Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa
File:                     2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa (raw, json)
Hash identifier:          jFvbb6BGtfSrGkYTl5NOdxOhr6bnwHEPkObYHQVha6M=
Subject key identifier:   B2:1D:BD:34:59:F0:EF:23:6A:F5:8E:66:CD:31:05:E9:DE:0C:B1:8C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5AB9FBC4737921275032E40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.29.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:9f:bc:47:37:92:12:75:03:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=1234a8ed-a79b-458e-8bb0-f78905ad6fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:f9:90:5c:f7:8b:3b:15:c8:f9:fc:f5:43:
                    ef:dd:da:2b:db:3d:c4:28:fc:33:27:80:ec:61:0a:
                    ae:c8:b0:78:26:f4:2e:7d:28:d1:23:b8:6a:cd:90:
                    2f:cc:6f:65:36:e2:ee:13:62:8c:93:7f:21:14:5d:
                    ff:08:66:7b:39:dc:74:7b:16:3a:66:d8:ec:28:62:
                    61:2a:14:24:a8:3d:0f:df:e8:a6:c6:c4:a0:49:86:
                    51:a7:e2:c1:2a:f7:b9:a0:cb:df:17:7c:fc:47:6d:
                    f5:b7:ee:94:10:51:be:7a:5c:79:f9:ac:98:ab:f1:
                    ae:00:2b:da:fc:bf:a4:a0:bd:c6:d0:00:81:c5:f3:
                    73:75:64:07:58:47:73:15:23:dc:1e:c0:ab:cb:c5:
                    fa:cd:ee:20:9c:56:df:55:b5:6b:64:d8:be:df:0a:
                    9d:d4:1f:85:8d:33:65:a3:59:5a:79:82:ae:3a:64:
                    88:03:cc:16:79:64:8a:70:10:c5:63:4d:99:ec:6f:
                    c8:ab:bf:ba:b2:38:e0:6c:9f:bb:51:5e:8f:7e:e2:
                    4b:d4:60:4b:6c:5e:2e:f8:6e:32:40:29:70:0f:59:
                    3c:65:58:08:08:2e:c9:34:56:a9:b8:af:0f:4a:aa:
                    1d:ad:1e:44:31:a3:40:fa:df:46:c9:2c:15:9e:fc:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1D:BD:34:59:F0:EF:23:6A:F5:8E:66:CD:31:05:E9:DE:0C:B1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b8:eb:38:1b:dc:7e:d0:98:17:f8:e7:6f:a0:b4:75:6b:c4:
         8b:3f:84:aa:df:8a:8a:91:80:56:56:ae:e7:19:62:c6:76:a8:
         4f:81:e5:45:18:84:32:17:9b:65:32:ec:c6:43:0b:d9:d3:72:
         bd:f2:53:0e:14:a1:0a:07:52:c6:26:4a:8b:2a:12:ec:5e:65:
         af:6d:28:dd:f1:58:ef:3f:b3:73:f9:8c:32:11:f2:ce:c6:cf:
         78:c1:94:87:36:55:f4:3e:45:84:26:ce:5c:ee:26:54:1e:c8:
         7f:a8:a4:bc:d8:db:18:0c:57:e9:26:c4:99:87:83:67:38:04:
         bc:32:b9:c3:8d:cf:56:d4:68:72:49:e7:34:87:5a:24:eb:4f:
         34:94:0e:ae:3e:14:bc:a5:cf:50:68:aa:55:85:db:e1:78:41:
         3e:41:5a:09:79:37:fa:a8:6d:78:ed:ab:52:5f:d5:e7:6f:51:
         ba:eb:3b:70:24:26:bf:d3:8b:a0:68:fa:98:33:4a:ef:da:4b:
         03:22:84:c6:5e:f0:b6:41:b6:3a:26:ab:27:7b:99:62:5d:5f:
         71:de:5e:d2:c8:9c:d6:98:9a:c5:89:db:c2:e4:30:b6:d0:e8:
         ed:bd:91:68:3c:00:f7:47:d9:35:2b:d7:15:7b:e1:e8:ee:9e:
         f1:d9:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:09 2025 by rpki-client