Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa
File:                     ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa (raw, json)
Hash identifier:          omRFr0Es/wDoToeqzmMXcUFaOsBFW+IUOp1aPCSQVko=
Subject key identifier:   D5:07:7E:7D:3B:3F:A3:12:C5:95:3D:98:7B:3D:C8:FC:8B:8F:8E:81
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD3A0FA93ABF07D41A011F7A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        104.23.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:fa:93:ab:f0:7d:41:a0:11:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=dad5db72-52c9-4df9-8a77-9126242baa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:9b:7b:b2:eb:18:ea:9e:19:a0:6f:c0:25:
                    5a:d7:a0:9e:2c:fd:ec:c6:18:43:f3:4f:f6:76:39:
                    3b:bd:f0:63:f3:0d:e5:a5:26:db:71:4f:3c:41:22:
                    10:9b:04:39:7f:62:46:69:46:a0:a3:2f:4c:4d:1d:
                    12:d2:84:52:b6:b7:63:03:54:2f:b0:46:89:65:5b:
                    a2:4c:59:fe:29:fc:28:73:0b:a1:23:bd:a6:a5:4c:
                    52:73:c5:65:df:ac:49:27:7b:70:5b:61:54:45:7c:
                    a6:76:55:69:76:1b:25:9e:61:d1:f3:2c:2f:13:e1:
                    e2:2a:c3:cf:6e:f5:f5:05:87:ad:8c:ba:2a:df:99:
                    d7:54:62:7d:09:2c:ce:38:a3:40:03:fc:de:78:c4:
                    85:6f:50:8d:a4:d5:85:08:90:29:9f:b2:57:61:19:
                    3b:40:18:40:25:8a:8f:54:e2:bb:f9:e9:c4:c5:ce:
                    f1:e7:bb:fd:21:23:8d:4c:70:d2:a1:0d:b9:0f:f6:
                    ae:87:ef:5f:a1:b3:99:9d:89:0a:05:54:6a:20:90:
                    8e:17:79:f8:2c:e4:37:d2:57:bd:c3:63:38:f9:ab:
                    76:41:e9:4d:5a:78:93:05:25:f7:42:50:0a:b7:e5:
                    65:1c:e4:d5:3c:f1:2d:b0:fd:ef:2a:ce:e4:f2:e8:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:07:7E:7D:3B:3F:A3:12:C5:95:3D:98:7B:3D:C8:FC:8B:8F:8E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:fc:4e:36:f0:bf:d4:71:57:7c:67:bd:1c:ef:03:fa:5d:6a:
         87:a7:4d:b7:b0:65:ff:d6:fd:7e:42:64:8f:05:70:25:18:e2:
         68:50:ae:a0:a5:d7:e2:a7:08:a8:a9:21:d3:32:c5:0a:4a:37:
         cc:bb:31:a9:42:1c:6a:95:ae:44:e7:28:00:9d:41:c0:44:37:
         75:74:ad:6a:87:4c:d6:84:9b:7f:04:26:6a:8c:09:bb:b0:89:
         52:d3:c0:22:b8:94:36:a5:e2:99:32:62:50:fb:09:31:54:fe:
         c0:31:f0:8d:83:ac:d0:34:76:ec:90:f1:d3:01:83:d1:7d:40:
         a8:d4:e9:6c:f2:3a:05:3e:e9:d2:e4:34:71:f7:40:59:61:3c:
         cc:39:ac:db:50:6c:0b:3b:09:bf:62:f4:4c:e4:57:95:f6:da:
         b0:cc:8d:02:ed:06:96:d7:d6:52:74:01:4a:e9:e8:f7:a9:83:
         a6:f7:14:1c:b2:1c:59:9f:5e:7f:59:5b:e4:fb:18:f5:9d:4f:
         80:d4:f0:ec:02:54:eb:64:03:d9:df:f8:9a:97:90:11:cf:3b:
         4d:12:4f:14:8b:e8:f9:97:0f:74:b8:64:b4:62:48:d4:41:69:
         44:4b:6b:03:c6:a6:26:47:ea:84:a0:5f:c8:ac:a2:17:a5:31:
         c5:89:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:17:01 2025 by rpki-client