Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa
File:                     40d5764e-ec09-3c7c-9d71-4441076559a5.roa (raw, json)
Hash identifier:          zkHb1BqNL2NK3J0+sNHevEPaHD1bvM+0jjMx8W98yIo=
Subject key identifier:   CB:9E:6D:E8:96:87:F8:72:77:39:49:03:DF:D2:24:EE:4B:5F:91:EA
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584EFCACCCDB33ED2517002D47C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     30238
IP address blocks:        207.54.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:cc:db:33:ed:25:17:00:2d:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=1058f147-2207-4c8a-ad69-8ed450999cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:9c:f6:0c:2f:14:87:e0:48:0d:04:b8:3c:
                    dd:db:b0:a6:22:9e:ac:79:a4:86:ca:84:76:07:fb:
                    45:f6:a9:a9:3b:4d:c9:2e:2c:fa:0f:96:ec:fd:7c:
                    ab:72:c2:aa:6e:39:62:64:d9:0f:c4:c4:24:95:67:
                    56:6f:c6:1d:77:bc:cb:12:ec:db:f8:44:3c:e8:a8:
                    2a:f7:e3:e5:53:18:4c:92:68:f4:05:23:4b:63:ea:
                    79:5b:de:53:47:ea:5b:6d:87:8b:96:9e:6a:c1:e6:
                    2a:db:93:8b:67:60:68:7b:2c:ed:9b:04:1d:a9:6d:
                    29:0b:34:9e:ea:a3:46:7b:e2:20:4f:ed:82:c2:f7:
                    ca:47:06:48:e8:36:e3:75:ee:93:e9:68:0b:a7:0e:
                    b6:68:3a:36:c5:53:ae:ce:9b:2c:ba:0e:53:3a:33:
                    1b:53:2e:f0:d3:81:10:c7:2c:2e:b8:85:81:09:43:
                    49:ca:69:8a:67:fe:5f:d0:40:18:6d:70:25:c7:1d:
                    d5:7c:b2:dd:0c:9e:45:43:d4:7f:3c:9b:9b:14:52:
                    39:12:13:4a:5a:af:78:02:b0:6d:08:83:30:33:8f:
                    28:77:de:e7:ae:12:d1:61:cd:e5:69:03:15:96:3b:
                    37:f4:84:b1:eb:ed:7e:f8:25:7e:67:9a:00:1e:a6:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9E:6D:E8:96:87:F8:72:77:39:49:03:DF:D2:24:EE:4B:5F:91:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40d5764e-ec09-3c7c-9d71-4441076559a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:29:54:83:d3:fa:24:94:68:98:a2:33:9d:27:75:cd:47:
         87:75:68:3a:60:f6:ac:78:80:e8:3a:c3:f6:64:bb:70:97:f7:
         f9:f1:5b:c7:d3:09:ea:e1:0a:7b:70:a4:26:9a:a7:03:d8:a9:
         61:dd:b9:f7:31:a1:30:61:f2:37:f9:7b:a0:31:11:b4:c3:92:
         a2:07:fe:bf:d8:2e:c9:7c:a2:6f:6a:a2:7b:a7:54:25:a1:45:
         63:25:2a:39:3f:84:cd:a3:d1:bb:90:c6:95:1c:55:c3:11:8c:
         29:54:78:66:90:84:42:f2:ca:66:2f:da:45:5b:2e:8c:8f:e8:
         2e:df:51:1a:ca:8c:35:22:68:6f:69:50:ef:b2:5a:03:af:4e:
         8e:b1:af:25:0c:aa:90:ce:2b:06:9e:0b:88:8b:8f:6d:58:cb:
         af:86:f5:66:d7:68:3d:1f:85:39:0b:ea:6b:de:a2:35:43:ad:
         07:09:55:ed:20:3c:b3:09:87:76:29:e6:7e:9d:19:43:a0:6f:
         9c:9e:9d:e4:98:f5:de:3c:d2:7c:5f:c6:12:13:cc:d5:ec:cd:
         7a:c9:f7:08:5e:07:ac:75:19:b5:e5:e8:9f:89:56:37:0b:b6:
         51:e3:df:68:00:c5:8a:0c:9f:fd:8f:3c:42:8e:71:9a:93:41:
         ce:ca:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:27:05 2026 by rpki-client