Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa
File:                     d512a5b9-fcfc-3701-9851-813b18aa100a.roa (raw, json)
Hash identifier:          hyX3srPlZPzuVNwbC0ry2DiT2lfyCgtON0jjbDBT/1I=
Subject key identifier:   0B:8F:D7:04:9E:18:D2:BC:E7:A3:9A:18:C7:B3:06:45:C4:BB:40:3F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A225ABB407EE9280443BF2C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        104.23.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:bb:40:7e:e9:28:04:43:bf:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=14f4f89a-2d05-442b-809e-4c7e30d68ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:2b:e6:c9:95:3b:65:59:4b:67:9c:8b:42:
                    2c:e4:12:05:91:a9:2c:06:95:c9:9f:8d:1f:0d:4f:
                    35:a0:77:dc:87:cb:ea:2a:99:89:c0:5e:d4:5f:fc:
                    ab:f2:95:fa:1a:26:71:16:e4:11:e3:84:65:67:6d:
                    fa:62:14:02:af:ed:e7:82:d4:83:e0:0b:6e:ae:a4:
                    58:49:fb:05:33:20:de:10:d0:ab:82:4e:bf:78:50:
                    62:75:c3:19:c0:3d:c7:2e:ec:ff:f7:17:9a:46:fe:
                    e2:91:48:16:6a:08:9c:29:db:79:3e:57:95:1b:91:
                    b0:f0:0b:89:86:19:c2:6a:2a:56:53:f0:c9:c8:81:
                    58:a2:c4:92:18:ff:29:01:64:d6:80:8b:42:e6:f6:
                    fc:f9:bb:7c:56:6a:cc:98:62:08:d2:2a:e3:ad:7f:
                    34:d1:22:65:a9:94:75:ca:1e:8c:9b:95:e3:b0:f8:
                    85:45:fd:db:d7:ab:06:34:1c:15:ec:65:c4:29:84:
                    fa:64:47:9b:54:bd:ab:fb:bb:db:e4:eb:19:b3:56:
                    d8:7a:26:8d:ef:11:fe:6a:54:a3:93:11:f9:e5:b3:
                    bc:25:99:54:41:e2:f2:a4:a8:6e:69:bc:4d:d7:94:
                    03:bf:0c:81:b3:88:38:9b:61:a6:34:fb:9d:6e:15:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8F:D7:04:9E:18:D2:BC:E7:A3:9A:18:C7:B3:06:45:C4:BB:40:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:12:3e:ea:dc:ec:ff:6d:da:99:bc:c4:35:06:a2:5f:8c:16:
         09:1f:3a:9e:e6:43:16:e1:d4:36:7e:f3:20:8d:70:d5:78:0c:
         34:28:dc:28:84:2e:5e:49:07:a1:0d:ed:1d:38:ce:84:15:d3:
         50:41:39:c3:60:7a:46:d4:2a:e5:44:ee:e8:77:9c:85:24:17:
         56:28:f9:2c:de:4c:02:4b:4d:35:7e:a2:0b:4b:45:33:12:2d:
         6f:ca:21:e3:e6:9f:e4:e8:83:b8:6f:7c:0b:30:46:8a:f1:5c:
         f2:56:92:ae:13:9f:f4:d6:f8:a2:d7:97:a7:16:01:b8:5f:23:
         09:8a:72:9a:2e:dc:7f:e8:eb:45:eb:01:18:d8:8f:8a:43:63:
         eb:5d:cb:a6:5b:b5:ac:ee:cd:7a:1a:bb:19:3b:22:d4:b4:47:
         fd:3c:19:e1:d1:49:6d:f5:6d:67:c8:1e:f7:58:c8:c7:c3:a5:
         27:94:57:7f:3f:ae:fe:94:31:1f:72:7a:47:30:57:00:3d:92:
         2b:41:0d:15:0c:72:04:8b:c5:1d:48:b5:56:2a:dc:fa:1a:16:
         16:90:b2:e8:13:95:ec:4a:61:e0:5e:8a:0c:97:ed:9a:86:d2:
         6c:28:ec:8c:43:2d:56:a4:43:11:ff:02:1c:f7:ac:5d:71:6f:
         7f:c4:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:10:53 2025 by rpki-client