Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa
File:                     bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa (raw, json)
Hash identifier:          OolSggY+voL/SD8Rwn4yXAA9rCH4hAZNqfNBOzqYK88=
Subject key identifier:   1A:B2:58:4F:04:E5:A4:D9:52:19:FB:C3:48:DE:71:35:55:3B:6E:40
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E5A4A01944FB3B8E99026E380
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     30238
IP address blocks:        207.54.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:01:94:4f:b3:b8:e9:90:26:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=8719b0b6-57e1-46a8-bd13-eea8f9930c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:75:32:d0:cd:af:9a:24:97:33:23:e6:12:
                    50:25:db:95:09:9d:be:3b:57:e2:24:f9:95:f4:b6:
                    ce:4f:2f:ef:18:af:c8:59:f7:11:24:ad:bc:93:4d:
                    7a:ea:f7:e6:8b:c9:be:9e:69:a5:11:3b:a1:fd:f9:
                    46:aa:3c:d2:54:f2:d1:df:20:8f:76:f4:db:ba:66:
                    58:23:dc:44:4f:a3:a0:bd:c2:45:76:0f:1e:c9:da:
                    1d:e3:f2:c7:82:10:50:9c:09:b2:ee:46:8c:c5:87:
                    f8:b2:97:c5:8d:2d:61:c1:ad:c1:5c:ac:56:07:75:
                    0f:e7:d9:11:6b:1c:10:cb:f9:2e:51:f6:43:06:39:
                    3c:51:6b:a1:a6:6c:1a:65:90:d3:54:a4:37:16:05:
                    7b:0d:4a:60:a8:d3:2d:d4:b8:1f:ec:ce:b8:e5:6d:
                    32:a6:cf:fc:fb:2e:7c:8e:eb:c5:f6:92:39:36:87:
                    2b:73:5d:0c:f9:03:b8:bb:a1:d1:83:3c:48:ad:59:
                    8b:14:55:02:0f:f9:0c:9e:1a:8d:90:ba:10:e9:c0:
                    51:63:1b:ec:de:84:b3:03:bd:56:96:22:9a:bc:e4:
                    7d:13:d7:b6:09:ae:94:de:28:be:31:35:e0:2d:2e:
                    36:2b:00:91:a7:53:24:28:18:a9:5c:ea:d2:07:c5:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:58:4F:04:E5:A4:D9:52:19:FB:C3:48:DE:71:35:55:3B:6E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:9c:6f:68:d4:bf:39:a3:10:e3:5e:81:69:c2:19:d0:76:
         02:9d:e0:14:98:b8:1e:a6:7a:ea:c3:95:41:5a:d3:bc:52:a8:
         8c:e5:ce:a3:69:f0:6c:f4:f6:3e:dd:db:bf:59:37:2d:10:12:
         0e:84:70:b3:9b:da:be:a4:61:0d:18:50:5a:02:40:1e:d9:84:
         96:ed:0e:13:ed:0b:9f:04:87:6d:13:7c:23:ae:5a:cc:b1:2a:
         8a:f7:52:c1:0e:80:66:c9:35:b4:93:20:82:15:38:7a:76:2b:
         65:5a:2b:bd:45:e3:7b:85:b1:2e:01:03:8c:05:b1:cd:dd:d9:
         a5:58:f1:2b:de:d0:d9:01:2e:28:ec:cc:38:22:89:17:2a:fe:
         a2:c3:ee:b8:69:e6:15:a9:c8:a5:06:32:13:89:dc:64:40:ca:
         04:c4:1a:b3:a5:7c:23:1a:5f:84:70:ce:55:05:6f:49:87:07:
         e1:8a:c1:94:9b:75:34:3d:94:78:6f:b5:a8:91:63:de:41:b7:
         0e:46:a2:d7:3f:f6:b2:ce:c2:52:c0:7b:7d:30:8c:6a:a1:ad:
         6e:4d:1b:ad:7a:5d:65:f9:f3:c9:f6:e7:ea:12:6b:75:21:59:
         86:67:c2:fc:8c:75:e5:03:32:61:2e:f4:13:5e:f1:de:f9:90:
         ed:41:d0:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgGUT7O46ZAm44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
ODcxOWIwYjYtNTdlMS00NmE4LWJkMTMtZWVhOGY5OTMwYzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqZ1MtDNr5oklzMj5hJQJduVCZ2+O1fiJPmV
9LbOTy/vGK/IWfcRJK28k0166vfmi8m+nmmlETuh/flGqjzSVPLR3yCPdvTbumZY
I9xET6OgvcJFdg8eydod4/LHghBQnAmy7kaMxYf4spfFjS1hwa3BXKxWB3UP59kR
axwQy/kuUfZDBjk8UWuhpmwaZZDTVKQ3FgV7DUpgqNMt1Lgf7M645W0yps/8+y58
juvF9pI5Nocrc10M+QO4u6HRgzxIrVmLFFUCD/kMnhqNkLoQ6cBRYxvs3oSzA71W
liKavOR9E9e2Ca6U3ii+MTXgLS42KwCRp1MkKBipXOrSB8WRIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqyWE8E5aTZUhn7w0jecTVVO25AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmFiMDUzMzMtMjdlOS0z
MDRhLTg0YTYtZWEwYTViODdiNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8TnG9o1L85oxDjXoFpwhnQdgKd4BSYuB6meurDlUFa07xSqIzlzqNp
8Gz09j7d279ZNy0QEg6EcLOb2r6kYQ0YUFoCQB7ZhJbtDhPtC58Eh20TfCOuWsyx
Kor3UsEOgGbJNbSTIIIVOHp2K2VaK71F43uFsS4BA4wFsc3d2aVY8Sve0NkBLijs
zDgiiRcq/qLD7rhp5hWpyKUGMhOJ3GRAygTEGrOlfCMaX4RwzlUFb0mHB+GKwZSb
dTQ9lHhvtaiRY95Btw5Gotc/9rLOwlLAe30wjGqhrW5NG616XWX588n25+oSa3Uh
WYZnwvyMdeUDMmEu9BNe8d75kO1B0Js=
-----END CERTIFICATE-----
Generated at Tue Jul 14 11:59:54 2026 by rpki-client