Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa
File:                     5390d515-f56d-3bfc-9fdd-f680b36665ae.roa (raw, json)
Hash identifier:          u0WfdF7FEmU1wxWjuTx4fFYjm7lAkoiQCdlX1+Wz2L4=
Subject key identifier:   F4:C9:D2:AF:3F:05:E2:1C:67:E3:44:26:EF:15:77:1F:2F:D1:FA:9B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5AB9C749554B59EA8215180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.20.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:9c:74:95:54:b5:9e:a8:21:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=d6197896-e962-4ed6-9d72-9222a2c7c404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:fb:df:35:a4:0b:2b:98:2b:3c:9a:6b:30:
                    98:a5:90:7d:d0:76:88:f2:67:ff:89:7b:c2:19:22:
                    68:97:c3:a4:d5:df:25:d8:eb:88:8e:c0:59:d7:d1:
                    d6:77:ee:6d:73:0d:83:76:27:50:d8:fa:e2:e7:9f:
                    9c:f9:72:42:e0:95:51:45:c5:a3:1c:cd:49:30:e4:
                    5d:ca:0d:3f:43:bf:df:53:6e:50:ae:9a:1b:36:4a:
                    22:93:53:47:52:a3:0f:cf:c2:eb:7b:79:f6:8c:d7:
                    ad:88:63:8b:d1:d0:92:e4:e0:06:00:71:f1:90:d6:
                    82:8d:9a:82:07:54:97:b0:ca:8b:4a:6e:e5:fd:41:
                    ee:38:85:99:c2:0d:ee:42:1e:23:12:3f:4e:af:52:
                    b2:72:84:80:51:51:71:85:50:82:ff:98:d0:dd:32:
                    9d:b5:d6:1e:58:aa:e3:1a:27:72:20:3d:05:45:0d:
                    c1:7e:22:52:b9:a4:29:63:92:7e:20:56:80:cb:e8:
                    3d:f3:84:08:bb:86:cc:1f:b5:84:0c:e3:83:2c:89:
                    eb:ba:2d:62:5c:f6:d6:f5:83:6a:d1:d5:32:a8:95:
                    b0:80:ee:1d:96:84:7d:df:ea:42:b8:94:44:da:38:
                    a2:46:3a:f3:65:b2:ec:95:d2:84:e1:9c:7b:9e:99:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C9:D2:AF:3F:05:E2:1C:67:E3:44:26:EF:15:77:1F:2F:D1:FA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:9b:66:2d:80:4a:4a:ce:43:51:db:c9:90:c6:0d:0d:67:41:
         12:40:cf:18:6c:55:91:68:a4:5e:f9:88:52:87:77:be:9f:4d:
         b5:3e:32:56:41:e3:f5:df:6b:ad:f1:27:2a:a1:e9:17:f6:4e:
         67:de:e7:ef:1b:17:67:98:6c:35:29:59:5a:cb:ec:bd:96:68:
         e6:7e:96:39:72:18:3c:58:99:26:c4:7e:af:47:36:15:97:33:
         9e:43:a2:35:a2:7f:0d:86:f7:ae:55:3f:6c:b2:4f:66:a7:f3:
         84:15:44:63:f9:35:2f:4b:93:45:69:85:e0:10:ab:b0:e2:b8:
         b0:54:82:0b:1c:01:33:d4:d0:b4:b9:f1:6e:d3:c5:40:67:f8:
         bc:ae:66:98:9b:64:5c:31:6d:1d:4d:bb:7e:1e:ae:ef:ff:5a:
         23:38:7d:9c:8f:dc:10:71:5e:d2:02:86:3d:0e:1d:d2:1a:55:
         b0:9a:0a:7c:2f:8d:a7:41:d8:d0:47:3f:5f:3b:17:c0:38:68:
         9b:6a:60:cb:bc:e7:ed:10:49:8a:21:13:59:54:a2:ca:72:16:
         0f:95:19:7c:65:b8:6e:56:7f:52:e4:bf:d0:5e:aa:ca:12:e0:
         e7:75:66:a5:5c:ce:c3:ec:92:c9:a3:b9:5b:2a:77:07:08:fc:
         f0:a7:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:21 2025 by rpki-client