Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa
File:                     c6f54f63-56ea-3839-a951-dd30fc3f2557.roa (raw, json)
Hash identifier:          wouaN9UB1Hnlcu9A0dssZyLJSMNrUnQ+fwvn6LSOV7Q=
Subject key identifier:   D7:01:29:84:A4:E3:41:6D:E9:00:CA:61:47:E5:07:08:11:3F:48:E1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71113DDCC0E64EE8DB95880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        104.29.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:13:dd:cc:0e:64:ee:8d:b9:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=caffcfde-244e-4421-abbe-53f3201bb563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:03:59:9c:d0:f6:36:5a:f3:84:b8:40:e9:
                    d3:e6:4e:3d:ae:da:61:27:02:26:67:68:78:83:87:
                    e6:c1:86:4b:7c:fb:ec:08:9f:75:72:bd:29:59:4b:
                    0b:b6:63:7a:df:41:31:58:57:58:0d:d1:fe:69:57:
                    2d:b8:10:b4:51:62:89:5f:9a:28:73:20:1c:aa:44:
                    5e:3e:f9:2d:af:7f:87:ce:5a:3d:02:b5:f8:a4:cb:
                    0a:3b:7a:26:09:3d:88:b4:32:6c:84:29:f5:79:1b:
                    94:35:b2:ea:02:18:10:bb:25:86:5d:84:08:51:6c:
                    d4:88:74:ea:8e:cd:db:58:2e:f4:f8:47:0b:a0:c3:
                    25:0f:00:78:be:8c:01:ca:fd:8d:17:3a:75:8b:40:
                    da:ed:2e:97:71:f3:1a:22:9d:a1:15:6c:51:14:fc:
                    fc:65:e2:d0:40:65:42:9d:97:08:2a:8c:43:e8:28:
                    5f:86:29:91:6a:1e:09:d1:e5:9f:e5:c1:66:4a:ef:
                    07:22:84:7c:92:09:e2:05:5e:7a:51:d1:5e:c1:01:
                    72:97:65:6d:70:62:70:2c:17:08:06:18:e0:c0:24:
                    51:61:d2:35:37:07:cf:2a:67:b8:18:fb:a5:a6:70:
                    ef:4b:b1:e6:d7:a3:0a:93:fc:d1:cc:43:7e:0a:7c:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:01:29:84:A4:E3:41:6D:E9:00:CA:61:47:E5:07:08:11:3F:48:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:97:34:c3:2e:18:de:2e:5b:e3:a6:38:f1:85:c2:97:25:03:
         2e:3e:16:10:97:0e:df:1e:a7:25:66:bd:f0:5e:57:54:52:a0:
         a2:e6:5a:ec:34:45:1d:21:8a:e9:4d:a8:02:ab:ae:27:53:e8:
         d8:51:c1:cf:07:a0:bd:10:9b:ff:eb:75:97:30:13:43:a2:5c:
         00:23:9c:f5:2f:78:69:14:d0:1a:77:79:40:0f:4f:6e:3a:8e:
         16:45:d9:a0:02:f9:82:0d:ed:87:3d:34:f4:b3:a7:8f:2b:af:
         dd:c9:20:17:74:cd:d4:8c:33:92:9c:1c:fb:41:83:42:f6:42:
         7a:ef:ed:39:4c:cf:f3:7d:b1:26:e8:ed:bb:a6:cb:71:6b:f5:
         70:95:4f:4f:f3:71:2b:6d:53:57:37:44:44:17:70:dd:dd:d3:
         ab:0c:c0:a0:7a:d6:28:8f:90:9b:51:e0:b0:db:3a:53:03:31:
         79:b3:95:64:0d:15:ef:53:81:90:01:fb:11:c7:40:60:68:19:
         07:ca:4b:24:0b:47:b5:e1:f4:f9:fc:7c:29:58:82:26:c0:d0:
         a4:c9:b7:c4:2a:5f:b2:b8:f4:ab:8a:13:78:e6:17:7c:c0:c9:
         ab:36:90:3b:f1:f5:f5:69:52:8c:f0:71:e7:83:a6:c3:d1:cf:
         9e:20:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:11 2025 by rpki-client