Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa
File:                     c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa (raw, json)
Hash identifier:          C6yg/rIiR7y8fzTTWCWIlCcfDVyxF6uI6NZ+YIH5+Mc=
Subject key identifier:   D7:A0:23:5E:7E:B8:05:50:C8:58:13:28:00:C5:46:B7:37:E8:81:CC
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A0C054D821910546778719006
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     1340
IP address blocks:        8.12.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4d:82:19:10:54:67:78:71:90:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=24c616aa-bbb3-4dcb-8f54-aff1428156fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:0d:48:55:d2:56:1e:16:de:61:d7:f6:23:
                    01:36:88:b2:5f:82:65:9d:2d:85:77:60:ac:bf:e2:
                    b2:a1:1a:d4:18:13:69:11:1d:eb:e1:13:f5:75:9a:
                    0a:25:a0:6f:60:d5:3f:44:33:6f:f6:a2:6b:93:9e:
                    ee:ef:d1:e7:67:8d:86:71:c9:ab:3d:e2:75:41:b1:
                    43:bc:9f:09:4a:7f:0c:06:23:98:8d:30:78:94:9a:
                    a0:bb:38:be:02:0c:4e:a4:4f:56:cb:15:a7:67:87:
                    49:2e:4f:54:77:9c:95:ec:01:87:63:a3:e8:00:9f:
                    db:19:d3:9a:e0:bf:2d:68:ad:24:9b:be:63:e1:39:
                    79:b3:f8:cc:62:b1:50:28:ae:02:d1:08:82:b2:f3:
                    24:41:4c:c7:f6:bd:41:ee:c6:03:7f:7c:e7:db:38:
                    b7:38:e9:1d:43:27:53:5e:44:29:b0:8b:a4:2c:c0:
                    ef:11:94:0f:36:06:77:4f:b9:ce:89:e9:0a:eb:12:
                    97:f6:c2:e0:87:cf:d9:d6:0e:f8:ea:2c:f8:eb:ba:
                    8a:fb:ca:30:b0:eb:8f:12:c9:86:9d:86:b8:76:be:
                    1b:36:25:9f:95:95:e2:9c:23:ac:c0:c5:85:4d:f1:
                    80:90:ba:3e:39:40:d2:1a:08:9b:d1:74:b6:75:25:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A0:23:5E:7E:B8:05:50:C8:58:13:28:00:C5:46:B7:37:E8:81:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:5e:83:de:84:a8:6e:21:44:0d:a8:49:65:a6:23:16:ff:
         9a:f6:f6:db:a9:36:73:97:28:29:e2:d9:f3:52:69:07:9b:c7:
         9e:82:e1:c6:80:b0:b7:54:3e:28:72:60:01:23:cc:95:6d:56:
         b1:91:7d:e1:dc:46:d3:e0:9b:93:ac:73:b6:27:da:bc:72:ef:
         a5:a7:92:5f:f5:25:e7:52:f5:f7:05:85:12:6d:97:fd:e0:d9:
         c6:b4:69:89:b4:29:8d:ac:b1:60:7a:8b:60:a7:5c:71:7e:04:
         de:cf:b5:d1:e1:bd:71:99:59:54:c5:4d:48:d7:95:c6:31:7c:
         cf:9c:4d:6b:11:eb:00:eb:8f:91:dd:4e:42:c0:ec:30:01:6c:
         c9:d1:b8:71:d4:ca:38:29:a3:fc:b0:40:d5:6a:4e:da:53:19:
         cb:1a:98:5c:0b:d1:cc:29:f2:28:b1:3f:c6:2c:e1:c4:be:e5:
         f0:10:ce:6b:e9:f9:ee:a1:61:a9:e4:33:44:e5:fc:fe:d7:78:
         1d:b3:b8:9b:ce:07:11:4c:88:b7:40:2d:11:59:99:51:1c:af:
         10:ab:73:13:93:b3:d8:44:7a:aa:e2:54:90:26:80:7a:03:12:
         2b:e3:c7:65:aa:03:b7:ae:f5:8c:eb:82:34:98:6c:86:eb:06:
         17:3e:e0:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBU2CGRBUZ3hxkAYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MjRjNjE2YWEtYmJiMy00ZGNiLThmNTQtYWZmMTQyODE1NmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli4NSFXSVh4W3mHX9iMBNoiyX4JlnS2Fd2Cs
v+KyoRrUGBNpER3r4RP1dZoKJaBvYNU/RDNv9qJrk57u79HnZ42GccmrPeJ1QbFD
vJ8JSn8MBiOYjTB4lJqguzi+AgxOpE9WyxWnZ4dJLk9Ud5yV7AGHY6PoAJ/bGdOa
4L8taK0km75j4Tl5s/jMYrFQKK4C0QiCsvMkQUzH9r1B7sYDf3zn2zi3OOkdQydT
XkQpsIukLMDvEZQPNgZ3T7nOiekK6xKX9sLgh8/Z1g746iz467qK+8owsOuPEsmG
nYa4dr4bNiWflZXinCOswMWFTfGAkLo+OUDSGgib0XS2dSUYLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNegI15+uAVQyFgTKADFRrc36IHMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzcwMTEzZTQtNWQ2Yi0z
N2YxLWJiN2ItOGE0NDdmNDU0ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAxPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1VXoPehKhuIUQNqEllpiMW/5r29tupNnOXKCni2fNSaQebx56C4caA
sLdUPihyYAEjzJVtVrGRfeHcRtPgm5Osc7Yn2rxy76Wnkl/1JedS9fcFhRJtl/3g
2ca0aYm0KY2ssWB6i2CnXHF+BN7PtdHhvXGZWVTFTUjXlcYxfM+cTWsR6wDrj5Hd
TkLA7DABbMnRuHHUyjgpo/ywQNVqTtpTGcsamFwL0cwp8iixP8Ys4cS+5fAQzmvp
+e6hYankM0Tl/P7XeB2zuJvOBxFMiLdALRFZmVEcrxCrcxOTs9hEeqriVJAmgHoD
Eivjx2WqA7eu9YzrgjSYbIbrBhc+4K8=
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:48:22 2025 by rpki-client