Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/51011c21-340d-39c4-b750-06a7135bf50a.roa
File:                     51011c21-340d-39c4-b750-06a7135bf50a.roa (raw, json)
Hash identifier:          mDsk6MFRcZI46bsheX99R+uoc+XXQQkaxb2qoK5GYjQ=
Subject key identifier:   AB:7B:B0:30:D0:3B:67:97:14:47:B5:4A:AD:60:97:B8:0B:96:9D:13
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849F71517A33E25E3147B21E280
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/51011c21-340d-39c4-b750-06a7135bf50a.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     30238
IP address blocks:        207.54.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:17:a3:3e:25:e3:14:7b:21:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=27e81ac0-cf76-427c-b7b1-e49c1b47f812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:8e:88:a4:cd:a8:35:71:95:93:71:0c:03:
                    42:79:b0:63:a6:97:16:b2:1c:f2:85:26:89:01:49:
                    45:18:09:f5:e6:38:04:4c:53:c5:6b:89:20:87:08:
                    25:ab:54:88:71:1d:0a:2b:77:dc:76:b1:01:b3:df:
                    e6:89:ef:28:ae:d3:d1:6d:18:9c:28:57:a7:f9:1b:
                    ee:73:c5:de:1c:32:70:82:8a:9b:09:2f:07:f2:2b:
                    88:d7:48:1b:92:18:f9:5d:47:09:b4:4f:94:8a:6c:
                    39:e0:c3:a5:09:80:34:6a:0a:2c:b3:7c:fe:2a:ce:
                    3f:f9:b0:3e:02:d5:6c:02:8b:c1:66:ef:84:85:2c:
                    a0:29:a1:b8:dd:b9:de:9b:d4:a5:f8:27:ff:4b:d1:
                    d6:08:e3:f0:25:6d:f3:99:11:92:b3:1d:31:17:6b:
                    b1:39:68:d6:0d:87:4e:47:68:d2:d7:b0:5d:3b:89:
                    f1:f8:df:4e:31:7e:ad:a7:d2:1c:fb:b3:a1:d2:18:
                    b1:cf:2b:0a:9f:65:73:0f:c8:70:84:6c:f8:fd:ec:
                    53:92:dd:da:05:3b:0d:1b:42:e9:89:76:49:21:f3:
                    c6:fb:1d:25:27:40:f5:0b:e9:1f:4c:5f:3b:7a:51:
                    99:92:f1:25:ba:a5:25:80:35:93:42:af:dd:b1:19:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7B:B0:30:D0:3B:67:97:14:47:B5:4A:AD:60:97:B8:0B:96:9D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/51011c21-340d-39c4-b750-06a7135bf50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:35:9e:cb:f8:72:77:ad:ce:0c:87:cb:3f:eb:7e:34:16:5d:
         d2:4b:2d:db:b0:e6:c1:d2:ec:d5:69:8b:37:99:78:ec:7b:63:
         f7:f9:24:6f:e3:fd:8e:db:47:d6:ff:72:78:ae:c3:51:23:9b:
         be:d0:b1:f8:8c:51:2d:56:d5:56:24:0c:79:84:b7:08:ed:f6:
         8f:36:7e:16:4c:44:17:ac:66:72:e2:55:04:05:d2:73:b8:bd:
         27:86:f6:5f:09:b3:c1:8d:bd:2d:8e:cc:5c:47:7f:8b:eb:08:
         09:f3:53:c6:07:16:14:5a:1a:0a:93:1c:68:cc:0f:1f:2a:a2:
         03:9d:d6:d1:0e:02:5f:09:10:30:12:78:d9:ea:9d:a2:6b:68:
         7f:cf:70:6d:3c:7d:4c:45:e2:37:88:39:25:39:d9:1c:00:90:
         f2:8f:e0:39:44:05:e4:32:22:4b:96:bc:98:32:ff:d6:21:e9:
         2f:76:1a:8e:e1:49:ff:8e:14:c3:48:50:5b:9e:a8:61:c3:0a:
         d1:c0:32:94:bd:c6:ca:4a:e0:28:86:0d:77:a4:86:71:0a:41:
         d1:ec:bb:60:77:b4:49:c6:6d:12:9d:cd:a6:a5:f2:75:1a:de:
         01:53:6b:39:2d:3a:96:3d:07:f7:9c:df:c8:26:f0:05:0a:7f:
         24:42:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:47 2025 by rpki-client