Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa
File:                     6443b9d0-16ce-3791-bb89-ce585f607c9d.roa (raw, json)
Hash identifier:          AAKR8x6Q3Nq4kwfWxyIZJAvwLcLWqcj5YBqQMAgtses=
Subject key identifier:   AB:90:BB:5C:0E:4C:C2:4C:C2:38:64:AD:0F:0E:58:FE:0D:EF:D6:4F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC711068BFC1B1B68EDD47280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        104.31.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:06:8b:fc:1b:1b:68:ed:d4:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=c8233883-3c5d-452f-bda5-701334525ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:1c:95:8a:68:57:f4:00:19:d3:6e:db:77:
                    ad:25:15:1f:f9:ed:18:47:03:51:1d:30:b6:83:e4:
                    02:9e:6f:55:16:33:9b:54:0a:78:6c:68:80:df:e2:
                    ae:fe:bb:80:22:47:49:6c:ea:1f:ec:10:0f:86:37:
                    af:54:f5:62:8e:8e:37:30:83:a8:5d:c8:d5:ad:15:
                    40:99:e3:88:91:ef:71:c3:98:1c:56:eb:0d:26:50:
                    c3:f5:25:58:e9:fa:be:0c:37:94:fa:60:eb:88:f0:
                    0f:78:b1:7e:04:30:50:72:6c:76:bc:2e:c6:88:bd:
                    e3:fe:4e:55:8f:34:65:88:f1:86:ed:34:58:ee:21:
                    7d:8e:47:5a:41:7c:5e:a6:a4:71:25:9d:49:1d:f6:
                    1a:1b:91:16:2c:c2:c1:95:f1:78:d0:13:c5:a3:80:
                    16:88:06:57:57:96:2d:09:c0:a6:05:48:78:d9:f1:
                    ac:0d:f7:a4:2d:36:2f:66:66:94:c3:af:4c:c0:c0:
                    fb:5e:77:90:1e:49:73:06:20:05:9c:4b:61:1c:33:
                    c2:e8:ce:e8:20:48:a1:b3:80:7e:53:26:b2:29:33:
                    9f:d2:69:7c:42:f4:2f:8e:32:68:e3:48:2a:7c:6c:
                    d8:d8:1b:69:ca:a9:a2:3b:e0:52:98:e2:0d:5a:02:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:BB:5C:0E:4C:C2:4C:C2:38:64:AD:0F:0E:58:FE:0D:EF:D6:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:be:09:4e:1e:78:1a:28:f8:35:97:94:e8:b4:69:38:41:ef:
         83:f5:0b:62:5f:50:d7:bc:f9:3c:5a:7b:dd:75:ed:95:6f:8b:
         c5:a7:e7:62:79:a2:98:af:f7:e1:0c:84:ef:75:4f:a2:86:7f:
         69:cc:b4:aa:03:9d:bb:c0:21:63:aa:3b:3b:10:14:2f:19:e9:
         89:cc:da:f1:c0:ec:d0:cb:43:eb:49:68:cc:87:fb:0c:e3:2c:
         f6:f3:ea:70:0c:c3:fd:cf:1f:c2:05:f3:c6:05:fe:72:7a:98:
         e1:a7:46:fc:0c:23:8a:7a:e6:75:5a:a3:51:73:df:1d:cf:0a:
         e5:82:02:45:15:fc:59:10:92:c7:75:66:54:c6:16:17:e0:0c:
         3c:df:fa:8f:bb:ed:98:46:a9:f5:87:92:43:73:1f:59:43:be:
         f2:f7:80:54:24:d9:ff:ad:67:7c:18:f4:1f:12:cd:5a:ee:be:
         5c:da:42:a9:76:48:e7:3b:d0:c6:9b:65:ad:19:c4:e2:da:a8:
         55:78:42:0c:cf:36:f2:07:7d:6c:f4:d2:7d:52:41:a8:be:7f:
         3b:63:67:1c:36:d7:8f:f6:71:77:ba:99:a8:b3:fd:06:8a:c4:
         af:57:06:9f:39:fa:e2:f8:b6:a9:e5:15:57:0c:a0:fd:87:3f:
         f2:8d:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:59:08 2025 by rpki-client