Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/81d363bc-e579-390b-a114-750e03764138.roa
File:                     81d363bc-e579-390b-a114-750e03764138.roa (raw, json)
Hash identifier:          14KDWlqyCdWvTO15kau6Q38D+feoEUX0q85w9Faiy2U=
Subject key identifier:   4F:75:EC:C5:63:39:AA:92:B7:D9:CD:A9:47:D3:03:A8:5B:4F:D8:05
Certificate issuer:       /CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Certificate serial:       010D0C9F4328584A093AA2CE88768E71BCDDA070
Authority key identifier: ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/81d363bc-e579-390b-a114-750e03764138.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     31867
IP address blocks:        23.149.192.0/24 maxlen: 32
                          162.213.130.0/24 maxlen: 24
                          2604:7c40::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a2:ce:88:76:8e:71:bc:dd:a0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=ef2cd400-9683-4c66-8af6-6861cec4c829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:fb:b8:16:03:46:fa:0a:d9:2a:24:bf:a7:
                    01:35:0e:5f:e8:e0:48:b3:83:6f:9e:c9:09:40:ce:
                    06:4f:ab:aa:37:f1:bb:43:6e:1c:f7:06:f7:0a:47:
                    f0:c3:3f:42:ef:37:64:c8:ca:ae:65:bd:96:49:63:
                    08:e9:54:3b:42:51:81:f7:89:30:10:01:b6:dc:be:
                    aa:34:65:2f:4e:77:22:15:a2:bf:8a:b5:02:f2:f8:
                    b8:47:6e:99:ac:03:69:1f:d9:55:5d:67:3e:76:70:
                    19:c1:12:74:4f:78:d5:f9:b0:8b:3a:cc:b0:89:be:
                    d1:71:16:06:70:0f:b9:78:ac:5a:fb:5f:7b:8b:ed:
                    ac:88:93:2b:75:69:c7:94:68:2d:c2:4b:2f:2f:1d:
                    44:e6:89:55:43:f6:1e:3a:98:12:6b:cb:83:01:6e:
                    6a:2c:a6:70:d3:99:ca:ae:9d:c8:62:94:3a:43:09:
                    0f:8f:66:ce:ee:54:86:9a:3e:40:89:89:1e:4a:a0:
                    45:c8:60:8c:32:88:69:e5:4c:61:e6:45:ff:ac:32:
                    f9:47:f0:73:c0:d1:08:13:dd:5a:99:43:52:bf:05:
                    5e:90:96:61:26:5a:c5:99:75:6d:4a:b7:20:94:fc:
                    a1:6b:bb:63:ac:93:41:62:a0:48:40:06:66:f1:69:
                    a1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:EC:C5:63:39:AA:92:B7:D9:CD:A9:47:D3:03:A8:5B:4F:D8:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/81d363bc-e579-390b-a114-750e03764138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.192.0/24
                  162.213.130.0/24
                IPv6:
                  2604:7c40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:51:d8:bf:7b:7b:0d:59:d9:4e:5a:ea:85:ae:8d:a3:3c:94:
         08:03:47:42:cb:c7:21:b2:35:6a:8d:9d:eb:43:45:da:b8:7d:
         5f:e0:9b:8b:46:3c:8a:0e:2f:5a:32:30:3d:1d:7d:00:e6:50:
         f6:11:41:d5:68:51:d4:19:71:7a:5f:ca:d1:7d:6c:56:c1:6a:
         e6:18:21:ba:96:b7:33:be:b2:eb:74:00:1f:7c:93:6d:ec:2a:
         e4:f8:3b:24:d4:e0:36:8a:c6:3e:d8:b7:86:9f:9f:f2:d8:c8:
         39:c4:71:04:7e:34:f4:3c:7b:37:20:b1:5c:a8:4e:8a:55:41:
         f4:82:8f:ac:c9:2b:47:3a:e6:44:9f:94:50:e6:3b:fd:86:97:
         d8:11:01:20:9c:b5:b0:3f:02:c4:4f:b7:d4:8c:da:7e:a3:23:
         ed:72:1e:6d:7a:2b:31:63:43:6d:58:d6:8b:1b:74:2c:d1:e7:
         07:fe:db:f8:25:4d:cf:0a:4f:25:7b:5a:95:a7:c0:c1:cf:e6:
         84:db:c5:7d:f3:db:6d:69:9a:5e:a7:57:b6:b7:76:7d:3f:82:
         af:70:3d:bf:e2:a2:6b:35:87:76:1c:df:85:e0:d6:ff:b5:62:
         1b:e8:fa:94:03:5d:f0:d2:99:41:cd:45:98:26:9c:3f:2e:37:
         1d:40:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:35 2025 by rpki-client