Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c140af54-55a1-3814-8024-34190d1b2686.roa
File:                     c140af54-55a1-3814-8024-34190d1b2686.roa (raw, json)
Hash identifier:          Rc+lCOj4pUjn3THgfWwZUXiOOF+fINIqdt/kJisbDew=
Subject key identifier:   B9:D9:48:14:64:E4:88:D4:3B:82:EC:58:1C:90:BB:70:BB:01:8E:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA1A063F364E9FC95E200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c140af54-55a1-3814-8024-34190d1b2686.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.29.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a1:a0:63:f3:64:e9:fc:95:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=456e27c1-026f-4990-bb2b-1326d378eb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:c4:26:91:27:10:05:aa:fd:49:57:e7:3c:
                    5c:10:5b:6b:82:6c:e0:1c:86:26:6b:82:ad:bb:79:
                    1a:d3:46:71:4f:e5:64:7d:ea:64:36:4f:d5:f1:18:
                    40:0a:a2:ec:11:e5:b8:35:7e:9d:a0:6a:2a:68:32:
                    eb:d2:04:ba:64:96:51:8c:4a:4f:5e:07:d4:6b:39:
                    35:b2:de:f5:d0:6c:ff:4a:92:07:61:e3:ea:3c:26:
                    66:4a:5e:19:c9:79:63:0e:18:ee:55:51:b1:0b:d0:
                    ab:7a:8c:b4:20:78:6d:cc:0e:1e:12:ec:6e:8f:d1:
                    aa:f9:3c:0d:1d:3a:8b:98:34:67:e5:43:70:20:1d:
                    77:61:1c:eb:7a:8d:83:72:b4:aa:cc:b0:ea:25:ce:
                    e8:4e:75:03:2d:eb:95:ee:5d:59:b0:bf:a5:bc:08:
                    59:e4:4f:24:0b:ec:2f:9c:ce:81:85:99:57:8b:2e:
                    de:2d:a3:02:21:95:c6:2c:63:e3:a9:9a:60:66:93:
                    e1:2a:32:67:85:54:7b:1f:f6:52:6f:c2:57:80:95:
                    20:66:2f:8f:8e:53:d1:4c:5a:76:f5:35:b7:71:94:
                    78:4a:b2:d9:16:07:13:fe:6f:00:49:ec:7c:48:a2:
                    d2:b5:03:a9:de:7b:71:92:94:e1:91:f2:8c:1f:2f:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D9:48:14:64:E4:88:D4:3B:82:EC:58:1C:90:BB:70:BB:01:8E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c140af54-55a1-3814-8024-34190d1b2686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f7:89:43:a0:df:05:14:52:8f:62:94:d9:f2:5f:17:c0:d2:
         4c:ba:50:4a:d4:ad:f9:10:a4:1f:28:dc:d2:e9:5c:e1:9f:2b:
         ce:25:95:41:6f:9b:7f:cc:22:e9:66:0b:58:19:8a:24:71:c3:
         fb:15:a3:0b:41:07:99:89:8a:fd:a5:41:50:d9:9d:e9:01:d4:
         f4:6d:3e:e5:c2:85:d2:9c:a1:51:1b:88:20:b3:04:e5:6c:f0:
         01:0f:09:5d:6c:b4:82:2f:de:46:b7:bd:98:62:4c:0b:40:d2:
         b8:ad:71:f7:da:d9:70:d0:c9:40:e5:71:40:a5:7a:67:4c:26:
         10:33:0f:0b:29:86:8c:50:1f:6a:d9:98:50:17:54:df:3c:d4:
         31:92:8a:df:e9:e1:95:79:1c:b5:9e:9d:db:f8:8a:fc:64:0a:
         64:7a:09:1a:f1:53:10:24:66:03:57:95:ee:01:d9:37:3a:d1:
         0f:4c:7e:45:96:d0:0b:e8:b0:0e:77:0e:84:2c:59:ea:0a:97:
         ca:ac:88:b1:d8:05:48:8f:68:11:58:69:dd:a5:8e:69:f1:33:
         dc:4b:08:00:0a:b5:cd:0d:4d:3c:57:4d:cb:6b:94:43:b8:d8:
         67:c1:8a:bd:f6:7b:6b:58:18:ea:a5:a7:6b:7a:f2:20:ef:6d:
         a1:6f:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:25 2025 by rpki-client