Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa
File:                     e7af233e-fa26-3293-bcf8-b64f71a0e384.roa (raw, json)
Hash identifier:          ljTrtN5rI7UgKeNrDZYH6sFoqSKfdRbehrhKwgEvvlg=
Subject key identifier:   D8:8E:3E:BD:11:3D:87:C7:B1:CD:A6:6A:C1:5A:80:F9:4B:B8:47:E4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965E7D792127CAB300ED80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     33017
IP address blocks:        207.61.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5e:7d:79:21:27:ca:b3:00:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4571f78b-b177-460a-a1b8-081c657482bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:ae:de:2a:c1:18:e6:f7:dd:9f:42:27:5f:
                    98:13:3f:0f:f8:74:14:48:42:f6:cd:78:8e:00:52:
                    10:fd:39:b3:bc:c4:3b:30:e5:70:4e:de:9f:08:a6:
                    1b:ca:7a:94:d7:a6:4b:b6:14:98:5e:ed:d1:39:df:
                    31:5e:15:03:bf:65:13:f0:08:17:5f:89:7c:8e:89:
                    31:66:2d:e9:ab:a5:a0:af:cd:69:ab:8a:81:de:17:
                    5f:2f:1f:97:28:9f:3b:12:01:40:0d:91:fb:66:b7:
                    0b:33:2c:da:85:06:00:d1:53:ed:ee:00:4f:f6:35:
                    ef:9b:b5:99:7b:de:8f:be:21:67:9a:35:25:07:17:
                    d5:41:2d:4a:9c:6a:8a:2f:da:82:21:9d:23:cb:a6:
                    1b:84:cc:de:2d:76:6c:b6:46:e6:ab:34:d9:d0:0a:
                    b8:3e:e8:2c:f1:9f:dc:82:e7:05:57:48:0a:97:90:
                    77:ca:f6:87:0b:71:da:da:f6:67:40:5e:42:3b:70:
                    11:a4:55:3a:db:a2:a1:1b:08:98:8c:f5:94:fd:51:
                    35:95:e6:0c:91:01:63:2b:88:01:41:79:1d:d2:30:
                    d2:e3:ac:6f:4c:df:28:81:91:03:f8:14:71:9b:6c:
                    86:9b:0a:63:57:f6:47:d7:5c:5e:ee:da:6c:78:d5:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8E:3E:BD:11:3D:87:C7:B1:CD:A6:6A:C1:5A:80:F9:4B:B8:47:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:a5:74:e7:a1:e6:27:30:62:7e:a2:c7:00:f7:1b:48:7e:
         0f:28:bb:37:e7:37:cf:67:97:d7:2e:1f:bd:f3:63:08:7c:40:
         6c:c0:3d:a3:44:fa:17:a8:77:92:77:6e:39:5b:a2:d2:68:33:
         0c:a4:4b:11:31:80:27:48:43:aa:9b:1b:4e:da:c5:e5:19:e7:
         2f:64:72:61:39:14:e2:05:4b:e1:d1:06:55:03:cd:a5:64:60:
         3d:1f:ba:d4:18:68:d9:41:4c:3e:42:f4:f3:b9:e9:f7:b6:50:
         f5:30:33:f7:69:1a:25:58:55:52:24:6b:c2:dd:e9:24:13:c7:
         d5:6d:78:3a:7f:14:fc:34:50:06:c7:ab:02:ea:cb:8c:95:4f:
         3a:45:57:38:c9:a2:64:83:1c:77:90:68:70:d8:19:49:41:f8:
         a8:8a:1d:13:7d:5d:45:f2:5a:96:da:10:c8:ba:f1:10:05:56:
         03:77:42:47:11:4b:22:eb:18:be:73:7f:4c:4e:60:23:b6:cc:
         9d:2f:ee:83:9f:6f:16:d0:58:b3:9b:a1:b2:b5:5f:9d:f2:a7:
         14:b3:b2:bf:42:56:c8:b0:df:70:14:52:19:93:e7:df:68:cd:
         03:b4:eb:8b:b1:b1:5e:87:af:4d:cb:ed:fb:b7:0f:70:b2:32:
         0b:c0:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:20 2025 by rpki-client