Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5931857e-0685-3609-9255-fce2e9566b2c.roa
File:                     5931857e-0685-3609-9255-fce2e9566b2c.roa (raw, json)
Hash identifier:          4h8CqKXf5nJONIhGrvd/fQt+0X25l4BXSqYsqxXCI70=
Subject key identifier:   35:8E:B8:3C:DA:4D:7F:79:BC:23:5D:89:4C:FA:CB:E3:32:83:43:A6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA6700370EBDAFE27A34C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5931857e-0685-3609-9255-fce2e9566b2c.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.18.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a6:70:03:70:eb:da:fe:27:a3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=85738b23-279d-40bd-8824-df46dd1362c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d6:de:d9:bb:7a:93:ac:d9:63:16:42:11:50:
                    0f:0c:bb:c9:76:67:c0:11:99:74:61:37:d6:dc:15:
                    f9:47:fa:eb:5e:6d:b8:d1:0e:00:5f:19:16:de:fe:
                    0d:b2:38:0b:93:70:c9:65:1c:8b:b5:c2:5c:9e:c3:
                    0a:3a:ca:5c:a3:8d:4d:44:60:6e:0b:d1:ec:69:4d:
                    13:dc:90:05:df:d9:35:e1:6c:c1:da:e9:d7:48:cf:
                    37:05:0c:b6:66:57:ab:55:f6:34:2b:f6:25:d2:8e:
                    37:8d:c1:a6:d6:34:4f:a2:9b:de:cc:26:3d:1c:b9:
                    b8:f3:38:b3:8b:67:bf:7d:bd:8e:fa:ae:8d:ea:92:
                    44:5d:ea:d3:4e:6f:ae:49:c2:55:27:61:17:88:fc:
                    3f:06:aa:e1:fc:73:81:8b:8f:e2:75:4d:cf:4b:72:
                    5f:d2:43:51:1b:bd:cc:2a:73:38:69:cd:bd:0d:11:
                    cc:77:19:21:50:ba:9e:d8:90:08:68:40:9a:2d:7a:
                    f8:c6:b3:99:55:6a:0e:69:2f:4b:75:a9:c4:93:3a:
                    3c:36:c7:4f:97:af:7f:bd:db:a0:ad:3e:81:47:f2:
                    b7:26:d2:1f:6b:6b:40:d1:7c:c6:e0:c6:00:25:55:
                    ca:e7:f9:76:eb:e5:2b:cf:9b:f0:02:fc:37:73:69:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:B8:3C:DA:4D:7F:79:BC:23:5D:89:4C:FA:CB:E3:32:83:43:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5931857e-0685-3609-9255-fce2e9566b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:60:60:bb:ad:b2:3a:e1:a9:0d:a2:6f:fe:5d:92:5e:2c:e6:
         a2:20:1e:39:f0:07:7b:20:24:44:88:ab:2c:0a:b6:fb:98:73:
         fc:ea:30:0b:46:d3:13:59:b6:56:be:8f:a5:d8:fb:33:4e:27:
         87:01:17:e4:e1:aa:71:d1:55:fb:b6:14:63:c8:ca:20:f6:db:
         81:12:65:eb:d8:0e:06:ff:08:6b:0e:0d:7a:7c:d8:31:bd:f2:
         2f:0e:3f:32:80:ef:87:20:17:c9:61:47:10:59:c3:06:46:12:
         a0:23:1b:61:52:b8:bb:f5:35:1f:d3:37:99:53:5f:74:c4:2e:
         2a:a6:f8:a3:61:9b:d4:b8:bb:9d:b0:99:80:4b:53:68:bb:5a:
         b8:59:b2:e9:49:e1:08:e5:f5:34:36:68:39:42:c5:c0:da:a3:
         0a:87:84:47:ea:47:1e:15:3e:5b:48:62:ea:7a:28:2e:f2:41:
         1a:31:54:d8:a4:e4:6b:37:32:72:da:52:30:30:c2:da:e2:0f:
         54:5c:ea:60:0d:bb:3d:95:2a:3d:fb:38:b4:29:52:fa:0d:12:
         b0:f2:8e:26:82:4e:eb:79:39:3a:27:d0:59:6c:f0:17:aa:4e:
         01:45:88:0e:d2:ef:08:04:94:42:16:7b:69:ef:4a:c4:6a:34:
         04:2a:7f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:10:30 2025 by rpki-client