Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa
File:                     40d5764e-ec09-3c7c-9d71-4441076559a5.roa (raw, json)
Hash identifier:          6bnlQ0wVQpLjpL2U075zv8UuDk2VvwTA6xaFsRq30LE=
Subject key identifier:   A8:DE:2D:B7:DA:65:95:51:76:DE:40:10:52:2A:69:C7:F8:15:1E:B1
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E5A4A0219228D4222229E0280
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     30238
IP address blocks:        207.54.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:02:19:22:8d:42:22:22:9e:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=d30df7c1-31b2-4b73-b749-2a8025badfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:6f:eb:b3:06:ab:43:5a:18:e1:93:d2:e5:
                    82:91:8a:01:08:07:7f:8e:2a:d2:90:4e:b7:40:bd:
                    2e:b5:02:b7:b5:9c:16:a5:0d:66:bc:e5:68:14:fe:
                    09:5d:61:c5:c9:4e:a3:3b:8c:54:a7:02:b5:2d:66:
                    f2:54:62:2d:f1:d0:ff:d6:59:38:aa:d5:2c:2c:1c:
                    06:b2:67:e1:cb:51:05:b9:b4:97:6f:78:5d:a9:fd:
                    41:15:c6:24:6c:81:2a:63:4b:4f:42:80:9e:6f:c2:
                    e1:88:ab:f0:88:c6:d3:e0:24:48:c5:99:ce:54:b1:
                    7e:d2:a7:1e:b6:30:41:85:bf:da:50:64:b1:1f:5e:
                    12:2a:ed:05:82:88:c2:07:a1:a0:7b:d0:da:0a:29:
                    6b:82:ad:69:97:31:da:98:dd:ef:24:03:bb:50:00:
                    fb:db:d5:a7:af:fd:89:ea:50:43:69:47:bb:77:6b:
                    00:27:63:b4:e6:36:23:28:a7:11:8f:5f:eb:1c:da:
                    07:f8:14:48:73:4d:90:9c:59:6f:6e:63:f6:a8:81:
                    69:d6:d3:79:0d:bb:8a:ee:d3:36:36:0a:57:ec:69:
                    21:97:64:b0:36:42:24:cd:ef:03:ae:3f:51:c4:bf:
                    ed:c8:bb:7c:17:b9:f2:88:d8:8e:20:18:f5:03:06:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:2D:B7:DA:65:95:51:76:DE:40:10:52:2A:69:C7:F8:15:1E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:45:1f:7e:4c:7f:ab:00:84:a1:2c:fe:d4:20:30:c5:2b:
         c1:5a:96:58:18:fa:dd:17:73:72:e3:ba:f2:19:d0:12:f1:3a:
         c6:bc:04:a5:ee:2e:66:63:56:7b:33:53:85:82:d8:d6:02:52:
         cd:db:60:4a:5f:88:4a:bf:a7:04:8e:4d:7f:f9:89:0f:0b:83:
         ec:e8:0c:46:5f:54:bc:e3:75:b2:4f:63:06:0c:2c:f2:26:e0:
         b1:b5:f7:3a:14:cc:a0:e6:3c:cf:a2:06:85:7f:50:17:38:90:
         ba:67:40:08:11:48:ed:26:cf:60:ae:27:49:07:e2:7e:a5:d6:
         86:8e:bc:32:84:a8:fd:bb:08:c9:d1:2c:fe:fe:c4:42:b3:0a:
         d4:86:7f:0f:53:0f:b3:b8:12:7b:32:8b:54:af:e3:e3:d5:a1:
         83:a1:25:02:18:af:58:66:85:83:e8:53:18:06:3e:0c:1d:02:
         b7:58:67:08:24:3e:5d:9c:35:d4:e2:f6:22:06:90:fb:0b:ed:
         16:d9:c3:8c:b7:9b:42:43:3d:bf:53:ec:6f:19:f8:9b:a2:f2:
         51:12:22:eb:1e:54:70:59:3e:4f:bf:6a:40:68:ef:35:3b:53:
         61:c0:2a:d4:bd:7d:54:1e:8a:81:e3:fb:b5:fe:e0:be:b4:29:
         18:f4:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 12:00:49 2026 by rpki-client