Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91fcac8-b58c-3cf6-9140-721754e0a941.roa
File:                     f91fcac8-b58c-3cf6-9140-721754e0a941.roa (raw, json)
Hash identifier:          /GKyt+An3bV2p8w2Ljb2xSBHowmPNQl9K9qnjBIHshU=
Subject key identifier:   0F:21:62:2D:FD:A0:A1:44:56:B9:BF:87:1F:B3:D0:82:BA:49:D6:B6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8767B1AF9FD771842EE4080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91fcac8-b58c-3cf6-9140-721754e0a941.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     202623
IP address blocks:        104.23.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:7b:1a:f9:fd:77:18:42:ee:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=7da4cf09-d6bd-4eb0-b742-995d334ff80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:49:b5:9e:ab:cc:c3:11:09:d8:de:54:e7:
                    f4:f3:f6:7a:b1:c9:d5:30:0a:b2:4b:6c:a4:5b:23:
                    29:3d:a1:51:48:29:95:53:68:44:c8:df:0d:de:4d:
                    bd:bc:7a:a0:42:d6:17:6b:3c:63:11:06:62:e2:2f:
                    ac:6f:eb:05:69:29:6e:ee:98:5f:7a:10:01:d4:37:
                    4f:90:b1:35:ea:fe:2f:c5:d4:d3:35:93:16:35:1a:
                    d3:c0:51:71:58:1f:ae:cb:17:15:a7:db:e4:c7:1b:
                    49:d6:97:7e:fa:c4:b7:ca:0e:60:c2:a0:03:27:23:
                    a5:da:1b:94:bb:9d:db:32:55:6d:d5:3c:de:f4:03:
                    d1:73:07:43:bc:db:c8:2c:cb:93:84:e3:4d:87:a0:
                    d0:06:16:c4:26:81:8c:86:86:d4:29:bc:98:ed:1f:
                    75:1f:3f:b5:0c:fd:16:e2:fa:99:e5:1d:bf:66:99:
                    f1:45:bd:17:79:c9:6e:73:c1:86:4a:b8:e7:a9:4d:
                    06:e5:77:64:f8:ee:55:52:84:d0:77:5e:45:92:fd:
                    d2:88:40:ff:61:20:c9:59:75:24:49:4c:cf:ee:76:
                    e7:ba:d9:fd:00:ed:48:58:f9:17:58:9e:4a:91:9e:
                    b7:27:64:f0:de:3c:bc:cc:de:a9:c7:e1:2c:48:fb:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:21:62:2D:FD:A0:A1:44:56:B9:BF:87:1F:B3:D0:82:BA:49:D6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91fcac8-b58c-3cf6-9140-721754e0a941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:0c:62:47:62:5f:b8:5e:72:e0:46:5d:b1:3a:d3:0f:f1:
         e9:d0:07:6e:2a:d4:28:f3:2e:7f:68:80:71:df:32:ed:ed:d2:
         5f:19:05:bf:23:21:d2:28:39:ef:ac:70:2f:04:67:3a:ed:a4:
         ef:70:67:8e:73:09:b8:1f:b8:f2:d2:d1:7e:c7:9d:6c:ee:bc:
         12:68:9c:1f:30:4f:4d:e5:d5:c4:11:c2:2b:e0:2f:be:ab:54:
         05:60:00:fa:d1:f6:d9:0e:1e:b6:c5:a4:b1:b7:10:9b:c3:39:
         f2:99:c3:de:d1:aa:c4:eb:5b:84:70:ea:3d:3e:ff:31:b5:a0:
         35:41:4e:88:fb:5c:b9:50:4f:70:e4:33:bd:a7:d2:61:f7:83:
         bc:b6:6e:9e:40:1b:2c:36:66:21:5e:97:62:d6:d9:e0:b9:8e:
         b6:52:5c:56:d1:61:e6:62:54:3d:48:91:05:0f:4a:e3:60:2e:
         0e:db:54:51:b2:88:bd:88:3b:e2:95:65:68:bd:83:dc:07:55:
         53:43:00:5e:4c:7c:70:79:d2:8d:c1:08:16:cc:7a:d9:f3:f4:
         51:94:b3:13:3b:fc:c3:8b:03:2c:5c:30:a9:1d:ab:84:5a:04:
         3b:3d:dd:3f:bc:99:dc:78:45:6e:90:ff:8e:32:99:93:ce:c2:
         39:a5:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:13 2025 by rpki-client