Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a0178ff9-cb94-3030-ab8f-077d4b2e40ac.roa
File:                     a0178ff9-cb94-3030-ab8f-077d4b2e40ac.roa (raw, json)
Hash identifier:          vlpPhXEKCbq8fYvgZ2yVUn65s2hoM9WX8w5+3HWZ4tA=
Subject key identifier:   73:B7:FE:84:BF:A0:5C:95:8F:BE:19:39:BE:EF:D0:C2:84:88:24:1A
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849C4D4C8D75418A94E77971900
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a0178ff9-cb94-3030-ab8f-077d4b2e40ac.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16417
IP address blocks:        207.54.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c8:d7:54:18:a9:4e:77:97:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=a9e1d0be-4434-4aed-bf6b-2516f4d1375b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:a0:00:4c:d2:cc:95:35:84:f1:a3:09:53:
                    db:94:eb:6f:fd:9c:ad:da:3e:00:63:1a:14:05:8c:
                    17:75:45:1d:74:5b:1f:23:15:3d:55:b7:a4:ca:55:
                    9b:af:e5:2d:a3:31:31:67:fd:8c:7b:87:63:31:4f:
                    93:fa:f5:fb:cc:89:50:44:12:80:d5:1f:1a:51:f3:
                    23:99:f3:d6:69:a3:8a:dc:55:a1:84:d6:5f:91:5b:
                    ad:ea:64:45:ea:cb:78:fc:b8:db:12:92:bb:29:4d:
                    b7:4b:27:9b:d5:15:8c:a0:fe:2f:c1:4e:60:bf:9e:
                    25:4f:ee:20:48:aa:48:5e:bf:58:77:39:4c:f0:d3:
                    0b:f9:c8:0b:71:fd:d8:2b:5f:0c:b2:11:2b:57:3b:
                    fe:c3:c1:bb:bb:5e:72:de:85:f0:a4:61:ac:b4:da:
                    82:79:98:f7:61:98:85:31:b5:9e:50:08:fe:fb:3d:
                    9a:3a:06:07:68:60:43:cc:e1:a5:a6:6b:f4:16:f4:
                    db:12:95:91:9e:12:dd:1a:0e:a7:17:3d:3f:05:8e:
                    15:5c:ce:c3:6f:cb:18:7a:83:4c:72:0f:08:28:cd:
                    ed:07:ce:2e:bf:c7:42:de:ae:29:a1:ac:c8:4e:4b:
                    07:59:b3:ac:e7:e8:8c:e4:a9:26:88:d2:89:ff:00:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:FE:84:BF:A0:5C:95:8F:BE:19:39:BE:EF:D0:C2:84:88:24:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a0178ff9-cb94-3030-ab8f-077d4b2e40ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:3a:f1:9b:8c:dc:da:b2:d9:80:64:8f:dc:c6:34:a6:e0:
         14:14:72:37:13:aa:bb:8d:43:ec:ad:ef:c0:b3:da:09:2a:c2:
         ee:bf:ca:f0:b1:e1:03:9d:0c:bf:ad:a5:b6:e2:16:6a:53:bd:
         27:b4:0c:92:ea:14:e1:d6:40:2a:00:24:20:4c:26:1e:35:90:
         3b:e4:68:86:14:41:fc:50:2f:fa:68:34:69:22:5d:5b:a0:52:
         7d:86:37:81:dc:cb:e0:c3:28:ef:1c:20:e8:9d:41:0c:b3:db:
         08:b7:2c:3f:6a:49:e0:7b:8f:0e:b3:c0:1d:87:9e:c1:29:f2:
         6d:08:e2:7b:ba:47:72:d6:94:00:46:bb:dc:9c:bc:c9:b5:c9:
         c7:f1:92:1f:c5:1a:cc:0b:2f:4f:51:da:35:c5:d9:57:86:de:
         1c:58:99:cf:f8:bd:45:c0:98:62:a2:8d:d4:f6:0c:a0:96:20:
         fe:2c:de:81:64:58:e4:54:bd:a7:f3:df:68:4c:31:9e:81:52:
         ad:a6:8c:bf:75:c9:27:e1:8c:fa:cf:a9:93:0d:d1:3f:67:07:
         1d:62:be:c0:94:02:57:df:2a:b4:4a:19:84:2d:cf:d6:70:cb:
         75:b3:e3:0e:30:4c:61:02:a4:1d:4d:5a:1f:ac:db:fe:35:6b:
         46:c2:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:06:46 2025 by rpki-client