Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0767d76f-55eb-3c00-80e4-b7418688b1b3.roa
File:                     0767d76f-55eb-3c00-80e4-b7418688b1b3.roa (raw, json)
Hash identifier:          lwrY34su351igJNKq01T56k3Devweibyg8YnwMr5uB4=
Subject key identifier:   59:BF:6C:39:B1:E4:95:CF:C0:E2:88:08:26:11:6B:59:02:DC:FE:60
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19667CBFA5AACD50B333A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0767d76f-55eb-3c00-80e4-b7418688b1b3.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     398721
IP address blocks:        207.61.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:67:cb:fa:5a:ac:d5:0b:33:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=26c7452f-eb05-4db0-b24d-94db5da951d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:3d:98:9f:b7:05:e0:f1:02:1f:5d:78:58:
                    eb:05:d4:bc:7e:33:d9:41:41:10:3b:ba:ca:e1:2d:
                    9e:d1:c8:b6:30:2a:b9:6c:5c:ec:ee:2e:c7:fa:98:
                    97:63:14:ac:ef:37:3a:39:63:01:d6:8a:c1:94:37:
                    72:bc:5f:b7:72:7a:1f:cb:06:a0:10:f2:7a:ad:aa:
                    64:68:e4:13:6e:3b:d4:a2:3e:ca:c8:5d:67:a0:8b:
                    30:22:04:11:31:61:01:8c:84:79:b2:f1:18:7c:44:
                    50:ad:df:ac:48:61:0d:59:28:84:bd:ff:54:b1:70:
                    05:3f:cc:88:eb:df:2c:f1:33:9a:47:cb:4b:a7:3d:
                    89:01:94:46:ed:09:4a:3f:df:41:ab:be:00:3c:1a:
                    05:aa:f2:ec:a0:98:60:8b:1e:78:b2:e8:d4:3d:f2:
                    d4:9a:f8:09:d4:45:12:f3:30:62:33:dd:c6:5f:ad:
                    14:72:64:d1:11:5f:13:a7:f3:4d:3f:3f:08:2f:51:
                    7f:00:28:0a:89:16:7b:47:9d:62:ad:b6:72:79:1f:
                    f8:98:db:48:d7:d4:0c:c8:99:ec:5e:6d:5b:eb:c1:
                    68:8c:4b:d9:dc:8b:61:11:a8:d7:df:e5:d3:51:7c:
                    65:9a:c9:15:a7:d1:c1:83:2f:63:42:ed:ec:63:15:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:6C:39:B1:E4:95:CF:C0:E2:88:08:26:11:6B:59:02:DC:FE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0767d76f-55eb-3c00-80e4-b7418688b1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:98:fd:f1:8b:e8:9a:1a:63:69:d6:e9:3e:a5:b6:fa:9b:93:
         0a:f9:65:46:44:b2:b3:b6:18:3f:f6:77:1f:de:d1:66:42:7f:
         5a:8d:3a:3f:80:ad:20:13:d3:b0:a9:9f:ed:e3:d0:7b:61:71:
         c9:03:83:e0:71:a8:1a:a3:0f:bb:e2:42:63:4d:e1:fb:6f:9c:
         94:ba:a1:ac:a1:c7:96:89:d3:9b:28:37:58:40:dd:38:2c:ba:
         78:08:b5:29:37:64:3c:b7:d0:10:3d:4c:e7:2f:43:d8:6e:5e:
         4d:04:68:e7:5b:31:0c:51:4e:05:eb:02:4f:cc:9d:fc:4d:c1:
         8c:11:1f:94:99:d9:80:c3:fc:ea:10:ae:46:d4:52:7e:40:46:
         00:3b:a3:04:a1:83:aa:34:8d:47:c4:8a:c5:89:46:1e:61:3d:
         e6:bc:2e:d6:cb:06:fe:fe:51:34:8b:eb:01:e2:2f:37:99:cc:
         76:c8:c8:e8:e5:f7:34:15:e1:84:fe:26:4c:f8:fe:4f:96:71:
         8b:dd:20:55:77:8d:4a:dd:14:90:fe:5d:8b:dd:03:3f:1c:8d:
         61:35:05:fb:b2:57:e9:9a:9a:9c:a8:14:22:3a:6c:de:56:de:
         93:40:90:1e:9b:e1:23:68:cd:52:67:51:e4:c2:e5:e2:af:f4:
         c8:ef:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:16 2025 by rpki-client