Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa
File:                     40d5764e-ec09-3c7c-9d71-4441076559a5.roa (raw, json)
Hash identifier:          taBIWRS4ilsUQY7DpWfjZKQlZzGWZPIhikCbCp1FZnE=
Subject key identifier:   05:D0:23:E0:12:08:8C:96:0B:9A:4A:95:7B:78:CB:B3:62:C0:7B:5D
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AD7D12265F9E428CC01AE9940
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     30238
IP address blocks:        207.54.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:22:65:f9:e4:28:cc:01:ae:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8f7dd3b7-d90f-4474-a3b3-84c5259842e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:b6:ca:05:d5:88:3e:71:d6:83:db:ae:64:
                    31:1d:16:c6:d1:bf:6e:57:f6:cb:4b:43:fd:e2:8d:
                    d1:62:26:22:e9:a5:01:0a:56:ed:df:df:c0:40:6a:
                    b0:38:b1:7f:8d:3e:9f:9c:73:f3:13:0b:0b:59:81:
                    25:63:66:69:4c:17:aa:46:db:fc:82:65:ca:57:64:
                    15:e0:ae:36:bc:23:09:1b:a0:b9:e4:6f:de:5d:77:
                    fb:80:6f:ce:76:66:da:c1:d3:59:1e:ac:8a:aa:0d:
                    14:50:59:69:8b:88:f8:c1:04:09:3e:42:39:71:5f:
                    93:12:68:2a:ec:81:53:13:2b:7e:9c:e6:5a:4a:7f:
                    37:b5:f7:b1:fb:d9:c0:8d:2b:bd:21:7c:65:eb:6e:
                    ce:bc:12:bd:e5:2b:bc:4d:9f:8d:18:51:6e:ef:bf:
                    67:76:ea:89:86:5d:eb:15:8c:eb:e7:1d:4a:e4:2c:
                    8b:cb:e9:a1:39:8f:c2:f2:d4:84:0f:45:6b:76:fe:
                    a9:8c:ad:26:0e:b6:46:fa:bd:bb:45:29:5b:67:c5:
                    31:bb:96:b9:a8:38:80:a2:af:06:aa:03:bf:81:47:
                    74:ed:22:df:9f:9f:a9:9d:97:21:d8:c4:ab:1a:fe:
                    6a:92:8a:a4:9b:63:ad:5a:44:a3:90:1f:29:de:35:
                    72:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D0:23:E0:12:08:8C:96:0B:9A:4A:95:7B:78:CB:B3:62:C0:7B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:04:e5:86:bf:a5:57:2d:0c:a4:80:0f:86:e1:ed:66:18:5e:
         d2:b7:eb:78:4a:20:45:d0:b4:3d:70:f6:4c:b1:ce:ac:c9:e6:
         5b:c6:ae:ac:96:42:80:26:8c:32:db:c8:7b:0f:e3:a7:80:96:
         7f:fc:48:30:8b:a4:bd:0a:75:fc:ad:2b:34:85:22:77:86:59:
         d7:77:21:84:ba:25:34:a8:30:83:f2:32:18:4a:d4:6e:45:e8:
         aa:af:6d:74:81:e5:f3:de:62:ca:47:b0:1c:74:7b:d5:c0:63:
         b4:1d:81:6b:b8:98:d4:cc:54:74:ce:ae:26:38:85:9a:75:6d:
         1e:a0:8a:e5:ed:13:4c:8f:72:0e:af:3e:c8:12:c1:fb:48:e0:
         96:57:16:33:c1:7f:29:99:3a:ab:f2:6f:4e:6f:87:59:c7:77:
         d2:9a:ec:a5:28:02:b0:d6:f8:79:b7:e1:b2:1a:b3:bc:86:d9:
         b1:ba:5b:a1:75:4d:ac:a8:52:31:e4:d8:b1:ee:b6:bc:97:99:
         97:76:e7:8e:0a:9b:3b:db:a7:28:99:f7:5c:0a:ee:cc:81:4e:
         b1:3d:81:ed:ef:c6:40:ef:81:c7:6e:9d:ab:28:cf:fe:27:b9:
         b5:e0:63:b3:2a:58:72:f6:e0:ab:78:3b:d4:9f:fd:6b:7e:e0:
         a2:43:81:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:41 2025 by rpki-client