Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa
File:                     81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa (raw, json)
Hash identifier:          fMcpGqnJYwbA1llpWw5iij9N/frw6eQcfjXSMQAyPcI=
Subject key identifier:   3A:4C:A9:43:A6:56:93:3F:DC:30:45:EA:67:E9:39:F0:2D:2E:1E:E8
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849C20A09B0A766C47630B67720
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     32787
IP address blocks:        65.51.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:09:b0:a7:66:c4:76:30:b6:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f0c14cb2-17c9-4942-99b1-7c35c405fad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:93:8e:64:82:28:14:53:73:6c:37:28:6e:
                    16:9f:ef:54:71:85:cc:4c:56:98:a0:1a:08:7a:5b:
                    46:cb:9b:7d:35:bb:2c:3c:1f:35:57:e8:6f:d0:20:
                    98:fe:60:d4:b5:ed:77:3a:de:a1:e1:64:04:3a:67:
                    f7:96:72:27:39:70:1e:cd:65:dc:e3:b2:75:4c:0d:
                    80:24:9e:ad:4d:ac:c7:df:0f:3e:d8:17:6c:7a:00:
                    33:95:e1:a3:47:01:14:c9:93:b7:79:41:76:9d:72:
                    3a:80:cd:6b:50:7b:40:1f:e0:56:ac:e1:0d:fd:bc:
                    63:73:a2:03:ed:59:10:25:c2:c6:e6:f4:4b:0c:41:
                    c3:95:81:35:e6:7d:a3:2f:0e:f0:82:e8:24:8d:4f:
                    46:c0:5a:ad:0a:5c:1b:74:b3:75:5c:13:58:1a:5a:
                    a1:16:c4:91:8c:ce:6d:cd:5d:d4:1c:4a:70:5f:13:
                    9e:25:d8:90:34:5f:32:ce:3e:b8:8a:95:cf:17:c1:
                    ef:cc:14:e7:c0:64:26:cb:68:05:05:70:37:6d:e5:
                    3a:86:d9:64:c8:c9:4d:8f:e3:87:ab:bb:13:6e:0c:
                    45:3d:9f:90:a5:20:e1:f0:dc:f6:21:2b:d4:1b:35:
                    f4:c0:45:2d:00:4a:20:48:71:4d:d5:20:c2:83:3b:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4C:A9:43:A6:56:93:3F:DC:30:45:EA:67:E9:39:F0:2D:2E:1E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3e:21:66:57:64:69:bc:df:44:c9:7f:33:2f:dd:29:4f:f5:
         e0:16:c1:23:68:0a:6d:25:73:4c:18:74:91:92:06:33:e5:d6:
         56:1b:77:da:ff:a6:e8:80:3f:f1:9c:ea:c9:de:c2:9a:e7:46:
         0c:31:44:a1:85:2a:04:8c:1a:37:9e:92:fc:72:95:fa:89:6c:
         37:b3:20:dd:fd:a2:6c:64:5f:2d:eb:3a:e7:20:60:15:6f:6f:
         6c:38:20:16:9b:ec:f1:06:cc:5f:4d:34:b7:7d:63:f5:41:74:
         07:d1:92:17:e1:b3:9c:43:a1:77:99:b2:5b:cd:aa:58:bd:db:
         41:ee:bc:a5:66:6f:25:2d:33:04:8c:85:38:e3:15:94:4d:0d:
         64:29:7c:e2:03:33:38:c3:97:0a:52:46:cb:ae:6e:08:e7:d8:
         71:5a:64:46:f3:2b:6b:64:b5:58:38:ba:bb:4b:9f:c6:f8:03:
         06:72:62:54:a8:28:de:cb:53:d9:50:1e:08:e1:75:19:e7:5b:
         03:e8:ad:9d:6e:2c:28:e1:b9:a1:d1:51:73:f7:7c:48:3b:9d:
         ee:8b:b2:e9:59:ff:3c:b9:49:53:5a:3b:b7:5b:fe:40:3d:dd:
         84:63:05:ea:d6:e5:fe:db:55:c3:51:49:ea:0e:9f:ab:50:af:
         b5:91:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:45:32 2025 by rpki-client