Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad553f25-b906-3859-90f6-782a70888edf.roa
File:                     ad553f25-b906-3859-90f6-782a70888edf.roa (raw, json)
Hash identifier:          5YCcYNEpzoLcoMa23RrpywHlODByNz1GOEDUlFtxIGw=
Subject key identifier:   F5:64:13:B1:55:F9:F7:A2:9D:7F:0C:21:F3:E3:1D:99:BB:48:78:C7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A35686C2D6EFF54D18424A5C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad553f25-b906-3859-90f6-782a70888edf.roa
Signing time:             Mon 16 Jun 2025 08:49:00 +0000
ROA not before:           Mon 16 Jun 2025 08:49:00 +0000
ROA not after:            Sun 14 Sep 2025 08:49:00 +0000
asID:                     13335
IP address blocks:        104.23.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:68:6c:2d:6e:ff:54:d1:84:24:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 16 08:49:00 2025 GMT
            Not After : Sep 14 08:49:00 2025 GMT
        Subject: CN=49f1f91b-ab1c-40b8-9a9c-e074149a56e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:2a:4a:00:30:8c:da:91:ae:32:2f:9c:54:
                    0b:ef:81:77:cd:d8:89:5d:7e:f8:aa:8f:41:31:32:
                    99:f0:ed:cb:65:0d:c3:d9:76:1a:99:ed:bc:07:7e:
                    09:ed:93:9a:f3:cd:77:f1:14:ad:c5:0c:22:70:6f:
                    df:e5:f7:29:24:57:5f:71:ed:81:be:e0:ac:81:8c:
                    6a:7b:45:85:cd:a3:a6:e2:1a:ee:f6:a2:b7:32:d3:
                    53:af:ea:26:ab:cd:d7:db:c9:69:bc:3d:c5:e3:7f:
                    33:f1:03:e7:f5:9b:14:58:08:ca:22:82:b4:2e:f8:
                    34:f8:36:14:f4:b5:9c:d8:5a:b5:fc:8b:18:58:1f:
                    e6:75:cc:1c:53:db:65:83:ff:55:ff:6b:b5:27:28:
                    3f:73:d4:a2:0f:70:a6:67:50:b0:2d:75:a3:b4:7e:
                    4c:75:4d:00:fe:26:3c:2a:9b:e8:24:46:0f:57:15:
                    cc:89:8a:0c:b8:69:35:2a:e7:6b:83:59:9d:6a:fa:
                    da:04:0a:ae:39:20:17:08:b5:c2:03:64:a5:25:e7:
                    ff:2c:51:54:e8:7c:81:d0:ed:94:dc:61:3e:8e:30:
                    8b:5a:ae:15:30:ce:00:16:14:4f:d7:07:32:ba:79:
                    51:af:af:e9:36:54:3d:6d:48:c5:62:ec:1c:d1:5e:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:64:13:B1:55:F9:F7:A2:9D:7F:0C:21:F3:E3:1D:99:BB:48:78:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad553f25-b906-3859-90f6-782a70888edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:04:5d:3d:07:1e:26:0a:9e:5d:ff:91:fb:ef:92:82:1c:7c:
         cc:9c:7b:50:bf:4f:52:ed:7f:27:bb:eb:a4:56:f0:2a:b8:b6:
         48:a4:84:a5:40:39:20:6a:54:56:49:66:20:20:17:2a:fe:3a:
         26:5c:e6:d0:a4:70:4c:e5:01:bb:c4:11:c8:43:e3:04:1a:6c:
         d9:62:87:49:8d:04:44:08:51:8a:a9:5c:ee:15:b0:8e:bd:1c:
         40:f7:72:e2:c4:c0:fc:2c:94:4f:7e:71:e6:ce:e8:0d:8d:5c:
         e4:a0:36:94:a3:73:2c:f1:cc:b8:c1:18:dd:39:d5:01:69:26:
         2f:09:60:e4:8b:23:67:cf:18:d0:30:90:3d:27:cc:e6:0b:ee:
         69:5d:4e:a9:a7:11:75:5d:87:49:dc:c7:0f:c3:d3:24:65:61:
         7d:b6:b8:59:3e:09:ee:03:4b:13:b8:e0:86:ce:ba:ed:b5:0c:
         5a:bd:72:37:f1:b3:67:9c:98:99:4b:38:17:f1:d6:78:d6:17:
         a3:14:16:54:ae:28:64:53:25:77:53:a5:83:86:16:8f:05:ce:
         12:83:68:c8:b1:ae:7c:52:cc:ca:b1:df:ca:7c:8b:8d:56:ad:
         a8:10:d6:6d:50:48:0d:66:ab:a8:1e:c8:f7:6e:2a:60:c2:2a:
         fd:de:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:13:00 2025 by rpki-client