Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/641f8e9a-79d5-3800-ba72-8328725c6048.roa
File:                     641f8e9a-79d5-3800-ba72-8328725c6048.roa (raw, json)
Hash identifier:          7FMsC1zdMekUiPx5zJ2zGQOOc4UBYZ2eAL8p15Pauqw=
Subject key identifier:   BC:DA:48:AF:4C:FE:9F:F8:03:7A:63:08:D8:35:8B:69:8A:04:29:31
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA80DBE9D99A586160500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/641f8e9a-79d5-3800-ba72-8328725c6048.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     33017
IP address blocks:        207.61.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a8:0d:be:9d:99:a5:86:16:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=80f9211c-15e0-45bd-a69e-d1714df2471b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ef:e9:67:a8:6e:1f:2b:83:68:3e:af:b0:e9:
                    3c:52:e6:7b:6c:ae:07:2b:52:b7:1e:93:66:64:d9:
                    07:81:37:a4:2f:df:9d:d8:86:96:20:0a:7a:23:a7:
                    d2:fb:c2:19:af:e6:0d:00:41:12:c7:15:d6:7e:d7:
                    46:9a:96:43:f8:22:47:47:ff:2a:c2:1b:71:fd:36:
                    d5:30:fd:8e:aa:e6:36:8b:27:cf:b8:47:34:ba:eb:
                    fe:1a:d6:45:de:5b:af:1a:be:10:87:74:fb:e3:75:
                    47:33:e7:5f:a2:dc:06:9e:23:39:68:ce:8e:10:c8:
                    31:52:f4:60:61:69:12:d6:06:fe:21:72:8a:94:d2:
                    a4:58:99:61:19:6a:72:ed:7e:dc:5d:9e:d0:5b:2e:
                    c4:73:64:25:8f:64:46:69:76:47:8f:f8:4d:48:fe:
                    6a:0f:57:f1:4c:f8:92:8a:34:1b:e3:1a:49:2e:27:
                    25:02:63:51:2b:64:31:ad:a0:46:23:e0:3f:b5:c7:
                    fe:3b:2a:38:f8:18:90:f3:46:7c:de:68:9c:93:ed:
                    20:0c:22:88:e0:e0:b2:c0:5f:97:4a:32:80:fe:3e:
                    56:2a:95:a3:df:c0:01:d1:fd:c7:fd:4b:b4:4d:28:
                    3c:8e:c1:62:7a:f2:63:2b:ee:c1:a2:b7:de:3e:08:
                    30:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DA:48:AF:4C:FE:9F:F8:03:7A:63:08:D8:35:8B:69:8A:04:29:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/641f8e9a-79d5-3800-ba72-8328725c6048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:97:ae:76:d1:93:be:19:73:8d:93:e9:01:1d:ac:79:41:
         e3:fa:2c:9b:8b:c7:81:05:9e:83:e2:5f:ca:8d:0a:7f:1d:b5:
         34:06:69:7c:c9:8c:b1:9f:00:84:cd:58:d0:12:0b:db:bb:ab:
         b4:be:d9:f3:17:ca:e9:ca:fd:b9:54:f6:3b:11:81:54:8b:26:
         b3:57:3d:68:c5:15:e4:d2:31:0c:53:44:0a:24:ed:0c:dd:3b:
         0d:9f:ee:1a:7d:e3:d3:92:48:5d:f5:ab:b8:d7:8c:57:a4:49:
         8e:96:64:57:23:aa:42:ad:c1:c0:7d:01:c1:6f:4b:54:85:58:
         c1:68:5d:56:5f:bc:ef:8b:8d:48:80:6e:60:90:ae:67:5c:09:
         94:b9:f4:e3:80:72:36:5d:fb:71:1d:ef:8e:8b:3c:06:a0:bb:
         01:30:ee:69:3a:f3:b8:17:95:0a:3f:f3:0e:ef:1a:47:c8:e4:
         f2:78:4b:2a:6c:e6:f2:88:3e:ec:10:cf:5d:13:ea:4d:99:dc:
         9e:25:4d:19:c9:52:8c:dc:ac:2f:6d:58:b1:08:7e:c0:e9:88:
         f1:a4:8b:0b:6f:4e:01:8b:be:92:19:c2:06:29:1b:40:1e:55:
         c7:37:4f:6c:35:b9:1e:23:99:29:14:ea:4f:6f:02:de:57:fd:
         f6:d2:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:07:21 2025 by rpki-client