Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa
File:                     9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa (raw, json)
Hash identifier:          Gb90ifqzXsfoDyNPZjYxEMMrIQ6B9aBZP+TKBvj/Wik=
Subject key identifier:   E1:95:6B:AC:C3:1F:6E:24:59:F5:51:27:30:5A:95:19:69:8D:5E:0C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA76E5F0EFF7DABE91300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        207.61.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a7:6e:5f:0e:ff:7d:ab:e9:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1b6e8fb6-27f4-4a0f-b0f7-b0218cc5fd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:e7:2e:55:9d:69:4d:92:2c:87:63:a7:8e:
                    22:fc:79:20:f5:04:bc:1c:bd:28:81:e1:23:c7:da:
                    7e:ca:b3:be:d3:45:6c:f2:c1:7a:00:60:01:f9:72:
                    05:21:b8:45:38:ac:d7:d3:da:e7:71:ca:19:a1:40:
                    30:c9:98:75:9c:26:61:e7:1d:f3:2b:14:45:cb:a6:
                    0d:a5:62:74:24:38:1a:f7:97:2a:fb:fb:4a:77:ad:
                    8d:64:b9:9f:a8:26:c7:0d:fb:4a:7e:34:9e:89:81:
                    e6:39:2a:61:0e:a1:fb:42:a7:ca:ce:b2:c4:a3:18:
                    99:0d:84:fa:ed:da:7d:23:e7:4c:e0:de:9f:2b:1e:
                    da:c1:63:47:a0:33:a3:74:ca:da:f7:b4:a1:0c:80:
                    38:7e:bf:be:8b:d3:5f:bf:b7:09:bc:84:90:75:33:
                    3b:e1:aa:54:8c:4d:9f:ae:c0:6b:52:3d:6c:10:db:
                    b7:66:92:5f:62:be:2d:a4:14:f2:a2:00:e9:48:fa:
                    68:f9:62:0f:0f:f0:5d:25:e6:d7:d8:5c:e1:67:4b:
                    a4:bb:2f:bd:b5:75:1c:07:46:6c:9c:97:1b:ff:c8:
                    9a:4d:ec:b2:17:e8:8a:94:82:fc:e2:ae:9f:fd:63:
                    a0:8d:c1:a7:49:ff:0f:c3:80:a2:cc:eb:2c:33:ad:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:6B:AC:C3:1F:6E:24:59:F5:51:27:30:5A:95:19:69:8D:5E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:49:9a:b9:4d:65:b0:7e:a5:10:0f:9d:87:8f:c1:0f:e2:d2:
         cd:dd:d4:3d:d4:95:b7:ee:7f:62:7b:a5:d7:bf:19:ad:84:0d:
         87:69:b6:d6:26:6a:7f:42:35:f4:5c:d1:a5:80:39:35:3a:a0:
         67:c8:0a:c6:1b:4f:c2:04:87:89:da:d7:07:5b:3b:5d:69:3a:
         9b:be:1a:4c:4f:fa:f3:b3:8b:34:49:78:57:f6:b7:a8:3a:13:
         04:57:3e:00:00:da:71:85:a4:55:fd:5f:c0:38:ab:84:87:24:
         e9:fe:e5:2d:b1:11:e5:3e:dc:9f:c3:86:58:85:bb:2a:aa:bd:
         c0:9b:35:77:14:22:6b:47:0b:ad:b1:bc:0e:8a:4e:8c:3d:93:
         50:66:20:a0:9b:f1:9b:8b:0c:2f:c3:5a:db:a6:37:ec:99:0b:
         33:7c:95:5b:40:94:b0:92:b0:16:80:74:7a:a6:3e:70:1d:f2:
         83:60:a2:3c:b0:9e:63:d0:d3:76:ba:05:c7:c7:9a:2a:2c:47:
         9a:05:ce:5a:54:86:65:e9:17:01:90:0c:f6:58:9c:69:c2:84:
         9c:bd:2e:04:7b:22:4c:88:d5:fb:7f:ec:16:fc:28:0c:06:b9:
         c3:ef:f6:85:f8:91:70:7a:e5:06:43:a7:f4:db:22:94:3d:c9:
         73:c7:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:56 2025 by rpki-client