Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623f3dfb-338a-35fb-a671-e4bb316f4275.roa
File:                     623f3dfb-338a-35fb-a671-e4bb316f4275.roa (raw, json)
Hash identifier:          EOx2PSNUYC/1jGbfjSzTfyxidUbk9+EIKpxQOmusO+o=
Subject key identifier:   B2:E6:F9:B8:A5:B1:DE:AC:AB:C9:7E:51:1A:21:27:36:AB:36:CE:57
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7110659921271F9DBC23580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623f3dfb-338a-35fb-a671-e4bb316f4275.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        104.30.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:06:59:92:12:71:f9:db:c2:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=65b8b619-85ef-4954-a749-d60cc0388606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:c7:57:e7:88:d5:bf:4b:06:45:6d:3b:9f:
                    e4:2f:c3:38:f4:15:2f:eb:3f:83:05:83:f7:e1:42:
                    29:b1:71:a1:3b:b5:0e:7e:ea:b7:20:f6:77:92:4f:
                    71:b4:c3:22:bc:bb:8d:f6:e4:e2:2d:8b:ca:55:9a:
                    e1:cf:76:9d:44:71:cf:5c:e8:d5:19:2b:d3:e6:35:
                    df:09:10:34:2f:ef:bd:2a:c0:66:8a:13:5f:a7:a2:
                    04:59:16:27:61:48:44:80:ff:89:81:5e:4d:6d:1e:
                    74:b3:52:05:17:ba:06:f9:e9:3a:8a:39:f9:ab:9d:
                    3e:d7:3e:6e:ab:2c:67:a8:bf:0d:1c:7b:09:a7:68:
                    1f:8b:ce:58:3f:55:99:cc:0d:9b:f9:76:59:35:2f:
                    d4:00:0d:56:72:c7:4e:2d:bd:00:50:a3:91:ec:44:
                    6a:23:c6:b2:ed:d5:b7:16:4f:a3:3e:a0:92:e8:f9:
                    dc:df:b0:cc:b8:fb:8a:ff:f4:e0:67:e9:63:01:92:
                    c9:38:49:e3:27:3a:c7:20:37:b2:69:41:fb:61:c2:
                    59:9e:26:12:be:c9:75:bb:b0:82:c0:96:68:c1:8e:
                    23:54:b6:1a:f7:89:5a:f9:1b:97:8b:c3:15:83:c2:
                    e9:fc:0a:4d:be:f5:47:a7:94:cf:56:17:fc:02:9f:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E6:F9:B8:A5:B1:DE:AC:AB:C9:7E:51:1A:21:27:36:AB:36:CE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623f3dfb-338a-35fb-a671-e4bb316f4275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.30.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c0:81:10:a2:fd:ef:51:06:90:d7:af:bc:75:19:db:04:ac:
         8c:41:90:8f:82:11:51:04:ba:33:c6:fb:5c:b8:1a:e3:2d:fb:
         90:50:fa:a6:56:b9:1e:86:a9:45:f3:b4:00:89:fd:a3:84:fa:
         ff:05:64:3e:dd:86:ad:0f:29:0a:b8:f4:84:f7:41:3e:7f:cb:
         7a:04:98:3f:6f:db:98:d0:e0:b0:dd:e7:c3:81:97:f4:ca:d7:
         b0:db:66:30:94:5c:6c:2b:9c:02:f5:4d:86:91:44:a7:c2:4c:
         3c:00:b8:90:b8:cf:7b:4c:e5:f2:ff:a6:f4:c7:cb:81:fe:a6:
         f7:d2:62:ac:11:92:da:52:b9:8b:7d:7f:8a:b6:3b:2e:28:9b:
         01:e8:00:fc:a3:08:75:82:fd:4f:b9:82:6f:7e:b3:ba:53:0f:
         76:05:50:e2:97:b1:d5:ae:e8:a4:49:90:f7:74:4d:93:31:c8:
         a2:2f:8b:fe:d5:f5:f0:85:c9:c4:1f:f4:83:f1:0e:fd:5a:d4:
         62:e3:42:9b:b8:e3:c4:33:77:6e:ca:32:62:70:47:38:4b:da:
         0f:a6:95:2f:51:22:eb:bd:a1:b1:d9:d4:e0:b5:12:5d:2b:e8:
         09:df:0a:6c:c5:ce:d5:9f:a5:f0:65:dc:a9:fe:8d:7e:bc:0a:
         d7:47:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:23 2025 by rpki-client