Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa
File:                     31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa (raw, json)
Hash identifier:          Ix8IZQsrvKa8LO758CxZYpmSOZOF6fC1R38d2LS9Srk=
Subject key identifier:   77:B3:54:27:BA:ED:99:2A:36:20:75:B6:E7:14:92:FD:5A:87:02:27
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849C79F5F3EDE534C4C84121780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     13335
IP address blocks:        104.23.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:5f:3e:de:53:4c:4c:84:12:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=fafb230c-f7cd-43ce-b913-eca6480eb8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:cd:a5:b6:f1:5a:f4:fd:9b:3e:43:28:86:
                    58:18:1f:db:75:9e:7e:0a:8f:40:8f:bd:97:f3:27:
                    0b:95:f9:61:37:22:6d:b0:b5:0d:c4:86:71:27:10:
                    84:c6:43:d6:76:31:b6:da:8e:69:04:8c:ca:68:84:
                    ea:90:61:05:b3:1c:03:bc:3d:64:73:71:5b:58:f0:
                    23:74:7c:ea:8e:2c:4f:63:35:b0:d7:93:ed:2c:0d:
                    eb:2c:e4:20:3d:78:3c:32:87:f1:28:4c:48:0c:08:
                    8e:49:b8:3a:5f:8d:54:0e:4b:9e:34:df:ca:2d:e4:
                    8a:af:ba:91:30:f5:d4:2d:ee:97:09:66:c4:ca:90:
                    c8:16:29:1c:60:be:01:88:86:b9:11:63:bc:54:99:
                    6a:3f:2c:0c:2d:0a:98:02:06:ad:bc:d6:32:18:23:
                    2a:6e:9b:dd:ba:f9:9a:ba:5a:55:c2:ed:f4:e1:1e:
                    2f:02:a2:c7:8e:d7:61:83:44:bb:c5:9a:fc:45:b5:
                    56:0c:11:8c:75:a2:7c:c5:c8:48:b0:a8:3f:46:b1:
                    fe:84:07:d0:95:2c:60:fa:ad:1a:00:d6:f3:4a:8e:
                    b2:49:28:4c:13:a3:91:dd:e0:05:d8:c4:77:64:89:
                    bd:a9:30:45:95:1d:f2:87:ed:c2:46:a1:94:27:fd:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:54:27:BA:ED:99:2A:36:20:75:B6:E7:14:92:FD:5A:87:02:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31fe9495-ace6-32b5-9f6b-2ff7ef6ae491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fe:cc:c1:6c:11:12:c4:98:09:be:4c:c4:6a:cf:30:79:78:
         cf:a0:fd:f8:d7:69:70:4e:53:ae:37:60:57:59:e6:17:c1:b0:
         9a:1a:b8:85:16:46:01:0c:31:8d:d3:80:e5:f0:10:ba:0c:1a:
         d0:4a:65:be:26:39:d3:f3:47:9b:d8:b6:8e:92:85:cc:20:82:
         56:33:c7:bd:14:ae:19:bf:a0:d2:c3:2b:1d:7a:0e:77:4c:30:
         7c:ae:94:63:4e:5b:99:82:cb:67:69:c7:a5:81:b8:a6:dd:f3:
         89:8f:5a:71:c5:0c:9b:7d:0a:f3:50:2c:f1:0e:b8:83:2a:b9:
         a3:04:61:2f:a5:c6:03:e9:1e:a2:25:3c:b6:66:59:9f:a3:8b:
         c4:a4:72:a6:a4:bd:e2:7c:6c:89:42:3d:8d:9a:af:78:a7:fc:
         15:17:25:28:3a:87:29:ae:76:d6:59:75:fb:bc:3e:6d:43:90:
         cd:27:e5:16:58:87:33:e8:cb:84:db:0b:5e:47:9f:94:a9:45:
         b9:53:33:c8:e3:f2:cc:97:de:08:e4:02:ba:15:82:ab:54:95:
         63:82:db:86:f7:e6:d1:55:92:c1:d3:9c:06:f0:15:07:24:6f:
         ef:85:61:f7:66:72:44:b2:ac:db:8a:fc:0b:ab:a9:15:3e:8d:
         1a:f8:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:02:14 2025 by rpki-client