Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
File:                     54777a52-8422-366b-87a2-b6e3af1ba3db.roa (raw, json)
Hash identifier:          lZl8LcANMxQroYxJ7NqdJCnUYWNRNvxitOkR5Z0lra4=
Subject key identifier:   1D:A4:CF:93:0A:75:07:0E:0B:F3:AD:DE:4D:48:BA:65:54:FB:60:8B
Certificate issuer:       /CN=f8920ef3-7d53-43c3-8266-318adf8495b4
Certificate serial:       010D0C9F432858499F249B3BF3835388B4CFC700
Authority key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     8100
IP address blocks:        199.7.210.0/24 maxlen: 24
                          199.7.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9b:3b:f3:83:53:88:b4:cf:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8920ef3-7d53-43c3-8266-318adf8495b4
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=49ffa2b4-9bd3-4de5-91c8-3a1e5e3c86fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:f5:54:b1:d1:b9:ec:74:af:4b:a0:94:7a:
                    95:98:f9:ac:07:69:26:2f:b5:b9:65:05:6c:68:99:
                    79:17:bf:21:1b:ab:67:5c:fe:30:c6:1c:80:5f:7d:
                    c0:c7:3b:6b:4f:74:92:f1:5a:d4:55:2f:b3:4b:05:
                    78:be:18:66:29:a2:95:fe:dd:b7:81:60:15:2b:62:
                    f1:d6:12:83:c3:93:93:6f:22:01:2d:e3:c9:19:e1:
                    2b:83:43:45:3a:cd:4b:15:13:16:e3:4a:de:e1:b3:
                    a5:14:d1:99:15:eb:9b:29:bc:6b:bc:7f:c7:75:ca:
                    01:80:ec:2f:92:64:6d:9d:d9:a0:f9:b6:2d:74:bb:
                    cb:c6:fe:df:78:4d:e1:50:59:52:87:a6:18:e8:43:
                    3a:a7:fa:a2:17:02:a6:fe:ec:d7:f2:82:1e:e0:a3:
                    bf:23:51:73:46:c9:3b:7e:7c:d9:a8:65:c4:f7:71:
                    20:8b:88:91:94:49:fd:f1:1c:c2:d8:6e:96:cc:b0:
                    49:85:20:5b:48:9c:e6:34:6e:6c:27:75:78:f0:42:
                    24:01:d6:92:fb:84:3f:db:02:d4:53:ee:75:ad:b0:
                    45:81:99:3e:8c:d8:ce:ae:8f:26:85:15:ae:4b:9a:
                    05:d6:fe:bc:cf:6d:be:f9:26:b5:9b:8d:3f:15:75:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A4:CF:93:0A:75:07:0E:0B:F3:AD:DE:4D:48:BA:65:54:FB:60:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl

            X509v3 Authority Key Identifier:
                keyid:E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:28:16:d0:9d:aa:94:94:2f:f0:bc:f8:50:34:6e:ad:f2:69:
         93:93:ab:26:e7:68:41:f6:cf:21:4b:5e:34:37:9f:86:99:d3:
         c0:a3:26:7f:57:63:55:11:d2:40:a9:ba:14:7d:53:c0:47:82:
         94:74:17:27:7b:3d:ed:74:5a:36:27:c1:2d:4c:0f:c9:e8:de:
         b9:4d:ce:4a:d5:d7:8e:9c:29:1e:ef:14:07:1a:7e:73:11:f3:
         ba:37:a6:14:ff:f6:f1:fe:79:db:76:de:6d:e7:41:f9:03:eb:
         a1:77:53:21:62:48:07:1e:cd:46:39:34:3b:c9:91:f8:ca:d7:
         eb:68:a0:3d:68:41:f1:c2:be:b2:75:f6:f6:fe:8c:a5:be:6a:
         9e:40:49:eb:c1:f5:37:61:2d:02:1c:18:f4:28:0c:92:05:44:
         55:40:35:6c:23:99:ed:cd:51:e2:cf:af:1c:0b:cd:c7:3c:25:
         36:b7:7f:98:08:1d:b3:f8:fc:0a:62:0a:b0:d7:7f:05:aa:1a:
         e5:56:89:95:b4:d3:8b:30:55:58:3b:d4:54:00:58:fc:c2:e6:
         b1:14:29:cc:59:9f:f1:32:cf:70:30:0b:57:78:95:6b:b6:2d:
         31:17:bc:3b:f4:42:1f:7d:72:90:a5:90:42:cc:d7:cc:28:23:
         84:29:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:51:52 2025 by rpki-client