Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/413a9778-b487-30f9-b589-6a36933bd069.roa
File:                     413a9778-b487-30f9-b589-6a36933bd069.roa (raw, json)
Hash identifier:          RMCEbhaZ+584MCcu1m6L5UWgDDXngbv+P30Jvj5DEC8=
Subject key identifier:   C4:0E:CD:F4:B7:44:E4:C8:5E:EF:05:F2:F9:DC:15:45:C7:A9:10:3A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584972799BF870F1563C52832D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/413a9778-b487-30f9-b589-6a36933bd069.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     13335
IP address blocks:        104.23.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:9b:f8:70:f1:56:3c:52:83:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=6e3aeb11-1326-4bd1-8f68-e007567e78c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:c0:aa:a8:79:cb:80:d2:15:6a:95:18:3e:
                    77:60:0e:13:14:ed:f5:d7:88:08:3f:30:ed:c4:19:
                    f3:20:90:ca:68:5a:85:b5:f7:c1:0c:1f:37:ba:ce:
                    3b:36:ea:af:f4:76:7e:d9:62:49:7d:7d:f7:eb:ee:
                    a5:a6:27:37:df:99:0d:26:cb:25:a0:ac:0e:4b:fb:
                    48:88:2f:99:14:a1:e3:fb:81:3c:d5:96:f6:92:56:
                    f0:8a:cc:22:a3:39:bd:a3:a4:ba:c4:c5:7e:cd:71:
                    79:d1:7d:77:6c:19:fe:99:15:9c:bf:dd:76:d7:61:
                    a4:e7:e9:6d:71:3b:b6:15:5c:33:40:0a:76:59:ff:
                    6a:28:6d:3a:07:ec:af:d2:b1:82:c3:38:9d:bb:36:
                    ae:09:ea:5a:2e:11:65:6c:64:2c:6c:7f:81:a5:4f:
                    63:02:48:20:52:c8:25:6b:8a:68:28:df:c0:0d:21:
                    e6:e6:d3:67:1f:e6:97:2f:87:81:a1:8b:51:18:79:
                    5e:46:4e:0d:20:ac:a4:9d:0c:a8:dc:ef:e9:ca:e1:
                    39:86:55:3f:da:c5:4a:db:80:d2:dd:ec:20:ee:30:
                    d3:eb:4f:48:3f:90:46:3e:b7:f3:fb:06:b5:99:0f:
                    34:04:4c:74:27:ed:ca:d6:f5:43:d1:43:8a:03:cd:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:CD:F4:B7:44:E4:C8:5E:EF:05:F2:F9:DC:15:45:C7:A9:10:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/413a9778-b487-30f9-b589-6a36933bd069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:b9:f5:a9:db:31:e8:78:a5:dc:12:71:22:aa:20:cc:86:
         a1:9b:63:db:b0:b8:67:4c:0e:1c:94:eb:7a:04:a4:c2:28:cb:
         88:7e:ac:a7:d9:8e:e8:d9:cf:e5:e8:57:50:74:52:ba:c1:e3:
         4e:81:b7:3d:12:3a:cd:43:1e:3f:fa:b0:1a:b3:72:5d:b6:6a:
         b7:66:3f:d8:0e:f1:dc:14:be:30:c1:24:bc:29:ea:d1:46:0f:
         8e:15:53:68:ff:63:da:2a:e9:12:57:a3:a6:0d:0b:5e:a1:bc:
         a6:44:7b:99:78:6d:af:e8:25:73:b0:83:e4:17:93:9b:92:c1:
         d4:bd:29:90:00:2e:90:5f:45:4d:95:09:a2:c5:e4:ee:14:c5:
         fa:fa:a6:2e:de:e9:4b:d0:d2:0f:19:27:83:36:23:10:3d:ef:
         59:25:e8:01:6b:30:74:ba:e1:04:9a:cd:2e:3d:17:d4:44:ec:
         f5:a1:e8:62:36:56:f4:a3:e9:c4:6b:7f:d3:72:e5:d1:14:a1:
         12:9b:e3:ae:0a:c1:e1:50:9b:0c:b1:9c:e8:79:a4:6a:aa:1a:
         49:cc:47:3e:24:ec:ac:d5:4c:42:63:e4:90:54:92:19:4c:b0:
         55:36:89:1a:f2:d0:91:fa:23:05:7b:07:ba:29:ec:71:b8:7e:
         f5:f8:40:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeZv4cPFWPFKDLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
NmUzYWViMTEtMTMyNi00YmQxLThmNjgtZTAwNzU2N2U3OGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgjAqqh5y4DSFWqVGD53YA4TFO3114gIPzDt
xBnzIJDKaFqFtffBDB83us47Nuqv9HZ+2WJJfX336+6lpic335kNJssloKwOS/tI
iC+ZFKHj+4E81Zb2klbwiswiozm9o6S6xMV+zXF50X13bBn+mRWcv91212Gk5+lt
cTu2FVwzQAp2Wf9qKG06B+yv0rGCwziduzauCepaLhFlbGQsbH+BpU9jAkggUsgl
a4poKN/ADSHm5tNnH+aXL4eBoYtRGHleRk4NIKyknQyo3O/pyuE5hlU/2sVK24DS
3ewg7jDT609IP5BGPrfz+wa1mQ80BEx0J+3K1vVD0UOKA83nFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQOzfS3ROTIXu8F8vncFUXHqRA6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDEzYTk3NzgtYjQ4Ny0z
MGY5LWI1ODktNmEzNjkzM2JkMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBelMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzCufWp2zHoeKXcEnEiqiDMhqGbY9uwuGdMDhyU63oEpMIoy4h+rKfZ
jujZz+XoV1B0UrrB406Btz0SOs1DHj/6sBqzcl22ardmP9gO8dwUvjDBJLwp6tFG
D44VU2j/Y9oq6RJXo6YNC16hvKZEe5l4ba/oJXOwg+QXk5uSwdS9KZAALpBfRU2V
CaLF5O4Uxfr6pi7e6UvQ0g8ZJ4M2IxA971kl6AFrMHS64QSazS49F9RE7PWh6GI2
VvSj6cRrf9Ny5dEUoRKb464KweFQmwyxnOh5pGqqGknMRz4k7KzVTEJj5JBUkhlM
sFU2iRry0JH6IwV7B7op7HG4fvX4QPo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:30 2025 by rpki-client