Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa
File:                     8857f622-c477-3dfb-a61e-c651670d500b.roa (raw, json)
Hash identifier:          hofspNpZw7khAUpTbAunK1byxND41u/yv+5SdVYIDUs=
Subject key identifier:   0F:01:E8:9A:EE:6E:B1:C8:6F:BA:90:53:46:9B:67:30:AE:FE:66:CB
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A74B5DE97E2BB356385A32700
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     30238
IP address blocks:        207.54.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:de:97:e2:bb:35:63:85:a3:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=aec1810b-8ca3-4797-b5de-ca90bfd02d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:f3:89:b9:6d:05:44:73:0d:bd:1c:8d:13:
                    13:49:58:f0:0d:58:f2:c1:e5:00:57:ac:b4:f7:31:
                    07:c9:6e:9f:9c:0b:7b:e0:1d:0f:db:77:2a:2c:c0:
                    a5:26:88:33:02:61:18:48:55:54:8e:28:d0:bb:e9:
                    1b:d2:67:0d:43:d0:47:ca:5e:9d:ca:17:0d:e5:b0:
                    05:94:bd:f0:21:b2:c4:2a:22:ec:ad:28:d9:68:47:
                    9c:3a:6a:98:f9:3a:47:73:d6:91:f4:89:ae:54:f3:
                    66:38:95:76:f6:bc:37:2d:00:6f:aa:97:30:70:da:
                    79:8c:78:88:8d:6c:3b:fe:c4:dc:33:43:8c:9b:18:
                    98:2a:54:3d:35:55:1b:96:ee:b2:6f:57:ef:96:88:
                    c2:ef:cd:2f:a6:20:0c:98:e8:3d:7e:37:50:c3:f0:
                    c8:a2:d2:0f:2d:da:d6:84:d7:b2:59:79:39:ea:11:
                    4e:04:a8:9e:9f:63:50:8c:3f:1e:7f:e2:df:59:0f:
                    5d:b7:28:15:a6:52:35:f8:4a:50:f7:35:1c:21:7e:
                    87:d3:e9:d4:db:32:f6:6b:61:63:c6:d1:ae:0e:56:
                    f8:9d:44:a8:7e:11:c2:ac:6a:d2:de:62:b6:fe:98:
                    13:31:f9:70:32:9d:fd:ce:34:ab:db:52:b8:43:58:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:01:E8:9A:EE:6E:B1:C8:6F:BA:90:53:46:9B:67:30:AE:FE:66:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e3:20:7f:73:8b:6f:61:41:a4:f8:8d:bf:44:24:a4:2c:a9:
         8d:e5:1f:19:41:f6:7c:21:fe:44:e6:0c:4a:68:d9:f4:2a:bf:
         d8:6f:a7:22:5d:57:2e:b6:a1:15:ff:da:cb:69:6c:4c:34:4c:
         ff:2f:5a:35:fa:25:0a:63:52:b8:ed:c0:35:fa:40:75:04:99:
         4a:d0:e4:51:ac:6d:2e:62:cc:27:95:d1:c3:9d:f5:02:3b:8d:
         67:c9:ea:21:f4:8e:d1:9d:98:d7:97:db:f3:dd:7b:c2:fb:c8:
         b7:4c:d5:6f:d7:72:37:da:79:b6:d2:64:53:05:53:64:61:ca:
         82:4e:93:23:c8:e8:df:24:98:09:85:a8:02:11:a0:10:9e:09:
         20:e5:ec:04:97:7f:d9:8d:e2:4b:05:b1:cb:4e:31:a2:02:ef:
         7a:9a:cb:d5:80:24:02:cc:a5:f0:ee:de:6b:b6:e8:a6:7d:71:
         56:2a:6e:90:c3:16:31:5f:10:93:df:88:c3:70:80:27:be:7b:
         68:38:18:26:16:7f:7d:73:b8:07:0e:9f:f3:56:98:d6:51:dd:
         68:94:13:ac:4e:4f:1e:c8:8e:94:40:b7:3b:25:6c:b8:d6:fd:
         8b:14:23:f9:34:fb:cd:9a:92:9b:81:40:37:55:b2:96:6e:29:
         00:90:f5:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0td6X4rs1Y4WjJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
YWVjMTgxMGItOGNhMy00Nzk3LWI1ZGUtY2E5MGJmZDAyZDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieXzibltBURzDb0cjRMTSVjwDVjyweUAV6y0
9zEHyW6fnAt74B0P23cqLMClJogzAmEYSFVUjijQu+kb0mcNQ9BHyl6dyhcN5bAF
lL3wIbLEKiLsrSjZaEecOmqY+TpHc9aR9ImuVPNmOJV29rw3LQBvqpcwcNp5jHiI
jWw7/sTcM0OMmxiYKlQ9NVUblu6yb1fvlojC780vpiAMmOg9fjdQw/DIotIPLdrW
hNeyWXk56hFOBKien2NQjD8ef+LfWQ9dtygVplI1+EpQ9zUcIX6H0+nU2zL2a2Fj
xtGuDlb4nUSofhHCrGrS3mK2/pgTMflwMp39zjSr21K4Q1hCiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8B6JrubrHIb7qQU0abZzCu/mbLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODg1N2Y2MjItYzQ3Ny0z
ZGZiLWE2MWUtYzY1MTY3MGQ1MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDjIH9zi29hQaT4jb9EJKQsqY3lHxlB9nwh/kTmDEpo2fQqv9hvpyJd
Vy62oRX/2stpbEw0TP8vWjX6JQpjUrjtwDX6QHUEmUrQ5FGsbS5izCeV0cOd9QI7
jWfJ6iH0jtGdmNeX2/Pde8L7yLdM1W/XcjfaebbSZFMFU2RhyoJOkyPI6N8kmAmF
qAIRoBCeCSDl7ASXf9mN4ksFsctOMaIC73qay9WAJALMpfDu3mu26KZ9cVYqbpDD
FjFfEJPfiMNwgCe+e2g4GCYWf31zuAcOn/NWmNZR3WiUE6xOTx7IjpRAtzslbLjW
/YsUI/k0+82akpuBQDdVspZuKQCQ9Qs=
-----END CERTIFICATE-----
Generated at Thu Jul 10 08:39:50 2025 by rpki-client