Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/78e56912-0c86-35fc-ad49-ae697530c394.roa
File:                     78e56912-0c86-35fc-ad49-ae697530c394.roa (raw, json)
Hash identifier:          3FA27UzDgggARqzYXE703eg5FzwZ0G+Qmzd77HFduIc=
Subject key identifier:   E7:7C:56:E4:08:C5:3A:D6:1B:FE:68:32:22:E0:08:1C:7A:1E:21:F6
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849F7150CEE5BEB3DC3A8202750
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/78e56912-0c86-35fc-ad49-ae697530c394.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     20473
IP address blocks:        8.12.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0c:ee:5b:eb:3d:c3:a8:20:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b7a55476-3d9c-4873-8b24-86c7e9dbfb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:94:d6:18:d8:09:b7:0e:0e:da:4d:6f:55:
                    31:36:21:7e:ef:bb:2f:6d:21:25:5c:5d:af:81:c9:
                    f4:68:1d:c7:4b:b1:84:f7:20:08:32:de:67:b4:09:
                    21:db:40:74:ff:df:d3:7a:00:8f:2d:34:00:bc:dd:
                    f1:2a:d0:9a:7a:de:e2:11:13:df:1b:2c:82:f0:21:
                    ff:11:a2:1d:14:76:3c:b1:4b:e7:ba:fa:47:ff:9a:
                    18:66:d8:cb:d9:e7:33:71:78:18:0c:8e:4c:47:21:
                    f9:c6:3e:83:8d:42:42:da:b2:2f:11:d2:b6:ce:8d:
                    ce:fa:f2:71:9d:6f:37:cb:26:05:40:0e:f6:0e:9a:
                    12:72:8f:92:33:a4:86:d7:ba:6a:a3:9d:19:b0:20:
                    bb:d1:9c:38:0f:02:e7:8c:d1:0c:ad:10:9d:bd:1d:
                    71:4f:fe:02:9b:e1:c9:c1:d7:58:c4:df:9f:e8:1f:
                    06:48:c7:34:35:29:2b:f6:d0:c8:ad:52:5b:73:82:
                    31:f5:a7:c4:8a:32:0d:06:aa:cd:3c:4a:b0:a7:1b:
                    f1:da:98:fb:62:5a:38:b1:fa:87:33:b1:da:ba:a4:
                    3a:97:36:60:1e:60:83:92:a2:b8:b7:b5:45:f3:57:
                    72:62:c2:d0:8c:67:f4:0c:13:35:96:6b:c7:25:15:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7C:56:E4:08:C5:3A:D6:1B:FE:68:32:22:E0:08:1C:7A:1E:21:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/78e56912-0c86-35fc-ad49-ae697530c394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c2:65:eb:d5:f9:61:45:7f:79:31:7c:77:39:3a:11:3e:3e:
         d3:f5:af:2c:20:5f:41:ff:da:4d:d6:db:ed:1c:0f:1c:80:3e:
         0a:c9:62:d6:0e:36:86:f3:fe:fb:e9:15:5b:2d:83:66:ce:e4:
         ee:16:75:c7:df:04:23:50:a6:44:65:95:09:7c:97:55:c4:6c:
         50:d6:6e:f0:d4:9b:14:81:00:22:fc:61:00:70:21:89:95:fb:
         7f:bc:00:b5:d6:12:15:6d:8b:ce:c3:b1:aa:4a:22:19:95:80:
         d7:79:f5:b1:59:9e:05:a8:ff:b9:d0:32:02:e4:2d:c6:5e:64:
         45:44:3c:57:73:7d:c2:84:0e:1b:c0:f5:ca:2a:57:ed:e1:ec:
         cb:0b:ca:93:a2:76:4d:19:05:32:98:01:4f:10:00:bc:8b:e8:
         96:6c:34:bc:14:e9:a4:86:29:b5:5c:b7:6a:ef:f5:8f:4a:6e:
         7a:83:6d:c1:36:1d:75:67:b1:a6:ad:ca:05:97:3e:0f:88:18:
         db:a4:8b:b8:00:20:65:76:5a:41:6e:3e:7f:2f:0f:47:9e:4f:
         bb:7c:e4:30:d7:17:05:51:72:58:9b:45:bb:ec:cc:78:73:b4:
         2f:08:3f:52:59:8a:94:90:21:8e:0e:fc:72:cc:17:3b:76:45:
         85:99:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:31:06 2025 by rpki-client