Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee5f00bc-7dd2-348d-aa4e-f1f5a391da66.roa
File:                     ee5f00bc-7dd2-348d-aa4e-f1f5a391da66.roa (raw, json)
Hash identifier:          u3gEX9856fcpBDz2TxEPwBi4PiJAePpK9s0ozu5Xbg0=
Subject key identifier:   A5:CD:11:0E:73:6F:B0:6C:B5:EA:8B:3D:D5:96:F4:6C:38:BE:AE:A0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC24CC5CFBD93EF767840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee5f00bc-7dd2-348d-aa4e-f1f5a391da66.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     54288
IP address blocks:        65.19.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c2:4c:c5:cf:bd:93:ef:76:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=64375da8-faa7-449e-95be-d066ceb7e944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:5f:3d:80:59:1b:29:5b:ca:03:6a:2f:3b:
                    d7:8c:25:51:11:98:f5:6a:f7:58:f1:62:a3:13:ae:
                    9d:10:30:dc:0e:e8:14:b1:7e:ad:80:c2:4e:c8:f6:
                    43:3b:eb:95:e6:20:cf:0d:54:4f:dc:82:8f:d0:50:
                    a5:ca:2e:a7:1b:9a:3a:ec:04:08:8d:f3:18:c6:35:
                    99:ff:32:a6:da:1e:75:e7:fd:99:cb:90:bf:93:1f:
                    f1:ac:a4:23:7a:d7:30:7e:e1:70:40:ab:88:33:03:
                    d4:21:36:a4:b4:3c:ea:aa:6e:4c:b6:08:1f:d4:ba:
                    2a:4d:0d:e0:e1:e3:a0:d5:22:4c:f9:11:aa:fb:fc:
                    f6:9e:7f:a2:8a:71:ca:a5:ce:cd:9a:96:a3:95:04:
                    d3:4f:5f:71:11:3c:f6:f6:57:f5:4b:9a:c5:45:68:
                    98:c7:89:d4:1e:c8:4a:ed:e4:19:31:19:3c:16:99:
                    79:65:79:83:96:69:64:9e:87:9a:76:c9:b4:e0:f3:
                    85:81:72:92:39:f0:a7:46:e1:0b:9f:b5:dc:04:a5:
                    50:49:71:09:e7:f2:7e:ae:fd:13:34:3e:78:66:7b:
                    ac:97:30:c2:9e:65:45:d5:ca:5f:f4:49:ff:b6:ee:
                    03:3a:e0:bc:8b:ae:6c:56:34:01:bd:a3:d8:18:a6:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CD:11:0E:73:6F:B0:6C:B5:EA:8B:3D:D5:96:F4:6C:38:BE:AE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee5f00bc-7dd2-348d-aa4e-f1f5a391da66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:8c:4f:86:4c:45:18:f1:a4:fd:88:d6:d8:0b:5d:09:be:
         08:7c:81:2d:9d:1f:f5:00:2d:05:2c:7f:41:1a:34:1b:46:df:
         53:58:21:66:1e:f7:f8:ac:ec:84:4b:24:40:0b:6c:88:25:be:
         4e:d3:01:4e:7c:d7:13:13:ad:3e:4d:0b:c8:00:31:5b:08:72:
         1f:09:19:c8:71:f7:99:9c:f5:5e:ae:a2:c6:70:b3:b6:a1:25:
         13:15:e6:93:7a:66:65:e0:72:bd:6e:08:c5:a2:67:3a:4b:f3:
         d7:cb:14:fc:1f:6d:ca:71:d5:d1:f3:23:b3:f9:82:d0:32:47:
         25:26:45:03:1b:75:ea:52:7c:e8:7b:f4:67:0d:f7:e1:63:82:
         e3:bf:42:74:16:e3:e4:97:9c:39:7c:43:44:2f:03:74:9e:82:
         f1:92:84:3c:88:cc:5e:32:a5:9a:35:0e:d8:48:c4:03:59:40:
         c2:a5:95:13:b8:bb:57:5b:7d:de:84:25:82:0a:ab:95:bd:5d:
         fc:0c:e1:db:9b:1d:22:7a:d6:8c:f5:cf:f1:e6:71:66:4f:18:
         7c:f5:3d:80:ef:99:68:56:6f:79:d4:8a:fb:5f:bf:9a:bf:0b:
         9b:3a:27:d8:e1:ca:e6:f2:96:d9:fc:aa:16:16:11:29:f9:6a:
         25:19:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:23 2025 by rpki-client