66:41:8d:6e:69:df:8e:20:
         20:3f:c8:e1:a2:ba:d6:8e:8f:6d:d5:bb:9a:6c:6e:f0:02:86:
         26:5f:e1:1d:29:f0:b6:c3:56:6d:af:44:51:c3:2d:c7:50:8c:
         c5:c8:8c:27:c4:b1:23:f6:dd:c1:42:6b:c1:55:16:01:84:94:
         57:5a:2e:6e:0a:4b:99:f4:53:f0:c8:2d:52:f2:ca:10:91:4d:
         47:78:06:03:6b:4c:8f:61:98:61:78:ae:bb:32:f9:a8:46:3c:
         6e:63:5b:54:01:1e:f0:9a:ce:5f:d3:b9:cf:f1:1b:83:c2:23:
         19:db:ac:55:10:50:b5:91:76:e7:1c:bb:bc:f5:39:c0:dd:11:
         60:4f:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:35:26 2025 by rpki-client