Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/51011c21-340d-39c4-b750-06a7135bf50a.roa
File:                     51011c21-340d-39c4-b750-06a7135bf50a.roa (raw, json)
Hash identifier:          M/BxmyrZI19lznvCsZLJUjgN+cJXg49R6IYO9ycE0io=
Subject key identifier:   67:54:B6:62:19:8D:41:C2:9E:22:C8:A6:B6:78:F1:D1:70:2B:97:73
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584EFCACC73B66CF729FEC691500
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/51011c21-340d-39c4-b750-06a7135bf50a.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     30238
IP address blocks:        207.54.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c7:3b:66:cf:72:9f:ec:69:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=b07d560e-7f13-42c3-b250-7fc35997ddd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:2e:e6:6a:ca:c8:c2:bb:d0:cd:f0:dc:b3:
                    6a:9d:6c:90:c6:3a:15:3b:96:13:7b:94:24:e6:4f:
                    b0:7c:12:89:51:15:ed:22:55:f1:11:29:ab:1f:f3:
                    71:b1:6e:dc:26:1c:a9:66:79:c5:d2:56:59:04:d5:
                    fd:12:50:ad:de:61:28:03:08:54:21:c9:a6:ce:85:
                    65:6e:c3:27:6b:11:92:82:34:e5:f0:df:dd:73:62:
                    23:0d:93:21:b3:7c:af:22:83:33:c7:56:02:45:4a:
                    73:aa:e1:2d:40:bd:36:b7:81:b6:c5:16:81:81:0b:
                    28:b2:98:87:7b:f7:20:f7:3e:db:65:1b:f1:e6:a5:
                    97:1b:9e:c4:ca:a0:c3:3c:fc:bf:36:94:b6:38:6d:
                    86:1f:81:c9:af:0d:0c:d0:ef:83:9d:f2:e2:30:16:
                    ba:c9:0f:21:3c:6f:fd:a9:9a:ef:c6:5e:f8:29:79:
                    8e:66:ca:db:ab:b4:c2:98:cb:d5:a2:0e:25:39:9b:
                    8d:87:cd:2b:27:a7:b7:cd:5e:3f:79:b9:6e:03:16:
                    c9:f9:36:83:d6:08:e4:35:a9:e2:99:be:4c:06:12:
                    33:89:19:d4:2c:a8:c0:b6:fd:ea:c9:04:3f:db:d4:
                    60:6a:34:52:0b:d1:ff:83:81:23:11:83:10:62:b1:
                    bb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:54:B6:62:19:8D:41:C2:9E:22:C8:A6:B6:78:F1:D1:70:2B:97:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/51011c21-340d-39c4-b750-06a7135bf50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6c:16:42:89:63:7b:9b:60:a5:a0:06:97:0a:1d:d5:6f:b5:
         b1:db:0c:f8:6c:cf:b1:af:9f:17:c9:95:1c:67:b9:a4:e7:d2:
         53:7b:4d:b3:22:ce:f2:a3:35:66:1f:b7:13:c8:1f:cd:9d:84:
         8a:eb:e9:60:f0:80:a0:4f:39:4b:ad:aa:40:4c:15:46:41:87:
         87:df:3f:be:82:a8:83:ad:fa:c3:59:c5:6b:14:10:f6:ac:4a:
         ce:fe:11:7f:4e:62:f3:08:7b:2b:f3:3f:be:18:db:b8:93:f6:
         3e:d8:30:f3:07:48:b1:3b:2d:1d:90:8e:ff:39:e7:bb:d0:f8:
         b9:7e:1d:8b:1f:57:8c:81:96:db:08:09:8a:47:eb:93:a2:f8:
         43:10:2c:41:bd:27:7a:2e:45:4f:1e:47:42:5f:cf:ab:b1:fc:
         49:b9:cb:f0:ee:5e:95:b7:39:b7:14:87:80:26:65:1f:ba:f9:
         ca:47:09:46:13:94:86:1f:f3:9a:09:fb:34:fb:2c:48:44:4f:
         46:b2:ca:5c:a7:42:82:20:a2:11:8e:98:42:a3:4b:57:23:b0:
         df:c7:3f:92:fd:26:1b:5c:90:26:e7:9b:de:df:46:35:cc:3f:
         0e:d1:34:92:48:7f:5c:e0:94:f8:4a:59:38:c0:39:c2:8e:da:
         a7:6e:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:27:32 2026 by rpki-client