Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa
File:                     22ae559c-7964-3592-a823-156a667290bf.roa (raw, json)
Hash identifier:          TFRk5xl2Gw/aOEy6iTojZUdAYE4sD93wSqYM6D0IgYQ=
Subject key identifier:   0A:F1:1E:14:04:FF:D4:64:6F:5D:5D:C2:07:6A:75:C6:A1:0B:A7:DA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71103280FFD571499FD2040
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        104.29.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:03:28:0f:fd:57:14:99:fd:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=0157b6b0-4f2c-473a-ba66-84b3c3a24aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:54:68:e7:0c:c5:d2:bc:f9:a9:10:f1:89:
                    5c:c0:e4:7b:21:d6:9a:9d:b3:0a:ec:86:c1:84:4e:
                    5d:88:a3:0d:72:ba:a7:44:f3:74:57:a7:84:97:10:
                    b3:82:70:c6:6c:3b:89:62:d6:43:17:ea:ab:14:5c:
                    85:3a:54:53:98:52:c7:7f:83:94:8e:c8:ca:ff:69:
                    d2:e6:86:a1:8d:08:39:07:cb:58:a7:82:32:cb:80:
                    b5:5e:b5:48:26:bf:9b:71:86:d4:c5:d9:52:c8:04:
                    3f:a3:be:e9:4e:4a:ef:55:71:27:fa:a8:57:0a:7a:
                    86:f0:bc:2b:b7:7a:e2:38:82:7d:13:6d:0e:c2:4a:
                    b5:d6:b2:10:d2:e3:73:31:a0:25:96:5e:ef:50:ab:
                    c3:5e:f0:da:50:40:9a:a7:7e:d7:96:57:35:66:29:
                    f8:bb:44:a3:f8:d5:4a:0f:b7:a5:d2:17:f3:d9:2c:
                    d4:26:ac:e3:92:36:d1:74:bd:3f:59:00:14:8c:e0:
                    90:5d:ad:67:ba:0b:1a:c3:b7:b7:d7:8c:55:25:ad:
                    1b:bb:e4:71:35:b8:40:16:68:a3:ce:00:06:2f:81:
                    9f:17:26:44:16:a8:63:38:3d:3a:1c:71:47:45:54:
                    90:f7:51:16:0d:80:20:f6:61:df:f0:a1:f9:ea:79:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:1E:14:04:FF:D4:64:6F:5D:5D:C2:07:6A:75:C6:A1:0B:A7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:36:69:c3:39:67:c2:e9:01:84:7c:c8:d5:01:02:8b:8c:
         16:4b:37:f4:2e:7f:68:cf:f1:37:09:44:36:4d:d9:4f:a7:2d:
         50:6c:b4:f1:c3:76:7c:69:08:21:2d:1a:c3:59:12:a1:c0:83:
         ca:39:af:24:cd:16:f4:12:8d:e5:d8:a8:24:e8:90:ae:79:9b:
         3a:e4:37:f5:47:fa:07:5a:cc:12:10:6f:1e:f2:66:93:a6:00:
         70:94:61:a4:39:eb:fd:6b:9d:e8:aa:cb:16:ef:24:6b:35:ed:
         ce:fd:b4:88:53:2b:d8:91:4d:e1:42:aa:37:93:8c:25:ad:df:
         2c:bc:07:3b:f6:1a:e0:b2:9b:76:45:e2:3b:71:18:cb:fa:e2:
         bb:72:f7:79:88:f7:e7:fc:9a:08:18:4c:d5:4a:03:c7:49:97:
         de:7b:f8:17:a2:c9:98:83:37:6b:bf:5d:93:77:e5:b0:fd:bc:
         dc:bd:ea:ac:be:14:3f:6d:0e:1b:2c:4d:c5:e3:45:3b:c7:29:
         11:42:1e:0d:e9:3a:5f:bc:a7:20:f3:46:e9:da:87:e8:c0:21:
         b5:4b:41:2e:f1:c7:8f:35:72:2b:bc:8e:e6:9f:78:e6:83:38:
         ea:76:4d:df:ee:59:f6:b6:8c:49:86:54:62:68:f6:b5:11:b1:
         1d:e1:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:34 2025 by rpki-client