Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa
File:                     0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa (raw, json)
Hash identifier:          FoycJORgFUmla6i5PYqHELduUecayLalc2UsHC5luz0=
Subject key identifier:   05:09:86:23:1C:2A:78:90:E0:14:8D:87:42:EC:80:74:19:F9:B3:58
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AD7D121C12C497D64935D3D00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     30238
IP address blocks:        207.54.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:21:c1:2c:49:7d:64:93:5d:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=dec33eab-57e6-4a85-961c-4d60c1f8c782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:87:15:2b:f7:5c:bd:dd:10:f6:2a:95:58:
                    0c:d0:fb:a4:a5:5a:cc:47:a6:e0:53:6c:19:2f:0a:
                    ff:32:68:db:19:4f:8d:ce:6b:f3:67:b4:25:f0:0f:
                    1a:83:54:7e:8b:9e:9b:2e:75:f3:84:c0:5b:45:5a:
                    c5:81:49:b2:e0:d7:25:c1:65:55:19:c4:23:c9:d5:
                    7e:bd:e9:7a:10:ad:23:da:24:51:b5:3e:de:da:b3:
                    43:9a:c4:ff:5e:b7:fa:b7:f0:21:ce:c4:20:f1:8b:
                    fb:c3:8d:8c:f3:02:1c:d5:dd:1a:db:f3:7e:73:68:
                    e8:df:ea:cd:2c:64:10:c4:31:29:79:76:75:57:cb:
                    83:86:d0:11:09:19:ec:05:ba:ac:49:16:7d:75:20:
                    e5:ff:22:f3:04:fb:fb:67:e4:4d:ff:70:66:0f:9e:
                    a2:5d:52:5c:b7:62:aa:bb:81:64:3e:71:b1:9b:3d:
                    65:c5:08:9b:bd:3c:d4:10:22:24:66:09:a4:92:cb:
                    e0:1b:d6:49:55:fe:4c:fb:ad:77:85:3f:ef:0d:ca:
                    1b:55:98:d4:ff:b9:e7:b5:1e:fd:9c:28:45:ea:e9:
                    9c:69:64:6b:73:df:dd:1a:7d:ae:48:98:e1:50:cb:
                    c5:43:1f:59:ca:a6:2a:29:14:6c:ca:33:98:fe:89:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:09:86:23:1C:2A:78:90:E0:14:8D:87:42:EC:80:74:19:F9:B3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0d084d81-9d27-3c5b-afac-f54841ddb9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:5a:40:e9:d5:c2:01:ae:f5:80:fb:c6:65:c2:0a:67:5f:
         a8:9c:e8:b3:81:7e:a8:6d:39:eb:3e:cb:ae:8a:69:3c:ef:8f:
         da:05:71:32:ac:51:0d:ba:bf:12:09:4f:d6:53:2a:e2:3b:94:
         85:fe:99:ca:6a:b6:8a:d1:77:56:59:60:46:95:2f:03:35:f5:
         68:bc:05:19:08:85:82:12:e5:7f:2a:d2:e2:ff:eb:54:3d:be:
         29:fc:04:06:f2:cd:67:f4:e5:a7:8f:66:e9:cc:f3:e1:3b:17:
         05:15:a7:38:a4:de:02:7d:4e:18:86:36:d2:2a:41:4f:1b:6b:
         ae:72:f6:ee:26:2d:b1:99:32:f8:13:eb:8c:0f:46:9e:e8:31:
         68:f0:ff:fc:53:c7:fb:35:3b:c4:f8:8d:6e:8c:3e:d5:62:c3:
         aa:92:bf:35:59:2f:88:51:d5:df:6e:e3:72:8e:75:69:65:6e:
         3c:a9:8d:41:f7:13:a5:8b:a7:75:e9:d0:fa:37:8c:68:29:12:
         95:cc:50:1d:26:4f:c0:a2:37:c3:c5:56:b7:6c:e3:5b:40:07:
         aa:e2:7a:4e:d9:ea:9a:c2:43:b3:b1:94:4d:8e:8f:06:7c:eb:
         3b:74:f6:47:96:73:80:93:ef:03:7f:68:5a:0d:47:d0:dc:0c:
         1a:6c:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:53 2025 by rpki-client