Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b77df5e1-1770-3bbd-9715-dc22edb3c761.roa
File:                     b77df5e1-1770-3bbd-9715-dc22edb3c761.roa (raw, json)
Hash identifier:          4tlrJFzReRgCSq7hxHnec8+KUSP1ch0Dhp2Ba7LdKMI=
Subject key identifier:   D7:A9:17:B0:49:21:EE:28:BF:9C:BD:FD:0D:8C:66:9B:7E:20:1E:5A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABAB5785279CAAB5A55B40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b77df5e1-1770-3bbd-9715-dc22edb3c761.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.27.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:ab:57:85:27:9c:aa:b5:a5:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=d1c022bd-622a-4583-8308-94b7886ae570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:4b:e5:2f:93:f5:46:6d:66:ce:37:81:6f:
                    57:b7:e6:d5:78:5a:a2:76:29:05:ef:4c:cf:9e:3b:
                    8c:fb:db:f2:b1:8a:80:91:76:fe:71:c3:de:f8:1f:
                    59:54:3e:ed:7d:99:41:19:b9:53:29:ba:aa:62:6c:
                    69:12:bf:5a:43:b6:6d:8b:2b:a0:17:f7:cf:8c:9b:
                    3f:fb:20:3a:c5:59:ed:cc:bc:6b:1d:d4:22:5a:45:
                    46:7b:38:cb:88:9e:73:15:6c:94:39:28:8a:58:38:
                    a1:aa:9d:8a:86:9e:34:e5:48:32:44:f0:c7:02:38:
                    a7:f7:cf:ee:65:c0:3b:f5:90:78:21:6a:d8:8c:dd:
                    3c:b4:51:08:19:f8:ea:86:15:1c:60:ab:c6:f6:78:
                    1d:d6:6c:dd:c7:27:6e:32:dd:65:e8:c6:8f:2a:6f:
                    b1:58:c5:43:64:48:62:22:32:96:6e:23:97:0d:a1:
                    a0:d9:65:1d:85:02:98:89:ef:4c:25:0e:44:8f:79:
                    36:fc:99:57:b2:3b:ce:a1:92:13:f0:e3:8c:2b:1e:
                    75:10:d5:e5:5b:21:1f:fb:ef:e4:57:34:86:34:8b:
                    d1:18:9d:94:44:75:c2:ec:95:cd:63:45:8a:07:92:
                    bb:ff:48:39:90:28:df:60:70:8a:fb:35:f1:ae:c7:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A9:17:B0:49:21:EE:28:BF:9C:BD:FD:0D:8C:66:9B:7E:20:1E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b77df5e1-1770-3bbd-9715-dc22edb3c761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:ae:c3:38:8e:1c:88:86:61:54:54:bb:90:e5:af:91:c2:
         92:d5:d1:c0:e5:46:91:a0:a3:ca:29:16:4f:91:2f:c2:39:27:
         7b:e1:b2:a5:2a:4b:03:25:59:00:75:2f:ba:d8:8d:cf:d5:09:
         95:ef:7e:c8:ce:2f:2e:9a:da:6e:c7:ff:3e:e9:50:a0:de:66:
         98:fc:e1:35:e0:d6:3b:74:c1:c8:5f:a3:7b:92:00:f9:1e:76:
         5d:90:55:17:d4:00:cc:54:35:b5:c8:fe:b8:ca:1a:1d:78:53:
         43:cb:f2:1e:9a:0e:7b:e3:c2:34:ac:2c:b2:a4:0f:6d:ed:75:
         bd:c6:64:91:19:bf:08:38:0b:00:7b:46:d0:30:bc:79:ce:c4:
         09:e2:98:33:fe:0f:06:c2:e8:60:ed:09:c2:c4:d2:a5:aa:fd:
         97:23:0c:98:9f:04:42:2f:c7:84:7b:e4:1b:8d:47:3c:15:bd:
         58:b4:68:09:59:62:4f:89:c7:09:2d:19:92:88:cf:63:a2:57:
         7e:3b:13:28:a0:0e:64:2c:be:e2:2b:5d:7c:c9:5f:fb:bd:8b:
         d2:42:44:48:99:cb:95:06:1b:02:66:9c:19:19:cc:08:af:73:
         36:15:ea:ec:e7:7d:d6:e8:8d:ca:10:75:ec:90:f7:cc:bb:3a:
         4f:62:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:15:18 2025 by rpki-client