Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/334b575c-f934-3452-837a-56c51404e3e2.roa
File:                     334b575c-f934-3452-837a-56c51404e3e2.roa (raw, json)
Hash identifier:          jfhuksD8vRiotBvShc/ZFXC1JkNQR3KRdBqJE9+jKRQ=
Subject key identifier:   F4:B9:3B:C4:88:62:1F:E1:A7:CF:0B:87:E3:17:82:A3:A5:5B:05:3B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A9FFB8299EBB43330A12C31A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/334b575c-f934-3452-837a-56c51404e3e2.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     13335
IP address blocks:        104.23.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:82:99:eb:b4:33:30:a1:2c:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=801629f6-4327-4b12-925c-f966300442ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:cb:4d:c8:4a:96:d3:44:0f:9f:85:bd:e5:
                    d7:5f:b8:2a:a0:dd:28:d0:fa:06:73:73:02:35:6e:
                    b7:cf:f4:65:f1:5d:76:19:f1:a7:51:50:b8:13:48:
                    bd:0b:29:30:77:2c:74:72:6f:9e:b6:c6:74:40:d6:
                    e0:94:69:2e:43:d6:53:1f:d6:06:85:41:0c:30:a4:
                    be:cc:3c:df:a5:a2:0e:7a:16:af:1a:51:1a:2d:16:
                    ac:11:6e:7c:4d:b3:26:78:42:be:b2:63:3c:79:3c:
                    5a:b9:23:d8:d8:c4:aa:19:7a:b3:dc:fa:2c:8d:28:
                    ff:fb:35:f0:73:23:2f:55:4c:3d:b9:76:63:cd:5b:
                    d2:2f:dc:d3:33:dc:dc:76:14:b7:a4:72:95:8e:52:
                    e0:be:76:51:c2:95:0b:60:7e:74:5c:8e:8a:25:10:
                    d3:0d:ce:fe:0b:ac:e5:54:cc:7c:b0:e2:d3:aa:75:
                    a8:05:59:ce:c6:e0:71:a4:dc:c4:dd:4d:2a:69:41:
                    6c:c1:12:75:9d:fa:ff:0e:2b:ac:6e:24:7a:21:7d:
                    bb:26:e6:48:a1:85:70:a0:48:4b:c6:7c:b7:e4:cb:
                    8f:cc:3d:e7:e1:e2:34:bf:ad:85:48:c3:fd:5f:df:
                    ca:3c:13:ac:b5:b9:6b:ec:39:ad:cf:92:43:14:32:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B9:3B:C4:88:62:1F:E1:A7:CF:0B:87:E3:17:82:A3:A5:5B:05:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/334b575c-f934-3452-837a-56c51404e3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:cd:b3:27:a1:3b:74:83:60:e2:10:8c:60:5b:b5:c1:9f:e7:
         f4:67:60:e1:8c:01:ad:db:77:23:0d:47:99:a4:5f:62:7b:17:
         3f:c8:d5:89:27:55:aa:26:d7:9e:9c:be:ae:7a:e9:2a:e3:bb:
         3c:3a:27:b8:61:8e:e1:1a:52:bc:6d:e2:c8:d7:ce:ab:f2:2d:
         74:98:8f:0a:65:29:80:a2:e8:44:14:a7:78:68:e0:55:62:13:
         dc:b5:8d:5a:aa:75:b6:95:e6:97:af:53:6f:e4:b9:8d:50:48:
         53:d1:75:2c:a5:e4:6b:ca:e1:5b:4b:24:52:e7:31:38:ba:87:
         d2:13:b0:a5:6a:8e:61:16:d2:2a:2b:74:d6:d0:b6:69:f0:9b:
         f3:04:e7:fd:18:7f:a1:dc:96:06:9c:e6:03:6e:ed:28:0e:03:
         bc:f4:c6:fb:11:38:79:0e:c8:d7:80:78:20:a7:fd:39:40:0c:
         b0:22:eb:4a:e6:af:e5:97:a9:25:96:4e:5d:3f:cc:1b:68:60:
         32:36:54:97:bb:15:73:e2:fb:be:7d:22:fa:f7:2f:5e:19:db:
         bb:c8:08:39:31:a6:15:fd:99:71:2e:76:d3:1a:d9:8c:26:30:
         06:08:c7:e2:b5:49:5c:a2:8a:2c:b5:a2:21:61:ed:75:02:00:
         9e:5a:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:42:42 2025 by rpki-client