Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa
File:                     ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa (raw, json)
Hash identifier:          HPx5n89ceP53BN5cYmDNDSho0J7AxOE+v4Rjdr1WqX4=
Subject key identifier:   83:89:BF:DE:B9:58:59:D8:5D:60:45:E1:04:8C:C5:3D:D2:6F:C3:64
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A4B96562537B4F3934F270600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa
Signing time:             Tue 24 Jun 2025 07:29:18 +0000
ROA not before:           Tue 24 Jun 2025 07:29:18 +0000
ROA not after:            Mon 22 Sep 2025 07:29:18 +0000
asID:                     13335
IP address blocks:        104.23.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4b:96:56:25:37:b4:f3:93:4f:27:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 07:29:18 2025 GMT
            Not After : Sep 22 07:29:18 2025 GMT
        Subject: CN=e4580ac8-8f2d-4aa9-9605-627784df7f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:e6:30:7a:f0:8d:04:ed:d0:71:3b:a6:74:
                    d0:c2:f9:8c:4d:3c:5e:6c:b7:c7:36:b8:79:57:2d:
                    91:af:52:e4:97:65:5d:3d:1d:45:c0:a8:10:48:69:
                    4a:bd:1e:ab:7d:4b:e3:71:3d:e6:a6:d5:84:cc:7c:
                    c9:96:b0:b1:22:f3:e8:34:d7:f9:89:cf:b8:e0:06:
                    3c:fb:37:72:dd:ca:c8:1b:29:ea:b9:d8:6c:f3:3d:
                    1b:86:21:fd:bd:06:2e:84:9a:83:bf:c8:96:a6:1f:
                    53:b2:c9:8d:98:9d:1c:19:7f:db:a3:d5:51:bc:52:
                    3a:91:4a:a4:4a:3f:ad:b0:45:73:2c:eb:0d:58:9a:
                    85:ab:4c:a8:d2:99:91:07:e6:99:9b:88:3f:de:df:
                    40:00:c6:3d:e9:4d:1f:11:3c:ab:6c:2d:fd:a3:28:
                    72:24:79:6d:24:09:96:4d:24:d6:37:a3:d7:bb:a7:
                    5d:af:f1:d4:3e:11:72:5e:3b:8c:eb:16:9c:24:54:
                    74:0c:c9:d8:25:d3:a8:50:88:11:27:a7:dc:34:a3:
                    ef:b8:4b:34:66:db:93:eb:01:df:ac:05:22:6d:15:
                    3f:c0:a9:c2:a9:2f:07:de:d1:65:99:bd:f9:6e:08:
                    4e:2b:b0:b4:6a:15:8e:74:b6:44:6e:b3:9f:1a:74:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:89:BF:DE:B9:58:59:D8:5D:60:45:E1:04:8C:C5:3D:D2:6F:C3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:bf:7f:50:5f:c0:32:2b:8a:5c:e9:e4:57:a3:11:23:11:
         9c:c8:5d:56:8f:2d:b5:07:7a:e2:c0:4d:4a:29:98:dd:55:c2:
         b3:e2:97:a8:3d:38:81:1b:16:13:bb:a9:0f:18:c5:e1:65:90:
         d7:01:6b:77:a8:92:20:80:e7:bf:6a:20:76:76:14:74:ab:c8:
         60:93:92:30:90:47:78:c3:98:42:0c:da:bb:64:85:dd:8c:34:
         2e:76:c8:48:27:2f:1e:5c:fe:1c:dc:d7:d3:ab:e9:a1:7b:2c:
         cd:bd:11:58:33:cd:f2:be:09:07:42:bb:90:b1:b8:17:54:9a:
         80:8e:52:c0:d4:c5:11:2a:05:26:e0:ce:46:94:48:3f:93:65:
         87:28:98:5d:44:e7:c9:6e:d4:b4:30:fc:ea:2f:33:2e:9b:2b:
         29:5e:1d:97:ed:fc:cb:8b:88:f5:48:09:1d:ad:f8:b3:9e:b3:
         ec:3a:d7:35:71:63:a6:8e:90:5f:be:5b:83:45:68:8a:52:c5:
         69:a0:a1:7f:2e:5b:18:7a:15:f7:dd:e7:bd:cb:52:00:70:ad:
         99:75:8d:74:50:30:1d:43:5b:2c:2b:44:e3:1d:ea:6c:2d:69:
         24:20:01:e5:42:4b:4e:73:0f:cf:73:68:57:a6:3f:6c:fe:85:
         18:24:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:00:09 2025 by rpki-client