Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15558866-2d00-3e6d-a7cc-ba2057dc821d.roa
File:                     15558866-2d00-3e6d-a7cc-ba2057dc821d.roa (raw, json)
Hash identifier:          IKeGI085Z2bZVmcCLlht6VcnxXV4+M8CrcMstfohoo4=
Subject key identifier:   F7:16:DF:BD:32:E0:85:A6:9B:2B:6D:19:32:D1:16:8F:4F:25:19:B1
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849F715179413839EE179759880
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15558866-2d00-3e6d-a7cc-ba2057dc821d.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     30238
IP address blocks:        207.54.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:17:94:13:83:9e:e1:79:75:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=42d9ec0a-f22d-41b2-a739-1db0385af4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:33:fa:d8:b5:cc:fb:4b:9e:9c:b2:b2:01:
                    fb:2f:1a:52:aa:e3:da:9b:0c:2c:f5:cf:12:3c:66:
                    f7:24:2a:b5:a3:c2:30:76:50:86:54:88:67:14:5d:
                    95:65:cf:0a:57:73:cc:86:36:3e:2a:80:3c:a4:0e:
                    a2:ac:a7:e9:1a:9f:e9:26:24:3c:66:c9:92:54:82:
                    ac:ee:52:c6:10:d0:b0:92:bf:56:78:5c:b1:b2:33:
                    02:11:e3:24:af:aa:5c:4c:95:ab:a9:7c:b4:85:2e:
                    dd:f5:ff:49:09:0a:d4:8f:52:19:5e:83:39:43:c6:
                    f6:7a:ea:5a:be:39:c1:60:fb:51:2c:5f:6b:1a:35:
                    a7:14:5f:a9:ed:73:8a:01:2d:aa:56:bb:09:96:06:
                    45:40:a2:f9:51:35:f0:66:2d:2e:c2:cb:1f:52:ad:
                    f0:29:2f:be:42:65:6b:56:0b:39:1c:c8:4b:69:eb:
                    d9:49:7d:d1:6b:3a:4e:a0:c0:21:63:e3:69:0a:9d:
                    48:be:fc:e5:f4:5e:c6:8a:4c:94:72:4c:8f:25:e3:
                    e1:7c:1b:39:f7:e4:e3:ec:02:c5:00:7c:a4:09:dd:
                    6d:0a:f2:68:52:cd:54:40:7d:a3:3d:59:86:f5:17:
                    e4:3e:17:98:6d:50:20:d8:b7:5f:e0:d1:3c:bd:b0:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:16:DF:BD:32:E0:85:A6:9B:2B:6D:19:32:D1:16:8F:4F:25:19:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15558866-2d00-3e6d-a7cc-ba2057dc821d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e9:de:59:18:fa:e0:6a:36:52:69:a5:67:01:cc:cc:4f:bd:
         a7:d4:4a:39:18:cf:28:cf:de:1d:f1:21:cd:bd:11:0b:91:c4:
         b9:f6:26:42:f0:84:22:57:3d:59:4e:b0:6e:b0:ab:7a:85:03:
         88:29:d4:95:bd:59:c9:c5:61:dd:49:aa:57:c2:06:82:cd:f8:
         16:14:c0:99:7a:74:28:8a:2e:28:83:4f:56:a2:1f:c9:82:6a:
         da:fc:71:0b:92:d6:7f:75:34:9e:cc:9b:85:c6:4c:60:ab:95:
         ec:38:24:db:bc:f8:6a:3f:21:31:10:71:47:79:3f:51:d7:c7:
         b1:2c:ec:6b:9b:48:bb:42:0b:f8:f9:6d:ef:e8:83:1b:aa:ef:
         60:bd:b4:65:8e:db:4c:96:80:f8:bd:9a:f1:36:40:10:95:e3:
         d4:2c:2a:64:cd:f5:5b:dc:86:c4:74:6b:3d:59:94:0e:45:9b:
         90:ea:60:76:1e:a3:33:83:f5:ff:1f:30:5a:b0:d5:7f:39:2f:
         3b:02:f8:6f:69:00:be:aa:50:78:2e:6a:c3:b5:7e:cd:12:b4:
         fb:42:e5:f9:ed:80:af:e6:3f:46:82:a5:3f:f1:53:92:ff:60:
         f3:3e:84:bd:17:2d:2f:69:01:c7:20:fe:b7:40:b5:aa:14:1d:
         19:02:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:53 2025 by rpki-client