Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/345d25b6-9527-3620-9eab-867194445d57.roa
File:                     345d25b6-9527-3620-9eab-867194445d57.roa (raw, json)
Hash identifier:          0lTIa0+aa55SOw4JhHZXaeKncPmZ887Mv5SvVtA18rM=
Subject key identifier:   CB:9B:6D:9A:C6:CE:61:61:77:8C:43:7E:00:D3:EB:EB:0F:71:AB:4A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA7A36584E858640AF220
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/345d25b6-9527-3620-9eab-867194445d57.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.19.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a7:a3:65:84:e8:58:64:0a:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=2683163d-012f-4557-bf38-14602a681eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:db:92:84:b0:29:ff:ff:05:d9:5b:2e:0b:
                    c7:1c:01:11:ee:e3:a8:58:4b:08:72:81:a3:64:35:
                    ad:db:a3:af:81:11:c1:0b:61:46:b7:82:cf:d2:bf:
                    f2:05:ac:7e:ae:08:0f:5f:fb:fd:2f:63:af:df:a5:
                    3d:82:1a:c8:63:b5:db:51:9f:6c:37:63:67:bb:cd:
                    c2:ca:8e:83:dd:ca:4c:0f:09:87:bc:fe:b3:6d:81:
                    e6:e8:9a:b3:58:c8:ad:d7:55:ce:ff:6c:b5:01:38:
                    32:72:3a:bf:29:3d:9e:45:59:fd:9a:7f:18:7f:18:
                    31:5f:5a:d5:0e:40:f6:88:d1:b3:b1:95:6f:20:fb:
                    62:51:2f:36:35:ff:bd:f2:69:ce:66:2e:a8:61:fa:
                    8b:f1:ef:ef:0e:1f:5e:9b:8e:83:d5:61:d3:fd:7b:
                    9f:36:ad:88:0b:31:95:a0:78:a7:5d:ee:31:66:b8:
                    10:f3:e0:90:74:65:a9:dc:0d:c2:eb:0a:85:30:2f:
                    c3:b1:cd:f4:b4:44:15:83:ce:62:bb:a0:53:cb:c5:
                    64:53:89:ad:d2:9b:1b:3c:bf:11:59:44:a3:88:24:
                    4f:1b:18:d3:f6:ad:1f:bc:6f:56:71:60:07:b6:ed:
                    1f:cc:62:fb:ae:4e:c2:e6:f0:a5:25:76:28:50:68:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:6D:9A:C6:CE:61:61:77:8C:43:7E:00:D3:EB:EB:0F:71:AB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/345d25b6-9527-3620-9eab-867194445d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b9:44:b2:3c:08:da:62:90:69:f7:59:bc:9d:58:15:de:75:
         69:18:71:81:2d:4c:99:15:4a:37:1d:0f:dd:90:73:fe:90:32:
         6c:37:d9:df:28:e1:07:03:32:0e:7b:ee:6e:cc:28:9d:33:36:
         e0:8e:5a:64:41:a9:0c:0d:22:6a:27:c3:02:e1:3f:71:3a:3a:
         25:3d:9f:eb:e9:dd:fb:cb:6b:bf:21:e1:a8:73:8b:e4:67:73:
         32:17:3c:3a:c8:18:23:c4:72:63:5c:57:14:24:06:63:9d:71:
         39:6e:2b:74:5d:92:f0:e8:43:90:03:d0:0a:08:ae:50:71:6a:
         2e:98:56:26:b2:fe:27:6c:62:5b:e1:7d:84:70:19:51:c1:48:
         e8:15:ac:4c:df:6d:10:d6:e3:44:ec:e8:07:27:5b:25:79:db:
         cf:01:81:46:7c:90:a8:4e:dc:27:f4:de:d4:f2:f0:76:42:e1:
         cd:59:15:83:50:65:de:44:36:69:f2:61:31:86:05:90:c7:21:
         83:5c:25:d0:5c:33:6d:95:c7:a4:72:46:7d:64:b0:40:04:67:
         50:77:02:d5:ec:60:9e:fc:3a:34:2f:9c:2e:b2:6f:0a:1e:05:
         0f:e0:9e:7f:c6:cf:2a:55:15:f2:c4:7a:e4:a2:26:8d:43:7f:
         c0:06:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:32 2025 by rpki-client