Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa
File:                     2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa (raw, json)
Hash identifier:          HUdJCWqVgcEixY3SOoI2KEdLIATCqISNqTGwuYGfKdU=
Subject key identifier:   2A:64:29:7F:C8:62:5B:E7:18:7A:D3:3C:35:D8:45:2A:10:40:37:05
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A78E5F74D30ECA50FDE63C400
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     36007
IP address blocks:        209.182.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f7:4d:30:ec:a5:0f:de:63:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=586bc664-d1ce-455c-b983-7437c9e0a883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:9a:e6:86:a5:63:6b:78:08:16:3e:ea:61:
                    b6:03:e2:49:13:8e:d1:b6:a9:98:91:0d:7d:5e:8b:
                    52:92:0d:b5:2e:03:04:53:17:29:00:15:c8:5e:9b:
                    dc:d5:64:96:ad:bc:5b:6a:bf:19:9f:d3:d3:35:2a:
                    f5:ce:43:a4:48:ca:09:38:52:f2:4f:1d:0c:ce:cf:
                    69:47:3b:58:97:11:8d:20:34:7c:8c:8f:f7:0a:4d:
                    6a:85:63:5b:90:83:c1:57:35:71:13:ca:eb:0b:71:
                    8c:7a:4b:63:83:7d:ba:a7:df:e3:7f:f0:16:27:91:
                    50:2f:13:d4:3a:00:d9:43:c2:fc:c2:47:1a:f2:7a:
                    26:16:8e:9c:b6:80:32:4d:34:54:8e:57:67:bd:e9:
                    88:1f:bc:ed:2a:79:6c:c0:75:8f:4a:d3:60:ec:41:
                    c2:f8:47:ee:f4:72:b0:f2:60:3a:e3:a7:8c:10:26:
                    0c:50:f0:a2:fd:1f:79:97:89:5a:62:2a:28:7e:46:
                    9f:5b:c5:d9:4e:56:b1:47:c9:e1:e4:62:47:92:a4:
                    18:70:62:3c:6e:d8:8c:1a:18:eb:18:c6:3f:41:92:
                    a4:c5:58:35:b3:14:6b:99:40:18:a4:0d:57:57:c4:
                    eb:a9:4b:3f:7c:ce:5d:ad:14:c3:d5:46:a9:34:4a:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:29:7F:C8:62:5B:E7:18:7A:D3:3C:35:D8:45:2A:10:40:37:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2c51a7fc-3a18-3da6-a218-e69ba6f00410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:68:36:6c:e8:c6:71:a7:c0:0e:6d:aa:85:a4:37:19:6c:98:
         b1:d6:83:87:0f:1a:d8:b2:5e:28:b2:2d:8d:fc:e4:f8:ed:66:
         da:80:d8:46:b5:ff:9b:ab:2f:46:7b:c1:d5:47:02:42:3c:e8:
         39:82:77:31:58:dd:70:18:da:52:30:af:23:85:08:64:91:f5:
         f6:d8:35:3d:c1:79:e9:29:0b:52:62:99:d9:69:09:28:1c:dc:
         ec:d2:9d:cb:f1:bd:94:66:77:52:54:c8:1f:ad:51:aa:8a:9f:
         40:dd:63:5a:3b:d3:f4:b8:4a:07:32:1a:7a:41:0e:6f:77:f6:
         86:4e:4a:84:1f:3c:74:8d:7c:aa:37:10:46:ae:a9:2a:4a:7e:
         0a:60:aa:23:18:a1:bd:33:aa:5d:66:a7:e1:2e:be:5c:33:df:
         71:4a:0d:1a:55:4c:0a:7d:b5:a2:3f:60:a5:d8:8d:ac:ba:93:
         c8:eb:ae:07:1a:a7:de:3b:d1:81:5c:03:6e:f5:87:91:11:66:
         3a:f0:12:d0:49:43:50:3b:25:69:0e:5d:ba:02:9d:ca:c6:bd:
         d8:63:10:30:73:66:ef:b7:84:c2:03:e5:21:a2:73:2d:25:6a:
         90:00:b7:07:2c:08:88:df:62:e2:78:7c:bc:96:e2:bb:ce:2e:
         18:f5:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:33 2025 by rpki-client