Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4144f8e9-27b6-3ecf-8035-92073685ed5b.roa
File:                     4144f8e9-27b6-3ecf-8035-92073685ed5b.roa (raw, json)
Hash identifier:          XxNUzWnrbLdWvVqAHxglLq6ZmAuPXpeW9itp9pV4Uzg=
Subject key identifier:   7C:79:8F:DD:3E:71:C8:DA:D0:E2:57:6F:AF:87:B0:76:37:12:97:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA4E67968A1B8E12816C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4144f8e9-27b6-3ecf-8035-92073685ed5b.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.18.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a4:e6:79:68:a1:b8:e1:28:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=59c04671-ab7a-41f6-bb5c-fbf177d9b617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:42:99:88:20:e5:c6:54:0e:b5:7d:8b:b7:
                    7a:45:57:a7:5b:65:4d:bf:05:b1:4f:31:34:08:4a:
                    27:aa:90:a3:ae:a9:d0:e8:cb:99:9e:19:ce:d6:e5:
                    97:48:4e:3e:98:64:3c:2e:e5:63:a4:6a:9c:59:2b:
                    6a:86:2d:f0:3c:1e:b7:a0:86:56:44:7e:b3:53:64:
                    00:91:0d:81:7e:d8:8b:99:9a:6a:c2:08:80:dd:56:
                    00:07:24:fb:9a:3e:4f:ac:e5:16:13:66:62:43:2f:
                    35:03:68:fc:b9:3e:d8:f1:3c:94:62:5f:41:02:dc:
                    12:97:69:4c:51:5d:07:21:42:ba:43:ee:79:04:4a:
                    26:5e:90:ee:91:f6:c8:80:09:3a:65:47:c9:50:cb:
                    e9:af:61:28:99:69:c6:d6:f5:11:82:6f:0c:03:4d:
                    dc:45:a5:cd:fc:f9:67:8a:4b:68:0a:27:bc:c1:7a:
                    0b:be:20:84:c3:1f:a8:5a:af:92:9f:c8:3a:1b:56:
                    c0:a1:17:81:44:93:d9:94:78:19:b4:35:12:62:ab:
                    7b:ae:54:e7:98:a2:ae:d5:89:84:1f:71:c1:fa:87:
                    b9:c8:86:b3:ca:c0:92:fe:26:5c:45:49:f4:42:e5:
                    e3:8d:0f:0d:eb:31:1e:b3:e0:6f:8c:eb:70:bd:1a:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:79:8F:DD:3E:71:C8:DA:D0:E2:57:6F:AF:87:B0:76:37:12:97:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4144f8e9-27b6-3ecf-8035-92073685ed5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:b3:cf:c0:66:4d:0c:49:e9:94:88:cb:64:ec:80:f0:42:
         e9:82:03:ca:05:e5:8f:08:0a:09:bb:24:98:43:d3:55:19:c9:
         91:83:49:71:73:34:6e:6c:a9:41:4d:9e:be:84:7e:6c:c1:c9:
         e3:52:52:c3:73:97:6a:dc:a3:28:7d:69:5f:8d:91:1a:e2:49:
         8c:62:d4:ad:d1:64:6a:dd:a2:1f:83:86:b0:9e:54:23:1b:0a:
         24:68:8d:33:9c:c3:e8:0f:66:27:59:b0:09:b9:29:54:cd:47:
         38:0a:55:62:61:a1:8c:70:d0:9f:b5:07:81:74:8b:ca:5f:af:
         4d:69:18:6e:3e:4c:d2:f2:4d:f7:79:e4:74:bf:ca:ea:f5:af:
         57:08:f2:f1:24:b0:c8:e4:5d:7c:3a:64:9b:38:3a:51:0b:cb:
         5b:27:ba:20:be:79:a6:e1:2d:64:ac:6d:49:e5:59:b2:f2:bd:
         dd:84:2e:cf:1f:58:d5:cb:ea:56:18:ae:31:8e:6a:79:df:47:
         ad:ae:59:be:95:bc:1d:ba:8f:8e:17:52:0c:2d:f0:e9:94:47:
         b4:24:92:90:34:8e:84:b0:0d:96:d5:cc:05:78:c7:16:12:00:
         40:ae:56:1a:5c:d0:84:3c:77:75:90:82:6e:b2:05:a7:18:67:
         0a:e7:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:21 2025 by rpki-client