Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa
File:                     7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa (raw, json)
Hash identifier:          krYgP7GH+D4IDIoCwPFD+COfyBaJZ2s0T80bK5ATyv4=
Subject key identifier:   60:29:C4:CC:13:76:F9:EB:BA:45:87:26:EE:E1:34:15:02:3E:00:E7
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A0C0557C26D2C3D95BC240000
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     3356
IP address blocks:        8.39.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:57:c2:6d:2c:3d:95:bc:24:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=edb1042f-af6c-463a-b026-64ebbfda676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f6:60:a3:da:dd:bc:ab:ef:8c:d5:48:66:a4:
                    84:ff:57:b2:ac:e9:62:29:4b:ee:84:e1:d3:d3:83:
                    84:76:84:6b:15:12:f2:83:db:8f:d7:ed:5e:d0:eb:
                    37:97:a7:bd:4d:a9:9f:b5:06:ec:09:93:0a:d9:4d:
                    49:db:02:86:22:39:29:60:fa:7d:99:a2:53:1f:d3:
                    71:94:b8:23:60:f6:00:06:5b:c7:25:8f:5c:5e:a7:
                    64:13:fc:9b:98:2e:34:85:83:46:50:eb:d8:16:c4:
                    93:ae:12:82:63:83:c1:83:9c:6c:5d:dc:56:60:57:
                    b7:e7:cb:ac:32:9f:4a:1d:a9:62:a1:48:21:f7:47:
                    f2:a0:ff:47:69:5d:26:19:1e:b5:f1:58:2f:0c:51:
                    c1:da:bc:96:07:5a:be:21:ad:52:f8:c9:a0:cd:59:
                    d2:16:89:1e:34:d2:86:d2:82:cc:b8:cc:f2:72:72:
                    53:68:ba:e8:2f:a3:2f:61:88:55:e4:88:6a:52:94:
                    e2:0f:51:e4:3e:46:47:08:56:31:de:1e:c0:75:11:
                    dc:23:6b:9c:a0:f9:fd:23:7d:6f:ec:96:c6:7e:47:
                    c7:76:20:57:84:6b:a5:95:87:48:f1:af:92:fe:b6:
                    a6:bc:b8:17:57:38:bd:d5:4f:af:1c:5b:80:4b:da:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:29:C4:CC:13:76:F9:EB:BA:45:87:26:EE:E1:34:15:02:3E:00:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.39.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:96:29:c4:41:a9:e9:28:31:0f:e5:ff:5a:90:a0:af:5d:66:
         a7:94:d6:28:e9:d0:24:00:2c:0b:4f:80:26:6d:b9:74:37:d9:
         72:b8:74:bb:b0:1d:75:38:94:4a:e3:df:3e:4d:70:4e:e6:ef:
         90:02:10:da:08:11:95:ac:d0:a7:ee:19:10:be:09:23:4d:7a:
         8c:07:85:72:09:79:da:87:9e:16:af:1a:fb:dd:7f:69:15:c6:
         bd:2d:b4:05:b3:f5:39:97:af:29:e0:3e:b7:48:10:e1:d1:0a:
         27:69:21:7b:e1:05:0b:a3:47:95:2f:29:83:1f:04:ae:ab:de:
         2b:fc:c1:b9:54:58:5b:8d:92:ad:c7:16:39:7e:5c:5e:fe:60:
         76:2d:b7:dc:f3:bd:88:44:e5:9c:94:15:1b:e9:f4:1a:52:6e:
         fd:f0:9e:67:7e:2e:68:e4:5a:82:44:bc:70:42:19:eb:9d:55:
         1e:72:b8:4f:2e:98:f8:60:89:23:27:d1:a1:71:63:fd:30:a0:
         a5:0d:37:11:31:c2:98:cd:35:43:d6:b7:7b:12:fb:ae:b7:df:
         c5:c9:70:86:47:4f:aa:c2:9a:68:35:24:e9:1f:47:b8:ef:63:
         91:29:70:4c:c7:06:e9:e7:db:84:ab:e1:2b:6f:37:49:6c:bb:
         2e:a1:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:02:24 2025 by rpki-client