Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
File:                     94302007-379c-3d0e-b144-b33108e8a99d.roa (raw, json)
Hash identifier:          ciVvZhd80NbiHCqd0DR7q6fp88kqQLDFpvtYU/HB3JU=
Subject key identifier:   2A:D4:B0:C7:62:DE:A0:B6:37:E1:2C:58:5D:54:71:24:3F:81:54:CD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71116D1FEE5852A59E85050
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        104.31.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:16:d1:fe:e5:85:2a:59:e8:50:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=af9572d9-43f9-4747-a20e-2f1235581e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:dd:98:e7:56:16:81:24:c2:16:ec:bf:2d:
                    8b:cf:14:85:6c:e3:f3:92:18:d0:bc:65:9e:f3:f6:
                    72:2b:66:a8:cd:d3:1d:8e:b0:84:d7:85:91:a3:b7:
                    21:c8:c6:a7:41:7a:22:1d:ca:35:26:da:64:9d:85:
                    53:77:71:2e:e4:67:a2:fb:09:f1:4f:a2:33:b6:be:
                    59:42:3b:eb:65:db:8e:17:f3:82:c7:26:fb:a9:8e:
                    77:12:a9:5d:2c:59:a2:f6:e0:7d:90:d0:f9:33:2c:
                    60:74:ad:6f:e0:56:73:82:ae:87:db:f8:9c:d0:3b:
                    ec:4d:35:c3:e1:44:01:35:8b:25:11:aa:d7:f4:c2:
                    7c:a6:d3:82:bd:3c:85:8c:57:37:13:1c:bf:a2:48:
                    94:68:f2:93:a8:7a:01:54:d9:cf:5a:4c:c2:fb:f7:
                    d7:3f:af:76:d0:19:12:3c:8f:9c:81:80:c3:8a:ba:
                    51:8e:8e:e8:3c:35:4b:19:e6:b6:79:4b:15:db:2f:
                    1a:c1:03:9e:cf:ae:8a:36:fa:06:80:cc:57:f2:a3:
                    d1:c7:37:74:1c:0b:9b:a7:ab:39:bc:b3:e3:07:a1:
                    3a:14:08:42:0c:ed:e2:02:c1:b8:ef:c5:59:19:b2:
                    08:0e:c1:56:6d:8c:c0:d3:f0:bc:57:2a:27:a2:7d:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D4:B0:C7:62:DE:A0:B6:37:E1:2C:58:5D:54:71:24:3F:81:54:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:8b:ba:06:e3:c8:71:e3:d0:57:98:c5:01:bc:85:af:3b:
         89:f3:15:d8:5a:ba:d6:e5:cd:17:10:3a:f7:f5:77:16:47:e9:
         0e:70:6b:87:a2:e8:c7:7e:ed:23:32:b0:be:7a:0f:2d:ff:27:
         bc:d2:ba:c7:64:c8:e8:b1:3c:00:2b:2f:a4:9d:fd:c1:60:1f:
         24:af:8c:02:f0:4a:ad:6c:40:5a:dc:1e:fa:f4:72:9d:08:2a:
         97:bf:8b:59:59:65:74:ba:8c:af:19:09:b1:58:9d:bd:c0:f3:
         a3:41:be:b2:b9:4e:87:00:64:1a:21:b7:e0:fe:ff:59:b0:2c:
         da:87:4f:53:61:94:81:c6:71:09:02:f4:2b:dd:a6:f5:65:04:
         57:2a:31:6e:90:13:66:68:4d:45:bf:32:7b:6e:81:6d:c9:26:
         1f:d3:8b:41:99:4f:7d:72:e1:06:c6:68:f6:ba:0e:07:79:63:
         d9:f6:e3:d9:9e:8e:8b:48:df:15:18:a7:c0:67:92:c6:d2:59:
         9a:91:1b:73:b4:96:2e:95:ee:45:4d:06:0e:02:b4:0b:3a:0a:
         5b:5c:c0:0b:c0:ca:d8:5b:30:13:03:7f:a4:2c:0b:b9:5b:6a:
         34:2a:d9:b6:37:67:24:ea:e6:bd:76:ff:9e:cc:96:ce:d4:f3:
         58:02:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:01 2025 by rpki-client