Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa
File:                     0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa (raw, json)
Hash identifier:          bcvbbZ0VpXfIgUWcVh5oB9Tk0SRlt5Si05jAt9hJ/+g=
Subject key identifier:   FE:3F:44:DE:67:48:55:7F:4D:64:6A:4F:4C:65:5A:90:F7:70:1A:AF
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AECC1470B66072EA308C00E60
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     30238
IP address blocks:        207.54.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:47:0b:66:07:2e:a3:08:c0:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f45a6882-b501-4137-a75e-eff09690324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:2c:83:41:e4:83:ee:96:00:10:ba:a1:90:
                    70:8a:5f:80:33:d9:9e:a2:c4:8b:57:2a:bd:a9:39:
                    6a:4e:d3:1d:67:7d:08:93:f6:5a:dd:52:d9:02:1c:
                    22:a5:eb:23:ef:03:c5:7e:b4:c1:b8:2a:21:9a:fe:
                    58:77:50:d1:5b:9a:39:c8:32:58:b2:5f:01:54:30:
                    8c:43:35:f5:3c:8c:ef:22:ae:4c:16:3c:53:54:25:
                    7a:1c:4c:18:91:a2:1d:38:83:9f:a6:2e:a8:c8:b5:
                    f4:be:aa:0f:3b:39:7c:4b:8a:52:fe:73:c6:46:61:
                    c6:51:9d:10:d1:e8:15:a7:51:c0:17:aa:ac:92:58:
                    c6:dc:1f:0a:4e:92:fc:0f:7a:62:74:9d:77:f3:74:
                    1b:a6:ed:2e:ec:b7:4c:47:04:fc:e6:0b:ff:a5:74:
                    58:b5:d3:70:6c:95:b0:d7:88:b5:1d:92:9b:99:3c:
                    39:98:2f:5c:4d:8b:3b:15:c8:44:b0:1a:7e:84:d8:
                    51:b9:59:50:e7:dd:d2:b7:5c:f2:cd:09:65:02:4e:
                    8f:2c:6f:7a:b3:e0:3c:a8:99:dc:5a:74:b3:86:50:
                    fe:89:7b:e0:ff:c9:ce:f0:6a:66:15:64:89:81:16:
                    1b:15:c8:0f:a2:0a:18:73:3d:4a:15:0d:a6:6f:32:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3F:44:DE:67:48:55:7F:4D:64:6A:4F:4C:65:5A:90:F7:70:1A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:72:7b:4f:e5:a6:e7:ae:7b:c6:61:1e:ba:d0:aa:4e:35:
         9d:e8:45:f4:db:4c:54:83:de:48:fc:10:d1:12:0b:42:dc:fe:
         d7:2e:35:a8:41:4a:62:93:cb:aa:37:d5:a1:40:b1:13:b0:a7:
         e1:61:ae:b4:8e:e7:be:c1:0f:8d:df:31:07:42:6c:0b:ae:6a:
         d0:44:82:c4:90:c5:87:8c:45:36:57:e1:36:e4:cc:12:09:8c:
         25:85:d4:a6:88:f5:2e:91:99:5f:d3:dd:00:a8:34:2d:0b:ae:
         bb:b3:ce:02:64:33:18:4f:51:88:75:89:04:24:c0:89:a8:2e:
         99:c7:15:cd:15:a6:83:10:30:f8:b8:30:bb:0e:a9:d7:9e:80:
         63:57:6f:35:3b:17:c8:2b:09:45:ca:ff:e5:be:16:d6:8b:70:
         61:18:8b:b8:ec:78:04:3e:5c:a7:30:7b:79:e8:4d:b8:4a:b1:
         d2:8b:69:3d:ec:b6:40:5d:5d:87:62:30:69:23:fc:46:5e:eb:
         17:3e:af:f6:d6:97:9b:fc:26:1a:bc:c5:c4:4c:22:b7:8e:90:
         7f:7d:96:d8:29:b0:8b:9d:aa:99:ae:1f:d9:e9:c1:08:ff:df:
         b0:d8:7e:43:64:9e:07:33:28:90:63:ce:47:11:4b:02:54:75:
         34:f6:fb:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUcLZgcuowjADmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZjQ1YTY4ODItYjUwMS00MTM3LWE3NWUtZWZmMDk2OTAzMjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoEsg0Hkg+6WABC6oZBwil+AM9meosSLVyq9
qTlqTtMdZ30Ik/Za3VLZAhwipesj7wPFfrTBuCohmv5Yd1DRW5o5yDJYsl8BVDCM
QzX1PIzvIq5MFjxTVCV6HEwYkaIdOIOfpi6oyLX0vqoPOzl8S4pS/nPGRmHGUZ0Q
0egVp1HAF6qskljG3B8KTpL8D3pidJ1383Qbpu0u7LdMRwT85gv/pXRYtdNwbJWw
14i1HZKbmTw5mC9cTYs7FchEsBp+hNhRuVlQ593St1zyzQllAk6PLG96s+A8qJnc
WnSzhlD+iXvg/8nO8GpmFWSJgRYbFcgPogoYcz1KFQ2mbzL3OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4/RN5nSFV/TWRqT0xlWpD3cBqvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMGJkYmZmYjEtNDRiNC0z
NTgzLWJkNzgtMDI3NmJlNTJiZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2WcntP5abnrnvGYR660KpONZ3oRfTbTFSD3kj8ENESC0Lc/tcuNahB
SmKTy6o31aFAsROwp+FhrrSO577BD43fMQdCbAuuatBEgsSQxYeMRTZX4TbkzBIJ
jCWF1KaI9S6RmV/T3QCoNC0LrruzzgJkMxhPUYh1iQQkwImoLpnHFc0VpoMQMPi4
MLsOqdeegGNXbzU7F8grCUXK/+W+FtaLcGEYi7jseAQ+XKcwe3noTbhKsdKLaT3s
tkBdXYdiMGkj/EZe6xc+r/bWl5v8Jhq8xcRMIreOkH99ltgpsIudqpmuH9npwQj/
37DYfkNkngczKJBjzkcRSwJUdTT2+yQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:29 2025 by rpki-client