Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa
File:                     0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa (raw, json)
Hash identifier:          CqVssj4HKLpUhg0PlaMS7St28gJUTXBSwZYbChgytyo=
Subject key identifier:   B7:9B:2E:DB:CE:E0:7B:9C:6A:23:CE:93:7D:6B:F6:23:73:56:AC:6E
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E6F3A4401DB5E19ED6B8F4D00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     30238
IP address blocks:        207.54.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:44:01:db:5e:19:ed:6b:8f:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=bfe6a1d3-7af7-4962-94c7-b1f473917062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:28:e4:03:5a:a6:75:30:5c:ea:02:cb:49:aa:
                    b2:99:e2:92:f2:0c:7d:98:73:2f:cb:b7:82:91:3d:
                    72:5b:ef:7b:8f:28:53:0b:23:eb:b3:dc:a7:91:02:
                    da:88:f6:60:f2:e7:fa:da:bf:cc:42:4f:ed:b3:49:
                    82:19:4b:30:e9:2f:71:03:9a:8e:e8:5e:a6:7b:3c:
                    74:c4:72:05:1e:12:ab:46:8b:71:5b:85:bd:9e:37:
                    25:10:d1:e8:37:cd:93:96:64:ce:08:48:62:6c:0c:
                    0d:97:41:1a:80:40:f6:a5:78:98:66:ec:1c:22:83:
                    f1:b9:e6:4e:5c:a5:68:e3:ff:9f:ed:84:bf:b1:e8:
                    99:68:af:a5:9c:f2:2c:cf:2c:06:7e:2a:82:93:69:
                    7f:01:89:20:2d:ad:79:6d:dd:01:b9:03:18:01:3c:
                    21:1e:ff:fe:a1:e5:dc:16:15:db:b6:b4:6a:52:5f:
                    99:04:64:a2:ee:ea:58:61:79:79:91:d2:02:a5:ee:
                    c2:ea:eb:7a:1f:8b:2e:01:ca:28:c3:cc:89:73:07:
                    f6:16:92:45:00:90:40:41:3b:a2:c6:39:4f:e1:00:
                    09:f0:b1:e7:83:e5:64:88:00:e4:da:16:71:b0:6f:
                    c2:44:e4:82:24:29:5c:a5:30:4d:d5:41:fb:0c:95:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:2E:DB:CE:E0:7B:9C:6A:23:CE:93:7D:6B:F6:23:73:56:AC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:96:47:85:07:ef:4c:fa:1e:ae:42:f8:60:35:50:79:c3:55:
         75:ce:5a:ec:71:5d:e4:e2:4d:71:f5:11:a2:e2:34:66:14:a0:
         0e:4f:0a:41:cc:0b:48:a0:15:2f:22:e9:05:fa:01:be:bd:e4:
         01:38:d7:11:6f:40:42:af:87:be:3a:de:8b:87:85:2c:e2:ea:
         32:e4:22:68:95:90:1c:a0:d6:af:e1:f2:98:33:d5:cb:eb:94:
         96:d9:04:b6:db:7b:c5:75:30:f0:7c:54:4b:7e:b7:be:07:11:
         d2:9c:be:f2:09:38:ab:b3:dc:43:29:19:8a:cd:ff:4b:e7:16:
         b8:87:69:7e:ad:ec:bc:40:ee:60:03:08:17:25:9e:21:7a:a1:
         86:7e:a8:3e:10:a3:95:de:ea:6e:6d:46:29:36:ae:54:0a:f7:
         44:97:6e:d5:cb:09:52:98:10:3a:81:e4:f1:7a:2b:14:4a:a6:
         5f:63:f0:cc:17:5a:49:a3:46:01:46:de:0f:e8:1b:ac:c5:70:
         6b:33:8a:ba:97:41:b0:38:5e:07:87:9f:af:86:a8:55:4f:10:
         07:60:2f:58:75:ff:1e:30:16:6b:b5:f6:65:ab:e0:2a:57:b9:
         7d:9b:7b:8c:bd:4e:b5:21:bb:44:f3:a2:5e:81:2b:a4:8f:db:
         84:fb:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:57:01 2026 by rpki-client