Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa
File:                     e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa (raw, json)
Hash identifier:          EbC0iHTRGWuGpiMGCjz+ilPsu395jxJCmkhXTwBwLNs=
Subject key identifier:   B0:C3:0E:36:18:52:D7:FC:E3:59:3E:93:FC:8D:1F:77:65:4C:7F:C8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71116E0A049EE17C38A18B8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        104.31.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:16:e0:a0:49:ee:17:c3:8a:18:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=d6732aa3-41fa-4d25-8a1e-1d5d126b0d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:b8:54:ca:96:61:5c:2a:35:45:9c:53:0a:
                    fe:15:2d:57:cd:0e:b9:99:5f:48:11:61:26:66:d8:
                    5a:3f:a3:41:26:82:9b:a1:21:83:a5:a7:03:b5:97:
                    18:8d:cd:33:42:f9:0a:d4:0d:62:48:5a:6a:13:00:
                    03:ad:0e:83:4b:bf:04:a7:14:67:06:a6:f9:27:9b:
                    41:b8:af:8f:a2:ab:4c:ee:05:5c:2d:87:6e:cf:47:
                    b4:2d:f3:68:20:cb:a3:a8:5d:87:42:d1:8d:30:dc:
                    6d:38:e3:70:4b:35:44:53:df:03:f0:12:4f:33:bb:
                    87:ea:2a:c3:eb:df:0e:c4:7d:f3:4c:37:63:b8:61:
                    7e:69:35:d8:64:26:6f:8a:f2:75:60:02:13:cb:26:
                    73:8b:32:ce:35:f6:5a:32:35:7a:e4:13:37:47:42:
                    7b:1e:a3:e8:81:eb:a1:3f:78:8a:4d:b7:9b:c5:71:
                    e7:14:f6:95:b8:b4:a9:f2:34:05:94:b8:20:e1:9c:
                    69:90:a5:bb:d7:87:bc:a3:4f:d1:b0:5c:9a:4b:40:
                    89:5a:aa:84:cb:09:f9:b9:b8:26:e0:fa:40:cc:74:
                    a4:e4:15:a6:d8:88:32:90:61:5f:d8:cf:de:e4:ca:
                    e4:b4:b0:37:f6:e9:26:f0:42:74:e0:aa:48:46:ce:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:0E:36:18:52:D7:FC:E3:59:3E:93:FC:8D:1F:77:65:4C:7F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e08cb416-f279-3fb4-bcc2-9f749df02cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:61:e0:10:af:9d:00:8f:76:54:5d:93:f8:58:41:d4:aa:
         84:2d:29:05:43:0d:82:21:c9:45:b2:b1:ae:f7:66:67:51:c1:
         75:de:8d:06:d4:85:25:12:95:f0:2e:1b:06:7d:ec:3a:8b:3c:
         9c:3c:1b:7f:5c:fb:d6:f4:11:8c:30:cd:f5:77:07:6d:c0:61:
         2d:d2:08:af:38:b9:ad:22:07:03:72:7f:a0:ea:a1:b5:c0:4b:
         16:5b:38:cc:29:69:36:f8:26:78:41:21:2a:3c:43:e2:97:52:
         f6:95:7e:13:83:d8:b6:03:25:8e:2e:a0:c3:a8:ca:d8:31:2a:
         a2:74:78:e9:dc:d4:30:21:6b:46:fa:f6:2e:11:59:b5:df:5c:
         83:a2:38:2f:b0:03:30:fd:0b:56:5e:1b:01:e2:83:cd:7c:b7:
         2a:26:32:a0:46:7a:88:67:31:73:fb:05:72:f4:1d:cd:23:c8:
         ed:7b:e4:c3:a3:df:2a:7d:b2:24:32:57:e6:6e:66:67:d0:44:
         8b:ae:17:fd:f1:82:86:ea:55:46:c4:91:1a:ce:8d:c8:00:f0:
         b2:e5:43:84:a5:ea:fc:dd:53:5d:dc:f4:6b:86:b5:b1:c3:96:
         5b:39:d1:96:93:1e:52:7c:1c:24:5c:4f:b9:56:b2:b4:58:fd:
         7a:23:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:07:19 2025 by rpki-client