Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c9b570f3-be8b-3087-95ea-7994132d14d4.roa
File:                     c9b570f3-be8b-3087-95ea-7994132d14d4.roa (raw, json)
Hash identifier:          HnlZzHXWjydPoueOEdcQ9AJOpGl+8SV0ZmmG2+D5xDI=
Subject key identifier:   09:8D:2F:C6:28:10:28:DF:1A:84:FB:43:06:F4:AD:4D:15:77:05:6A
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849C4D4C8B7536EEA81715144C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c9b570f3-be8b-3087-95ea-7994132d14d4.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16417
IP address blocks:        207.54.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c8:b7:53:6e:ea:81:71:51:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=222b7650-9375-4a1c-b723-29817b56b9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:c9:d6:18:a0:08:cb:61:2b:40:1c:7c:e6:
                    2e:c3:57:c5:ec:3f:e1:df:61:66:50:95:ff:4a:82:
                    28:f4:e3:64:74:c8:c8:ad:02:d4:9e:2b:bc:cb:f8:
                    6e:05:73:ff:8a:1c:d9:27:ab:f7:78:9e:78:1d:7a:
                    76:5b:bc:fb:5a:44:ae:7e:59:73:4f:d1:aa:f9:41:
                    6b:8a:86:e5:24:4e:c3:3b:0d:2d:d1:c7:79:0d:2c:
                    67:75:a0:46:54:60:90:89:c5:b2:a7:87:f9:4a:fb:
                    b7:52:62:ca:9e:86:79:7b:82:09:a1:63:30:40:6c:
                    06:9e:a7:62:b0:17:97:2c:f4:74:7a:c8:14:da:79:
                    24:69:9e:7f:3d:39:b9:ad:37:73:2b:78:ca:1e:d0:
                    1d:ae:9f:e4:3d:84:e3:f2:b0:91:32:30:e9:7b:df:
                    57:fc:00:c2:f3:84:03:05:c7:e3:32:a1:a1:c0:b0:
                    a4:8c:c8:a0:e1:a4:4a:b0:d8:db:41:7f:e7:bd:46:
                    bf:a9:4d:9c:0a:f4:01:c6:28:a6:0a:85:66:a8:67:
                    64:fc:e3:1a:f1:b2:4b:7c:fd:5f:a7:5f:1b:1a:72:
                    54:90:cd:ae:36:15:39:12:41:91:bc:2a:15:98:aa:
                    15:79:08:59:f5:c6:e7:ca:dc:2d:b2:3a:9a:31:5a:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8D:2F:C6:28:10:28:DF:1A:84:FB:43:06:F4:AD:4D:15:77:05:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c9b570f3-be8b-3087-95ea-7994132d14d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:e3:46:98:be:d4:f0:3b:cb:50:3e:84:bf:82:f1:05:22:
         af:bc:af:a9:f2:d4:82:64:e4:66:8c:1d:cc:37:8f:cc:b4:e1:
         11:35:d0:6e:7f:47:a1:84:3a:56:96:2a:89:e8:fa:ae:73:26:
         31:8b:3a:53:b8:34:32:af:3d:ca:3d:b4:c4:50:9c:86:e8:8e:
         ad:a4:16:35:1c:a8:24:3f:ec:20:6f:09:ee:25:c6:0b:87:19:
         60:f1:5c:d6:10:81:21:32:e1:71:84:0a:90:78:10:81:67:99:
         1b:bd:ad:8b:ec:45:01:14:1a:a6:ab:e8:bb:de:9e:22:b3:83:
         38:ce:f6:13:66:2e:a9:97:60:f0:5b:9f:fa:d0:ad:5a:d1:81:
         dc:65:f8:01:62:3a:75:3f:e6:77:40:94:a0:ed:a7:1e:bd:cf:
         da:4c:81:79:5e:03:d6:7c:b8:e8:e8:8b:43:6f:35:47:bf:2b:
         b2:12:91:86:3f:56:ed:ad:00:ad:9b:1b:d2:da:44:b4:4c:eb:
         eb:aa:c0:44:6a:2b:c9:34:00:e4:88:0c:89:a6:74:43:61:b0:
         8e:51:8c:80:30:08:b0:19:54:fb:3d:8b:1c:a3:92:d9:9e:13:
         2f:08:d8:26:ca:a5:08:d6:b9:5c:9e:ae:a9:db:be:0f:50:b0:
         31:9f:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:40:39 2025 by rpki-client