Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/87c1d39f-751f-3b3c-bada-1097f05b22ca.roa
File:                     87c1d39f-751f-3b3c-bada-1097f05b22ca.roa (raw, json)
Hash identifier:          MGWm314Gw3rBoJs+eQ7ypP5xHhUkxpq1h0zJqUdIRPU=
Subject key identifier:   C7:72:89:B2:5E:C4:A5:80:F4:5E:7E:73:52:89:16:E7:D4:39:03:76
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E5A4A01A0C4F6B2BEB1A41100
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/87c1d39f-751f-3b3c-bada-1097f05b22ca.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     30238
IP address blocks:        207.54.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:01:a0:c4:f6:b2:be:b1:a4:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=aed24127-5274-4643-af85-5057d820738b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:8c:bc:64:57:ce:53:6f:17:ab:49:0f:ba:
                    57:c8:ee:3c:09:64:68:90:44:47:a2:f7:eb:ab:35:
                    18:80:03:e1:16:47:0b:b7:ee:34:8d:18:4e:4b:6d:
                    1a:23:53:a1:fb:f4:c6:cf:75:44:05:cc:87:9c:e6:
                    93:fe:14:8d:50:15:b6:37:7b:49:df:74:42:32:b2:
                    18:55:53:12:17:c6:40:96:99:9b:69:ab:5a:69:5a:
                    81:c1:8f:91:5f:47:27:db:bb:bd:9e:e6:c4:6a:7d:
                    42:77:bb:10:4c:a9:18:74:03:6c:cd:5b:0a:0b:c3:
                    bf:60:5a:68:40:f7:6b:1f:76:44:d9:0b:d9:8f:82:
                    1a:3d:cd:dc:0b:e3:a5:82:31:a2:ca:e8:31:9e:37:
                    30:e2:a9:91:1e:9d:ba:05:a3:7f:c3:7f:5d:75:9b:
                    51:63:ca:71:5b:c2:9a:c7:e0:62:74:f8:db:9f:aa:
                    af:24:02:75:6d:f7:aa:67:25:ea:99:cd:b3:aa:bf:
                    69:e9:01:92:63:0c:cd:a2:b0:79:f8:fd:4a:67:53:
                    79:30:4c:04:4d:55:46:27:02:61:01:7b:dc:43:c4:
                    50:8a:7c:a7:88:77:15:e1:97:1a:fe:74:9c:43:51:
                    cc:30:0b:9f:5b:28:28:66:bf:21:38:fa:a7:84:f6:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:72:89:B2:5E:C4:A5:80:F4:5E:7E:73:52:89:16:E7:D4:39:03:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/87c1d39f-751f-3b3c-bada-1097f05b22ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:d8:10:fd:63:f0:e5:7b:ba:ff:70:cb:55:f2:7b:86:47:
         28:32:53:6f:a3:4a:1d:11:ef:e9:5f:50:5e:eb:b0:e4:9f:c5:
         26:67:a8:14:47:cd:5c:09:dd:7d:5d:07:ba:88:cb:7e:7b:f6:
         42:6f:f5:2d:27:bd:a3:b7:37:fd:fd:eb:dc:d9:77:7b:09:58:
         6f:0a:8e:85:ef:03:c2:1c:af:d0:f8:40:30:cf:d6:8f:29:3b:
         60:a7:5b:2e:a3:8e:53:b4:e7:6d:77:0d:27:19:42:ac:cd:c5:
         93:e8:54:2a:d8:0e:76:a4:5a:70:23:10:3c:4c:8c:d6:b9:32:
         7e:4c:89:a0:8b:b5:e0:fd:8b:76:b6:62:de:ea:92:57:41:d0:
         87:4c:59:f2:80:2b:da:78:5d:56:47:e3:f7:6a:64:b0:39:83:
         8d:23:f9:c6:a1:01:cd:f7:8d:b1:82:24:28:7c:80:14:42:f6:
         db:80:5a:96:05:a5:a1:23:49:e0:55:63:b2:27:8e:20:59:34:
         2d:fa:bc:1f:4c:bb:bd:7a:07:98:e7:6a:fe:f9:73:01:45:b7:
         13:71:74:cf:0f:c6:1a:19:09:58:a0:c0:b1:72:b8:11:76:5e:
         8e:7a:c2:72:d0:fc:c7:ae:85:03:88:af:5e:08:43:04:80:1d:
         25:36:93:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgGgxPayvrGkEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
YWVkMjQxMjctNTI3NC00NjQzLWFmODUtNTA1N2Q4MjA3MzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF6MvGRXzlNvF6tJD7pXyO48CWRokERHovfr
qzUYgAPhFkcLt+40jRhOS20aI1Oh+/TGz3VEBcyHnOaT/hSNUBW2N3tJ33RCMrIY
VVMSF8ZAlpmbaataaVqBwY+RX0cn27u9nubEan1Cd7sQTKkYdANszVsKC8O/YFpo
QPdrH3ZE2QvZj4IaPc3cC+OlgjGiyugxnjcw4qmRHp26BaN/w39ddZtRY8pxW8Ka
x+BidPjbn6qvJAJ1bfeqZyXqmc2zqr9p6QGSYwzNorB5+P1KZ1N5MEwETVVGJwJh
AXvcQ8RQinyniHcV4Zca/nScQ1HMMAufWygoZr8hOPqnhPZiAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdyibJexKWA9F5+c1KJFufUOQN2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODdjMWQzOWYtNzUxZi0z
YjNjLWJhZGEtMTA5N2YwNWIyMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd/2BD9Y/Dle7r/cMtV8nuGRygyU2+jSh0R7+lfUF7rsOSfxSZnqBRH
zVwJ3X1dB7qIy3579kJv9S0nvaO3N/3969zZd3sJWG8KjoXvA8Icr9D4QDDP1o8p
O2CnWy6jjlO05213DScZQqzNxZPoVCrYDnakWnAjEDxMjNa5Mn5MiaCLteD9i3a2
Yt7qkldB0IdMWfKAK9p4XVZH4/dqZLA5g40j+cahAc33jbGCJCh8gBRC9tuAWpYF
paEjSeBVY7InjiBZNC36vB9Mu716B5jnav75cwFFtxNxdM8PxhoZCVigwLFyuBF2
Xo56wnLQ/MeuhQOIr14IQwSAHSU2k6s=
-----END CERTIFICATE-----
Generated at Tue Jul 14 11:54:41 2026 by rpki-client