Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/581c9325-a180-394a-8444-ab6acf0a1d82.roa
File:                     581c9325-a180-394a-8444-ab6acf0a1d82.roa (raw, json)
Hash identifier:          /4dtBaf/ZO1aM+ad6eJf+UnuhHTfYBqMFUGNu1RADCc=
Subject key identifier:   9A:70:A7:C8:5F:03:03:C9:29:28:6A:19:F3:54:EA:BD:B4:84:8C:9B
Certificate issuer:       /CN=e519acb1-261c-469d-b558-dbea832c8dbc
Certificate serial:       010D0C9F4328584B2A2C28A82D55B7998B94DC00
Authority key identifier: F5:FC:0E:05:B5:53:55:64:23:41:98:3B:CD:8B:64:6C:7D:57:ED:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/581c9325-a180-394a-8444-ab6acf0a1d82.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     32281
IP address blocks:        192.82.50.0/24 maxlen: 24
                          209.209.104.0/23 maxlen: 24
                          2604:e740::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/e519acb1-261c-469d-b558-dbea832c8dbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/e519acb1-261c-469d-b558-dbea832c8dbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:28:a8:2d:55:b7:99:8b:94:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e519acb1-261c-469d-b558-dbea832c8dbc
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=ebb0e762-ee86-450b-a467-10d068f1be0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:42:a4:e4:e8:b3:bb:da:62:ef:dc:ec:a2:
                    91:77:90:39:ca:c4:ae:b6:60:76:37:26:b8:7e:42:
                    07:30:76:4a:2a:39:67:ed:21:9e:8a:a0:1c:70:73:
                    5d:be:af:60:1b:8c:70:37:75:07:7a:66:b2:cc:57:
                    f9:a7:2a:d4:a1:d7:6f:3e:7c:fd:fc:f4:8a:6e:98:
                    b5:67:21:17:60:8e:f4:cd:43:a1:51:93:13:50:0b:
                    c1:10:60:fc:f7:e0:20:a6:91:86:d4:d7:49:d5:4a:
                    9b:7a:b1:69:de:6f:b6:a0:93:18:4b:bb:4e:4e:d4:
                    7f:94:ca:43:c8:a3:27:d3:a8:ad:e7:5a:6f:e1:b5:
                    ef:0f:20:c8:73:71:37:d1:17:f5:1a:de:ac:1e:af:
                    9a:78:12:c4:62:bb:25:2d:4c:8b:75:bf:40:5d:c5:
                    9f:4e:de:f3:30:98:54:c9:df:ea:9c:2f:ef:b7:20:
                    45:a3:22:53:06:a4:15:32:e6:d9:57:88:8b:b6:15:
                    81:73:db:95:f1:76:4a:0a:3d:73:c7:39:d6:e1:98:
                    8e:45:27:79:fe:4b:2a:73:19:fc:f0:4d:8c:79:08:
                    f5:4f:3b:ca:5b:78:50:9d:30:2f:6e:2b:ab:50:86:
                    26:86:31:64:f1:26:fc:da:73:7c:12:e1:94:55:a4:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:A7:C8:5F:03:03:C9:29:28:6A:19:F3:54:EA:BD:B4:84:8C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/581c9325-a180-394a-8444-ab6acf0a1d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc/e519acb1-261c-469d-b558-dbea832c8dbc.crl

            X509v3 Authority Key Identifier:
                keyid:F5:FC:0E:05:B5:53:55:64:23:41:98:3B:CD:8B:64:6C:7D:57:ED:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e519acb1-261c-469d-b558-dbea832c8dbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.50.0/24
                  209.209.104.0/23
                IPv6:
                  2604:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:13:c5:ca:82:c7:8f:90:22:ec:4a:08:6f:b9:d9:db:22:
         03:1a:71:51:a0:9e:5e:73:b6:82:51:4a:57:e3:f3:43:cb:42:
         1e:4d:da:2d:81:9d:52:ae:10:5a:74:60:ce:58:c5:2b:73:46:
         7a:80:b3:5d:9e:10:5a:65:3d:7a:47:4a:a4:7a:9d:32:17:18:
         45:10:04:e8:ad:65:e0:a8:c6:26:db:d5:d6:ad:bf:ca:8c:19:
         bf:77:87:fd:b8:85:fe:3b:ed:d5:18:41:0f:5f:46:9a:5f:c0:
         00:ee:31:9c:db:71:58:41:28:1c:e7:33:49:b7:d0:82:c8:76:
         9c:5d:aa:ab:6e:39:ad:9e:22:0f:f5:52:a9:11:2a:11:cf:6a:
         0a:2c:df:ad:f9:5b:9e:73:6c:16:ab:69:16:06:1c:99:5a:73:
         44:8d:94:b1:e1:ca:57:32:7b:69:ec:b6:cb:6d:7f:d5:e1:1c:
         df:99:f6:e6:1c:bc:a2:6b:13:da:ce:b8:99:dc:10:2f:54:19:
         95:a7:16:a6:39:70:91:5f:a5:5c:d1:fb:8b:6c:f7:dc:16:aa:
         ff:01:c5:d2:bf:a2:62:e3:e3:4e:ab:73:82:dd:b0:ae:50:ed:
         2d:71:ab:77:a3:bc:1a:64:3a:95:0f:21:46:6e:af:1a:58:73:
         b5:50:b6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:15:10 2025 by rpki-client