Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9bcd6aa-e176-30b5-afcf-399b1fc40f77.roa
File:                     e9bcd6aa-e176-30b5-afcf-399b1fc40f77.roa (raw, json)
Hash identifier:          ih3WAJYq+cdH2MX1rS6L8iXC4kHF5MewYzto22JIu08=
Subject key identifier:   DE:35:C9:E7:52:79:6E:F3:5A:B4:68:3E:A9:4D:AD:DB:AD:5A:3F:CF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AA85B9C985ACA6FD9830280D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9bcd6aa-e176-30b5-afcf-399b1fc40f77.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     13335
IP address blocks:        104.23.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:9c:98:5a:ca:6f:d9:83:02:80:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=97c4e1a3-a3cd-4ec4-805c-4829adacd63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:91:52:a8:53:5f:a4:39:89:f1:e2:34:b3:
                    66:5d:61:22:10:a8:73:67:ae:1a:5e:32:00:cc:f7:
                    66:36:28:93:d9:81:73:39:2a:fc:b2:34:8a:29:84:
                    47:de:2f:92:9f:1e:62:1d:49:cf:41:cc:b6:63:41:
                    26:be:23:5e:84:e8:4d:cd:67:c6:d2:8c:76:28:f5:
                    5d:f8:4c:65:16:93:74:57:0f:89:05:01:1c:27:dc:
                    ad:b5:32:d3:c2:a7:37:07:5b:4e:d2:6b:7a:a4:74:
                    82:bf:23:6a:c6:17:2e:8f:c8:20:6b:d0:a3:18:49:
                    c0:4b:c8:c0:0c:d8:87:63:24:8e:4a:e8:de:d7:43:
                    f1:b6:a2:6d:a3:ee:4a:f3:48:98:8e:9e:3e:7d:e5:
                    96:f7:f9:88:e0:43:ef:54:e9:91:a5:2d:78:f5:f7:
                    1e:79:6c:bb:ba:11:8d:1c:08:5c:eb:60:fd:b5:2b:
                    78:3c:cd:a5:ce:5f:a8:c8:1d:be:ac:8a:13:72:4b:
                    6a:15:ee:27:a5:13:59:d7:31:c5:32:84:f5:2c:45:
                    67:f1:68:fa:21:4e:e6:df:78:57:b6:6b:7f:9d:ab:
                    cf:70:3a:6b:6f:e0:cd:97:83:7c:db:df:f8:81:76:
                    d1:a5:29:04:90:64:8d:9f:b6:a3:5e:6a:8a:79:73:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:35:C9:E7:52:79:6E:F3:5A:B4:68:3E:A9:4D:AD:DB:AD:5A:3F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9bcd6aa-e176-30b5-afcf-399b1fc40f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e3:48:c2:93:2f:65:92:69:07:44:c5:61:78:30:09:53:2d:
         47:88:cc:71:c3:0b:7f:57:38:24:97:59:3b:0f:42:b5:67:96:
         7e:6e:7f:9b:8f:a8:48:19:c9:f3:e0:19:06:da:9f:e3:6e:4e:
         41:f1:2a:54:14:e1:5e:a8:37:fa:31:14:b4:60:a0:68:a5:d4:
         f5:6e:c9:fc:ea:4d:11:0f:ea:6f:b2:70:c3:1d:f2:5e:d6:ba:
         a2:b3:14:19:0c:75:47:a9:56:27:b0:4e:f4:96:16:63:18:2d:
         14:55:f2:20:d5:da:e8:09:f4:ea:f2:a8:25:63:c1:87:41:92:
         53:e2:14:df:7d:d2:53:c5:d4:35:24:af:82:25:d2:94:98:16:
         99:07:63:c0:ff:27:e8:c1:b2:de:d9:61:71:57:2c:ac:94:de:
         bc:37:11:d6:a7:10:41:d4:17:7e:6f:eb:95:9e:60:ac:b6:6c:
         b9:f3:98:5e:27:e4:87:89:9f:21:bb:d9:a2:89:7f:d4:c4:cd:
         9b:0c:ff:eb:70:b4:a5:3c:47:dc:62:67:cf:9f:9e:cc:28:6c:
         57:87:a8:cf:b8:53:bc:02:c5:22:d0:a3:3a:52:10:83:e8:0b:
         a6:95:62:44:25:11:f2:54:8a:dd:37:5a:fc:b4:aa:5a:85:5e:
         96:c2:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:33:54 2025 by rpki-client