Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15558866-2d00-3e6d-a7cc-ba2057dc821d.roa
File:                     15558866-2d00-3e6d-a7cc-ba2057dc821d.roa (raw, json)
Hash identifier:          5qrrOt4K/XN7TPZ9wc3v0PL2AziViRrVQEigZc4sQ3I=
Subject key identifier:   54:C2:58:BE:F8:C2:F2:59:82:A2:C8:7D:56:38:77:9A:10:68:D3:14
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AD7D1169145771169391AE300
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15558866-2d00-3e6d-a7cc-ba2057dc821d.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     30238
IP address blocks:        207.54.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:16:91:45:77:11:69:39:1a:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=439cfd3c-aae3-45d6-bfe1-953832659fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:92:69:db:65:4a:dd:32:40:ee:71:98:ef:
                    7d:6c:ad:9c:15:96:43:fc:3f:d3:93:e7:b4:2d:d2:
                    e2:4b:83:0b:17:87:94:fa:01:9a:6e:27:cc:ac:90:
                    f7:9c:d6:0f:7d:94:f6:38:2d:93:69:b9:08:ea:a2:
                    fc:39:80:fe:28:66:39:a8:4e:94:a9:9c:b6:d1:d6:
                    71:c1:45:db:0b:d5:c8:63:25:45:ee:9d:bf:8c:49:
                    e7:26:61:27:3b:a4:54:13:8e:66:7e:67:9e:e8:19:
                    e0:76:75:58:0b:d9:4a:5b:c2:0a:77:d4:71:95:32:
                    3f:7e:b1:f7:18:1e:75:ae:ff:b9:59:a4:21:fc:8f:
                    1e:da:b9:03:74:83:dc:86:6a:b3:13:aa:66:2a:17:
                    15:63:86:74:f2:5f:bb:f3:92:db:b9:82:73:0d:a6:
                    d0:55:df:95:60:f3:69:07:4a:c8:a6:c4:72:32:b9:
                    35:a3:b4:e6:12:0d:6a:80:15:c6:80:f5:ee:96:0e:
                    c1:56:1b:6b:d4:08:2c:03:98:7d:6d:83:2c:5f:b0:
                    cb:67:92:49:29:35:37:ed:a3:32:17:6e:95:94:95:
                    a4:09:fe:ef:21:ee:15:0e:ac:4b:17:68:86:b5:cd:
                    c7:d4:14:21:f2:01:56:b8:3d:d6:85:4d:d4:ca:cf:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:58:BE:F8:C2:F2:59:82:A2:C8:7D:56:38:77:9A:10:68:D3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15558866-2d00-3e6d-a7cc-ba2057dc821d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:12:c9:b7:a1:02:94:f4:00:78:3e:93:e6:63:14:84:ab:88:
         0c:6f:0c:4f:53:d8:b6:e0:d5:48:dc:cd:14:6c:a3:3c:c5:ff:
         29:61:86:54:f5:80:0b:18:59:01:54:42:54:ab:ed:40:c2:e2:
         82:d7:e0:15:53:03:65:15:8c:16:48:ed:3b:82:80:84:29:be:
         0c:ea:6c:cb:9f:ce:39:ee:05:45:88:00:91:36:b7:3a:c3:c8:
         dc:14:a9:e0:9d:5a:a1:d4:52:d9:d0:f1:94:06:5f:a2:95:2f:
         da:1e:e7:ec:1f:dc:3d:2a:be:98:16:08:ab:48:dc:00:32:8e:
         1a:45:f4:9f:71:ce:37:31:c8:8c:77:68:a3:12:f0:e2:fa:63:
         c2:1b:13:ca:82:57:be:d8:64:a0:35:db:17:14:9f:a2:82:4e:
         ad:3b:1c:b2:3c:f8:90:f0:cf:3e:12:86:a7:13:93:dd:4b:a1:
         5c:cd:a0:df:74:96:47:c2:b4:9e:9f:e4:de:1a:a2:ac:77:29:
         08:6b:13:9d:ff:38:25:be:8b:1e:ff:60:f3:b1:4f:01:04:a5:
         64:6d:74:4f:64:fb:af:f4:62:1b:a0:a3:64:fa:79:fa:e5:a7:
         a7:56:9d:ac:4b:04:b9:d7:74:d0:b4:78:4e:86:fc:a9:13:4c:
         f5:33:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:36 2025 by rpki-client