Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa
File:                     ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa (raw, json)
Hash identifier:          PUoF6MQ6JPsomE9Kf5lS+RZj4+9HiOjwqcRxMsV43VY=
Subject key identifier:   73:9B:D8:DF:48:E8:DF:83:C9:8E:86:18:70:FB:9F:6B:63:DE:95:B7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA37F14857628C281A300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        104.16.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a3:7f:14:85:76:28:c2:81:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=c220efa0-7e88-44a6-9d3f-106a4c5f49a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:6c:84:72:b4:4d:53:12:5e:33:8c:25:77:
                    ac:6e:2b:5f:47:dd:16:4b:42:f1:69:de:71:fa:a5:
                    bc:a7:ce:97:ad:65:57:aa:c3:cc:aa:04:f1:e4:ea:
                    c5:db:6b:27:f7:e9:6c:67:a0:54:5f:2b:ca:d8:6a:
                    4d:1c:66:4a:ab:4f:36:46:01:d6:9c:af:9b:29:dd:
                    53:c9:4c:cf:a3:e0:dd:3f:48:c0:45:71:d4:7a:18:
                    db:81:af:b5:77:38:fc:f5:bc:13:81:a4:32:eb:8b:
                    b8:02:34:fd:07:98:5f:76:ce:23:5d:55:7d:d6:03:
                    1c:81:89:f1:67:5c:bb:48:8f:7d:0d:b4:86:ec:02:
                    b5:04:73:3e:86:76:80:d7:f5:f3:85:9a:35:ef:1e:
                    df:74:7e:81:3c:c3:07:91:18:2b:46:77:33:75:92:
                    88:c9:0d:75:96:5e:18:4b:cc:32:84:bc:14:a2:e4:
                    de:b0:5c:d3:95:dc:47:25:f4:ec:7f:bc:e2:64:41:
                    c1:9e:c6:89:a3:b0:54:66:f9:d8:f8:2e:de:c9:64:
                    60:f3:a0:cd:32:de:9f:a3:e8:8e:56:aa:0a:e9:ee:
                    b2:8b:b4:de:de:88:7a:4c:a0:7a:12:b4:d2:51:7e:
                    27:f5:bc:1a:ae:08:c3:5e:6e:36:59:e5:f3:d8:86:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:D8:DF:48:E8:DF:83:C9:8E:86:18:70:FB:9F:6B:63:DE:95:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:bb:3c:83:c3:83:74:c1:6d:f5:65:2b:79:50:f5:6a:62:24:
         15:3a:be:c7:80:a5:bc:46:bb:3d:b4:44:b4:86:37:4d:06:af:
         be:7f:15:d4:0d:27:61:8e:28:8d:ac:58:aa:1c:c4:44:b6:ab:
         53:71:aa:f1:94:2b:95:dc:19:4f:d0:f6:e2:7e:ed:86:06:65:
         04:2b:db:00:8a:a1:16:5d:a7:fa:d9:f3:35:fc:22:95:09:45:
         c9:fe:55:e7:77:36:a8:e0:84:6a:f7:e0:24:8a:94:13:c8:8a:
         3c:84:ba:76:27:8c:e8:3b:2a:6b:7a:fb:8b:50:de:a6:79:fc:
         4a:b2:3e:17:95:71:d6:68:1c:27:de:6d:ae:ec:81:dd:36:e0:
         1b:6b:b7:ed:40:6c:6e:69:9b:cb:19:3e:f3:a8:df:11:67:80:
         2a:fc:87:31:cd:df:be:b1:fc:af:a0:4c:ff:c1:42:12:a0:91:
         3a:5b:06:7e:5b:54:fd:40:35:5e:44:98:31:95:84:2f:12:53:
         f2:9a:92:64:52:f5:fa:c5:6f:30:8a:1b:fa:27:71:24:cf:d8:
         27:a3:39:6e:44:be:e9:19:20:f3:31:82:80:a9:6a:82:7a:00:
         4d:33:38:af:0f:37:ea:84:63:be:55:51:e1:c5:61:52:cd:ce:
         e2:86:a1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:46:22 2025 by rpki-client