Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
File:                     54777a52-8422-366b-87a2-b6e3af1ba3db.roa (raw, json)
Hash identifier:          M73s+bwOJb/HitLP6dXv/Yqe44lWmgU4DaWq3WfE6Do=
Subject key identifier:   1F:C8:F2:5E:42:9C:4A:A2:8C:25:4B:95:41:23:33:84:A8:8B:87:D9
Certificate issuer:       /CN=f8920ef3-7d53-43c3-8266-318adf8495b4
Certificate serial:       010D0C9F4328584A7E7B5E08DC64EEBBF68DE1C0
Authority key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     8100
IP address blocks:        199.7.210.0/24 maxlen: 24
                          199.7.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5e:08:dc:64:ee:bb:f6:8d:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8920ef3-7d53-43c3-8266-318adf8495b4
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=511a9155-2389-4e0e-ad36-4b98ebef5b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:b7:fb:72:e7:96:44:b8:10:ee:51:90:4b:
                    30:12:38:c6:17:ac:4b:53:4d:f4:5c:e3:b5:47:28:
                    e6:ef:0f:f4:2d:d5:05:37:3d:f3:59:af:6c:73:72:
                    19:61:4f:ae:ce:bf:2c:5f:83:81:99:c2:f0:d0:cc:
                    42:39:06:2f:13:ba:94:ca:ff:dd:8b:d3:5a:6b:f6:
                    ac:42:6b:53:c6:c0:21:b7:27:15:75:94:de:77:6c:
                    10:af:ce:e8:66:7a:11:49:3c:a6:e5:1b:85:71:91:
                    f0:27:15:5c:8e:9f:bf:0f:d0:80:01:ac:ed:2e:74:
                    51:e9:2f:16:ed:13:40:22:84:d3:de:4e:12:a0:a1:
                    e1:66:3e:fc:18:11:c1:75:19:46:63:41:2b:02:1a:
                    e4:b5:31:7e:72:b8:02:74:ae:12:85:01:ee:78:da:
                    be:be:d0:bb:67:1f:ef:e4:4b:90:03:f9:31:ce:21:
                    2c:85:e5:74:fd:00:d5:01:2f:28:6f:00:db:63:9e:
                    d4:a6:c4:82:01:06:91:9e:73:27:41:95:92:91:c3:
                    b7:e8:24:19:a2:7f:ee:3d:69:ea:7d:29:ec:07:7e:
                    23:f2:73:83:b1:b9:c2:36:1d:cd:27:89:88:5f:01:
                    e0:29:3f:1d:6a:f0:20:62:1a:7a:e1:ef:0f:b7:e5:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:F2:5E:42:9C:4A:A2:8C:25:4B:95:41:23:33:84:A8:8B:87:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl

            X509v3 Authority Key Identifier:
                keyid:E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:8e:d9:8f:54:3e:54:67:cc:4d:d6:0a:51:92:5f:30:78:
         06:06:8c:09:3b:92:fd:5f:87:a2:c8:2d:f7:b1:ea:e0:c2:44:
         6d:31:63:d9:c5:d1:5d:78:fd:f7:7c:52:d4:4c:bf:fd:67:86:
         b7:aa:3e:60:2a:d1:01:ac:37:8e:af:0e:d1:ab:70:cf:63:24:
         0d:94:28:17:e2:ae:52:51:d3:d5:59:e4:6c:5f:1f:fb:46:ca:
         12:fb:94:cd:9b:c2:c8:02:54:e7:3e:c0:e9:ac:8e:07:df:0c:
         7a:c1:e6:f0:71:15:65:bd:d4:a1:31:9d:67:07:3e:4e:cb:33:
         1c:0c:ef:af:76:c8:17:ae:46:36:80:3e:1f:ae:f5:30:55:c3:
         24:e0:09:66:65:67:f1:67:ab:22:a3:05:c9:55:e7:d0:9c:4a:
         24:2a:9e:01:da:5e:ff:e2:a8:8b:e4:e8:33:2d:3f:05:1b:97:
         b1:fb:8e:b5:6b:1d:b0:b0:b7:be:43:8d:47:e1:76:5e:bb:ff:
         5c:d7:a3:36:7e:b0:6b:f1:55:15:9b:8c:ab:54:f6:25:11:49:
         11:d6:2d:d1:24:a6:f1:a5:42:35:84:9a:2a:59:5e:34:0b:a1:
         1d:b1:ad:1a:8d:c1:2e:9e:c8:bf:db:84:ac:9f:c8:8a:83:c8:
         28:0b:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:17 2025 by rpki-client