Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/581c9325-a180-394a-8444-ab6acf0a1d82.roa
File:                     581c9325-a180-394a-8444-ab6acf0a1d82.roa (raw, json)
Hash identifier:          JvJVxCiTtCPPcm61m0KnsqDZbwBF343P4jIA9YVexdA=
Subject key identifier:   B5:E4:3E:C8:5F:97:4A:6F:6B:3E:14:F0:B2:81:57:BB:A4:AC:EA:1E
Certificate issuer:       /CN=e519acb1-261c-469d-b558-dbea832c8dbc
Certificate serial:       010D0C9F4328584A4970630BB75D3AF338A0B620
Authority key identifier: F5:FC:0E:05:B5:53:55:64:23:41:98:3B:CD:8B:64:6C:7D:57:ED:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/581c9325-a180-394a-8444-ab6acf0a1d82.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     32281
IP address blocks:        192.82.50.0/24 maxlen: 24
                          209.209.104.0/23 maxlen: 24
                          2604:e740::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/e519acb1-261c-469d-b558-dbea832c8dbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/e519acb1-261c-469d-b558-dbea832c8dbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:63:0b:b7:5d:3a:f3:38:a0:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e519acb1-261c-469d-b558-dbea832c8dbc
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=c4f29466-bb1f-4d90-99c8-2d8f42d53b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:de:46:5f:b7:38:bc:89:53:d2:65:fa:7a:
                    d2:f2:5d:ef:60:02:00:41:31:05:7d:44:86:d7:64:
                    6a:69:29:17:ed:27:9d:93:a3:24:ae:f1:0c:2d:c6:
                    d4:44:0c:ca:5e:dc:98:f3:2a:dc:c0:0e:c5:29:97:
                    9a:f3:06:34:31:d1:21:34:0e:74:96:8c:51:b8:11:
                    40:0b:15:08:62:21:68:70:f5:71:6e:96:04:b7:38:
                    d7:fe:61:fb:86:ea:c7:11:29:04:34:3e:9f:34:17:
                    ca:61:70:59:1a:0c:a8:1b:94:d2:7f:d8:3f:df:99:
                    20:e1:a1:f7:0b:7c:4f:91:25:a6:ab:60:8c:f5:bb:
                    9b:da:46:20:50:fd:0d:c0:81:c2:24:1f:b4:19:2e:
                    c3:b4:72:f9:b6:25:bc:e1:9f:7b:b0:50:e5:3b:f0:
                    f4:c6:1c:24:9a:7a:73:b4:04:67:67:02:f6:6d:2d:
                    ad:3b:7a:56:37:bd:86:79:de:b4:22:96:db:40:53:
                    8a:8e:2f:fb:07:4c:20:2f:b8:0e:56:4a:84:20:a0:
                    1e:b3:3d:8a:39:54:ab:89:0d:02:32:68:a2:9b:f4:
                    63:b8:06:d9:2d:89:33:d6:57:dc:92:75:3b:15:36:
                    53:42:4c:62:46:ae:7f:b8:e7:6f:07:07:37:78:7b:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E4:3E:C8:5F:97:4A:6F:6B:3E:14:F0:B2:81:57:BB:A4:AC:EA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/581c9325-a180-394a-8444-ab6acf0a1d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/e519acb1-261c-469d-b558-dbea832c8dbc.crl

            X509v3 Authority Key Identifier:
                keyid:F5:FC:0E:05:B5:53:55:64:23:41:98:3B:CD:8B:64:6C:7D:57:ED:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.50.0/24
                  209.209.104.0/23
                IPv6:
                  2604:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:a5:5c:85:49:bd:8c:aa:64:c5:7a:29:33:5f:d1:b6:2c:
         ea:2b:ed:24:9b:c9:9c:34:58:b2:f5:7d:63:1b:e8:10:4f:a4:
         06:5b:07:82:cf:65:55:d7:57:3f:e5:ff:fb:64:29:80:27:a1:
         28:af:c1:0e:68:33:cb:cb:3f:d3:4d:6a:14:38:0f:07:86:a9:
         f1:69:65:1a:ed:ba:00:8f:59:0b:e0:ae:88:37:16:5a:e4:44:
         54:4b:30:7d:ba:9b:22:6c:66:42:28:1b:e9:32:fe:a1:30:04:
         4c:55:c8:29:d9:78:a1:d3:fb:b4:9c:33:b2:cd:86:a0:57:a4:
         87:08:32:94:04:93:3d:bc:da:48:dc:de:4e:51:cd:c0:5d:4d:
         f5:7f:4e:65:f6:ab:92:7e:9c:08:13:6d:d4:ad:a8:2b:f9:84:
         a4:b5:b3:57:cb:cb:c3:23:00:f6:00:b1:b8:23:4e:04:2e:b6:
         27:81:2e:3d:22:bb:dc:5d:bf:a6:59:44:39:e4:1a:b6:99:92:
         ba:1f:d0:25:e0:bd:bf:c8:ec:f7:d4:0a:c7:5b:a6:2e:ef:84:
         19:f6:e9:d3:87:8b:f2:53:b6:99:a1:f1:97:11:cc:52:15:4a:
         be:c5:55:e5:4f:c3:9e:70:0d:86:4e:2f:5c:09:e0:ea:6a:06:
         97:3a:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:16:42 2025 by rpki-client