Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c889e635-5925-3721-817b-934d1eb399a8.roa
File:                     c889e635-5925-3721-817b-934d1eb399a8.roa (raw, json)
Hash identifier:          rCEAhiybDshyHkv9N8TetKRwIvcDoK2tS7hM10BNNHk=
Subject key identifier:   A5:EA:AE:36:8D:3F:1A:E4:2D:F1:74:E2:D1:BD:A6:41:86:F2:29:1A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5AB9E685E641D16808111D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c889e635-5925-3721-817b-934d1eb399a8.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.26.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:9e:68:5e:64:1d:16:80:81:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=c4d2f8ce-8acc-4fc8-bda6-030dfc2f0df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:2f:e2:c4:70:aa:65:83:42:27:ad:86:89:
                    1d:36:b6:6b:ed:29:ff:ff:27:a6:8e:6e:88:41:41:
                    d9:96:53:e5:53:12:ac:91:b7:c7:94:cb:98:28:76:
                    6d:d1:99:10:f3:79:1c:92:23:81:74:91:50:b9:3b:
                    a4:81:0a:79:49:20:be:4c:c2:9b:3c:27:64:e8:39:
                    29:ae:3c:82:40:58:2c:06:25:e8:53:86:3b:1f:46:
                    9c:3e:b3:05:b6:2f:2b:1f:5f:d5:bc:10:56:62:9a:
                    ee:a4:1f:7c:bc:63:c4:03:98:82:f9:c0:a2:e8:59:
                    db:77:c9:34:0b:40:60:7d:3c:4a:fb:e8:b4:dd:1a:
                    10:e0:6f:3f:66:30:9b:5f:5c:76:7c:3c:1b:55:6b:
                    95:50:f4:a4:d1:40:92:1f:7d:0c:fb:e8:7b:e2:36:
                    52:5f:b6:95:88:64:f0:51:fa:43:81:a6:23:25:83:
                    6f:2f:67:37:8b:ca:c1:88:1f:99:3e:9b:a1:d1:db:
                    cd:87:72:6a:a4:7f:8a:7e:d5:c4:0f:63:10:33:59:
                    76:67:a8:df:ae:c1:a3:e7:6f:ec:3e:fd:ab:f9:90:
                    c9:11:00:e3:4b:ff:b2:91:62:65:5f:54:0f:b5:54:
                    d5:ce:da:49:0e:0d:09:77:cf:10:33:ff:56:b2:1c:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EA:AE:36:8D:3F:1A:E4:2D:F1:74:E2:D1:BD:A6:41:86:F2:29:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c889e635-5925-3721-817b-934d1eb399a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.26.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:25:74:96:83:17:f5:af:0f:ec:d1:68:b6:25:34:9e:8e:
         78:ad:dc:30:44:e5:a0:86:c1:bf:08:2d:e4:12:29:57:68:c8:
         fb:e8:65:a2:17:b2:72:e9:54:1f:47:00:68:c4:cf:e2:1f:d0:
         2a:46:6f:7a:05:a3:fa:9a:2a:22:31:8b:f5:11:98:86:7e:32:
         0a:81:be:44:4d:66:99:1a:53:f8:f0:c7:93:de:54:b3:71:a1:
         a5:14:bb:a0:b4:f4:53:a8:57:d2:9f:1e:a2:fb:93:d9:9f:ad:
         e9:a1:68:45:d4:bc:73:4d:eb:3e:80:48:da:39:cc:78:f1:16:
         34:da:1f:ea:1e:35:37:1c:ad:3b:13:ad:49:ba:64:0d:22:4c:
         ba:57:48:4c:4a:f6:4e:b0:a8:d7:8c:97:64:11:80:ba:3c:74:
         72:8c:84:79:9b:e6:f0:48:59:2c:30:4b:52:d0:bf:56:57:3c:
         b7:90:25:13:10:b3:fc:d6:2a:1e:55:71:19:90:66:6d:22:e0:
         cb:1e:70:4e:35:11:f0:57:e0:37:e6:b0:4b:6c:a3:c8:b5:58:
         34:ad:1d:8e:ed:98:10:a2:d1:ec:af:7a:13:da:e7:8b:d6:f0:
         65:ec:5b:1f:bd:d6:53:81:7f:e5:d1:93:d5:bf:56:61:a3:c2:
         9a:60:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:19:05 2025 by rpki-client