Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa
File:                     523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa (raw, json)
Hash identifier:          e3XJ05PEWxLKOQjXMVeL5VZBMj0930pLPJ86VG9AsdA=
Subject key identifier:   C5:E5:5D:2C:EB:F3:9A:E0:96:2E:57:64:06:F2:8C:50:56:BA:6D:78
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5AB98E29CE8EAF0748FEB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.18.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:98:e2:9c:e8:ea:f0:74:8f:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=561f7dae-f6ff-46e3-b798-d20cd9eb7e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d1:26:29:b2:57:af:98:b7:77:4d:0d:87:db:
                    a7:98:2e:a3:12:d6:76:cf:b7:8f:29:26:fc:27:b9:
                    6d:b1:b5:90:67:bb:78:93:f6:f0:02:6f:7c:b1:57:
                    f3:4d:f2:c5:fe:54:24:c0:bb:55:ce:5f:f3:28:42:
                    21:81:c3:ee:e2:1b:a6:87:0a:80:58:66:ab:51:87:
                    30:fd:7e:1a:32:50:56:49:88:dc:3f:61:55:65:08:
                    34:e4:14:58:83:34:f7:c8:28:01:46:e9:92:7b:f3:
                    b9:8e:26:90:3e:0e:fe:5e:4c:0a:fc:ee:5a:2e:45:
                    b7:a6:66:10:3e:eb:ca:e0:50:96:10:ac:5d:2d:33:
                    98:12:da:a1:91:2e:e1:79:95:73:3a:a2:1a:52:05:
                    9a:13:8e:e7:97:84:93:ea:05:89:29:40:eb:25:32:
                    f5:0c:03:2c:c5:f5:1e:40:e0:c7:6d:68:21:ae:ff:
                    29:9d:e5:f4:ac:3a:0a:f8:62:52:5d:db:86:48:2c:
                    87:21:37:04:05:5a:d8:72:a1:4f:a6:96:63:d0:8b:
                    3b:bc:87:c9:bd:1d:1b:f7:40:c3:15:f8:5f:29:91:
                    38:4f:36:c3:cf:ab:20:58:3a:ae:70:e2:d4:55:69:
                    95:a3:2f:d6:2e:b8:b1:55:ba:d3:ec:a3:b6:38:0b:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E5:5D:2C:EB:F3:9A:E0:96:2E:57:64:06:F2:8C:50:56:BA:6D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c5:76:62:ed:3b:c9:f8:84:ca:7c:a5:8a:09:cc:38:28:4e:
         e7:7a:4d:ac:24:9e:90:bc:fc:41:41:fa:3a:e7:87:43:bd:ff:
         fb:c6:a7:7e:13:01:0c:9a:58:96:b5:16:0c:97:c8:ff:3d:3c:
         34:fe:f4:65:15:c4:00:5a:06:43:ed:2e:03:ed:ef:b6:a1:d2:
         e4:09:49:9f:67:15:2a:1f:aa:92:0d:c3:7c:1b:bb:7f:9d:a4:
         b4:e6:5e:f7:19:d7:de:58:a2:57:7e:c3:1e:3a:df:87:56:82:
         66:2b:fc:fa:61:8f:68:87:7a:d9:4e:fb:e7:c7:a0:0c:c1:65:
         a9:c9:57:1f:f8:fe:36:14:f2:a7:de:d8:a5:f7:26:0d:e9:53:
         05:02:40:26:5c:68:db:00:47:19:ea:b2:a4:70:9e:c0:b3:38:
         e5:4f:72:c9:ab:86:a1:b6:11:ac:b0:bf:62:82:5e:2c:3e:d7:
         4d:31:e5:05:f8:ec:62:b8:80:4b:6c:05:53:bb:78:a9:fa:5b:
         2b:9b:68:c8:e1:2e:15:34:f3:48:75:45:33:44:b5:4b:c0:85:
         94:50:16:34:79:c0:b8:03:8d:a7:41:cd:22:7a:84:9d:ee:10:
         67:e1:60:8b:e2:ca:42:39:6e:fd:ac:3f:8b:47:03:51:40:05:
         8c:19:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:31 2025 by rpki-client