Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa
File:                     986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa (raw, json)
Hash identifier:          s5ueISM+ygnH+nUwFtTw9Wq3r98HYmsVymricm2Ni0k=
Subject key identifier:   DD:78:19:BB:E9:00:75:CB:CD:C3:09:39:36:CE:E3:A9:CC:20:C2:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8766CEA5F6B0D126C0E3A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.27.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:6c:ea:5f:6b:0d:12:6c:0e:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=943efaeb-a0b8-4d55-90c4-8a3f456db17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:28:68:a7:e9:d4:dc:ae:e9:94:06:4d:bc:
                    6b:9b:33:db:b8:90:c0:55:f1:d3:d4:06:de:2e:fc:
                    50:38:be:38:f6:f1:de:8a:50:e3:60:b5:c9:b1:62:
                    06:85:2f:7d:5a:2f:db:f9:5b:99:a0:77:36:09:72:
                    9b:ce:93:f6:99:ea:66:bc:45:69:77:76:bb:e5:f4:
                    8f:9e:20:5c:e4:57:d0:d0:35:3f:6b:98:7d:3c:8c:
                    16:b9:c9:7b:b6:7b:5e:b5:6b:78:d4:0e:47:b1:4b:
                    af:17:d6:f3:a2:b3:25:31:09:63:65:56:bb:14:37:
                    cc:f3:0d:0d:38:48:c2:89:cd:b0:56:33:f4:ac:13:
                    6b:ab:22:b3:e4:86:db:fd:fa:55:26:00:66:50:74:
                    b2:7e:c2:25:e5:ff:4a:ef:d4:12:ef:97:a5:9d:fe:
                    6c:d2:3e:2f:3c:2e:b0:0a:b5:6c:18:4e:47:f3:3d:
                    88:0e:31:8a:bc:b0:63:3a:ce:32:c4:51:b6:29:31:
                    36:c3:4a:65:db:a0:5b:89:a0:3d:b9:33:86:ad:6c:
                    e8:6d:a8:57:90:22:80:d1:f3:c0:f0:e0:06:f7:db:
                    8e:fc:b4:16:f1:2e:8a:19:f4:c1:c9:74:9c:a8:65:
                    11:02:ad:b3:b9:27:29:85:7b:5c:24:cd:84:33:d1:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:19:BB:E9:00:75:CB:CD:C3:09:39:36:CE:E3:A9:CC:20:C2:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/986f2d4a-f5f7-3b5c-bdca-6b31d51377f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:87:3e:4c:2f:2e:a1:f5:e1:b2:9e:80:d2:87:2e:a3:01:92:
         4e:5e:5e:27:33:5d:23:7d:22:6f:b2:9b:e6:a1:92:e8:f9:30:
         df:b1:c0:96:4a:0c:2a:47:f8:5b:3d:f2:5d:6e:c7:0f:1e:a4:
         43:00:e8:ae:a8:db:3d:d5:f6:c7:f7:f0:d0:5d:2d:bc:b0:81:
         94:cf:10:a3:dc:e3:a7:b0:8e:fe:1e:56:78:b8:59:c3:43:b8:
         37:31:a7:d3:54:7e:a6:4e:19:1f:31:a3:16:5d:06:66:32:43:
         9d:f1:74:5c:39:5a:07:a4:9c:83:03:65:06:89:5a:7c:ce:3e:
         2b:8f:76:a6:49:bf:e2:21:da:f7:4a:9c:37:cd:85:d3:75:42:
         43:8c:9f:34:58:d3:f2:13:26:7e:a9:93:97:86:9a:11:e7:25:
         18:69:ed:71:12:66:e6:4d:26:ce:2b:e4:e9:f8:5b:9f:f0:bf:
         fc:a8:f7:2f:a4:58:3d:f7:95:53:aa:98:84:8f:34:6a:7f:c6:
         23:af:dd:22:5f:26:52:71:9e:7b:80:6f:c0:24:96:9a:af:cc:
         62:fc:c4:f8:a5:09:a7:44:b0:df:32:8f:38:77:cf:5b:71:05:
         e5:62:ab:d1:b1:20:30:19:45:e6:00:03:d9:6b:45:41:50:39:
         07:71:f5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:12 2025 by rpki-client