Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/78e56912-0c86-35fc-ad49-ae697530c394.roa
File:                     78e56912-0c86-35fc-ad49-ae697530c394.roa (raw, json)
Hash identifier:          jdU4EjVT6odPomEQrRgvC7AwU/v5Z2Q1gKV4hNmQyRQ=
Subject key identifier:   40:B6:E9:AE:8C:01:25:02:D8:91:A7:78:D8:34:33:2E:CE:BB:6C:36
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584BB88D0C950F9E2F1F0F15B580
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/78e56912-0c86-35fc-ad49-ae697530c394.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     20473
IP address blocks:        8.12.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:0c:95:0f:9e:2f:1f:0f:15:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=f180520b-ed14-4d13-8623-396d74cc84be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:de:d0:9e:e4:bf:48:80:92:6d:76:e6:17:db:
                    24:dc:b2:f5:da:8f:63:8d:26:b4:0c:90:9e:83:ca:
                    d8:fc:5c:58:e1:04:5e:df:ad:1a:9f:e0:dc:ff:39:
                    8f:61:82:43:38:8e:21:d1:04:8f:06:9b:16:50:3d:
                    09:a1:54:3e:2f:a2:1b:5a:94:c1:3b:7c:c9:0d:39:
                    71:f3:e8:e6:ca:6e:82:1c:b1:7e:1d:7e:f0:d8:64:
                    bb:4f:e3:43:11:fc:3c:4c:60:b5:1b:f9:0e:71:52:
                    03:fc:d1:b3:bb:f2:4e:8a:ce:9e:ba:10:d8:28:55:
                    bb:44:f9:70:95:21:2f:2b:b4:a6:0d:ad:05:0d:9c:
                    ce:e4:9f:45:b2:d2:3a:d1:10:19:be:68:4d:d1:b7:
                    ed:d1:0b:10:29:71:67:2f:07:e6:fc:ac:2b:da:7b:
                    74:a5:12:b1:4d:fd:4d:1f:6b:1a:89:d6:50:fe:dc:
                    38:15:be:10:11:6d:4e:4f:16:1d:b4:c3:8c:d7:3d:
                    f3:9a:9b:78:19:ab:2c:9b:e1:3f:f9:15:3d:2b:3f:
                    51:13:3a:de:bb:fd:e1:2f:7a:20:bb:2f:af:43:e8:
                    6b:c5:05:58:8f:6c:d7:e5:be:6b:d0:bf:fa:b5:a0:
                    8b:7d:4d:86:05:95:78:c0:97:58:16:1d:95:d4:35:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B6:E9:AE:8C:01:25:02:D8:91:A7:78:D8:34:33:2E:CE:BB:6C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/78e56912-0c86-35fc-ad49-ae697530c394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:94:2e:37:cc:a9:0a:6e:cb:dd:e6:c7:95:e7:a3:72:7d:
         b5:c6:ec:22:54:d2:a1:3b:75:e0:fd:e0:ae:60:77:ab:4b:05:
         a8:b5:dd:7e:b2:1b:5a:19:a1:06:0b:34:9b:f6:0d:13:53:7e:
         11:6e:54:04:e7:5d:70:68:56:9b:ea:24:19:61:f1:b0:d8:40:
         1a:91:09:13:85:61:29:c7:f8:22:3a:b9:98:28:c0:34:68:51:
         de:78:4c:12:90:e6:5d:35:3e:20:80:34:b3:b6:ac:f0:5c:08:
         7d:cc:b2:2a:42:37:cd:b5:d7:4b:ad:20:66:ca:44:58:52:46:
         6d:e5:39:df:93:54:be:51:ae:bc:9e:0a:f7:a2:50:bd:34:a0:
         49:ca:05:92:9d:df:1a:1b:35:33:08:2b:0f:bf:9d:68:02:4e:
         2f:02:c1:b1:31:59:0d:31:bc:16:12:09:98:f9:81:db:dd:3c:
         70:c6:a3:01:f2:de:11:ae:5e:8f:97:21:f7:7d:49:f5:6d:3e:
         6f:bf:6d:9f:90:76:37:a1:87:16:3e:2d:94:b8:60:73:fa:03:
         32:61:fb:c7:56:d7:e9:97:16:6b:83:1a:c9:5a:94:cf:c5:99:
         2b:aa:75:4d:0f:a8:60:54:bb:22:a3:e1:a9:a5:ac:78:ef:9b:
         b7:49:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:10:25 2025 by rpki-client