Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a22684ea-e0a5-3058-9856-e12bf764ea54.roa
File:                     a22684ea-e0a5-3058-9856-e12bf764ea54.roa (raw, json)
Hash identifier:          2FfPRKTupCqSa0BLKUJVHurGKvx1VJOGSAmNwLAHA7k=
Subject key identifier:   50:30:F8:84:74:2D:8A:7C:55:9C:5F:E0:7E:B2:EA:D2:9E:42:4F:4F
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F43285849D85F829304768A76B2C32880
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a22684ea-e0a5-3058-9856-e12bf764ea54.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     36068
IP address blocks:        173.241.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:82:93:04:76:8a:76:b2:c3:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=38702924-9126-4a22-b4b5-44357431127b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:fc:38:4c:fe:d9:89:16:b6:4f:b5:10:42:
                    1c:ca:4a:76:28:20:c9:3f:66:b8:aa:10:b9:29:ab:
                    9e:f8:3b:48:ed:66:e6:7f:5b:56:1f:c7:5d:77:11:
                    a7:b0:62:1e:6a:ec:98:97:4f:37:5f:a5:27:fe:b7:
                    08:88:25:dc:19:a8:61:0d:ee:61:d3:94:8d:57:7f:
                    35:39:6b:e2:d1:dc:53:bf:3b:1a:66:c8:df:54:31:
                    b9:07:d4:fb:55:1a:77:aa:9e:b7:39:4d:29:6c:8e:
                    d6:e4:57:4c:7a:15:8e:79:84:b5:df:b5:f7:09:80:
                    6e:2a:73:90:ee:c2:f4:b3:bf:19:c5:64:8a:61:a6:
                    bc:c9:e7:4a:5c:d7:9b:e0:0c:63:17:13:3c:ca:dd:
                    b2:c1:b4:13:c1:b8:12:ab:7f:5c:9e:6c:f4:49:5d:
                    3f:a1:32:2e:00:ed:35:52:01:19:11:27:2c:f8:45:
                    e7:16:05:77:3c:84:fa:af:1a:a1:e0:7b:d0:80:19:
                    f1:9e:cd:9d:fb:fc:92:b1:20:8b:ce:e7:b7:df:aa:
                    67:4a:5f:bd:8c:c7:e9:c4:4f:27:e8:b2:de:80:6f:
                    46:d5:b8:14:2d:5a:40:b4:6a:8a:29:c6:a7:09:15:
                    04:97:89:0b:fa:b5:3e:53:96:ad:46:a0:07:76:81:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:30:F8:84:74:2D:8A:7C:55:9C:5F:E0:7E:B2:EA:D2:9E:42:4F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a22684ea-e0a5-3058-9856-e12bf764ea54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:38:8d:9d:68:15:7b:05:ab:19:09:50:d9:d1:6c:13:db:ec:
         87:dd:8d:12:c7:46:a7:ab:b8:00:af:33:94:55:28:cc:22:79:
         ac:7b:8f:76:61:4b:63:15:ce:59:2f:56:9a:a2:26:f7:62:e5:
         22:a3:b5:d8:a2:e7:b6:de:93:32:a5:d6:01:d1:ab:89:11:c0:
         c7:2a:44:4d:a6:c2:e5:15:a7:62:1d:66:24:53:60:1b:44:f1:
         e7:f3:6e:ea:b4:b0:18:1b:00:3e:e3:44:93:4b:ba:17:33:08:
         ac:43:f3:f5:c5:23:d1:67:08:76:72:6b:84:f3:55:3c:d9:6c:
         4c:d7:ea:c6:f1:6f:bb:b8:78:85:6a:0e:10:fd:4d:26:f6:77:
         38:3f:52:df:f3:e0:27:6a:bd:8a:81:d7:d3:9b:38:8c:b3:24:
         68:04:4f:83:5c:ef:5b:aa:9d:64:ea:71:18:62:a1:79:c2:af:
         7f:b6:6f:f6:78:ef:f9:4a:1e:89:ce:21:08:4d:c8:89:60:1f:
         44:51:af:db:f7:7a:3f:25:31:26:20:94:08:fd:47:71:8e:15:
         a3:a1:5e:b7:89:62:3b:42:b2:25:25:40:67:3e:83:bc:c6:93:
         ae:dc:e1:80:66:ed:68:e4:f5:cb:f4:85:0f:22:9f:57:28:30:
         ee:c4:e0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:41:17 2025 by rpki-client