Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa
File:                     ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa (raw, json)
Hash identifier:          iiqsgX2a1DlIUx1Zk1t5CynMRU7LqaXFU/5sk1kYDk0=
Subject key identifier:   30:5D:A4:A6:E1:3E:C4:A6:44:FF:F6:B3:E5:3B:04:1A:B3:90:61:BE
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858499DBF3133BF21BFE63E23B380
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     16491
IP address blocks:        8.37.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:31:33:bf:21:bf:e6:3e:23:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=a73b92c3-9709-49b8-8fcb-72b6bfa46f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f0:8c:ad:2a:98:86:e7:9d:be:e3:d4:8d:62:
                    af:60:1c:fd:a1:b7:f0:14:c9:26:d6:dd:fa:bd:cd:
                    a8:39:16:53:77:d6:8d:22:c9:54:85:20:00:9d:66:
                    a8:2e:09:24:04:b0:41:1e:2c:b6:cb:47:13:6c:7f:
                    dd:78:e6:9b:76:e3:0f:6d:21:fa:ff:b4:be:9b:8d:
                    96:8c:f4:3a:36:4c:bf:2a:27:46:5f:9f:ed:65:5a:
                    39:38:3a:cc:e3:53:0d:80:0a:70:f6:eb:20:9c:d6:
                    64:e8:4a:e0:9c:ea:85:54:20:c0:17:bc:ed:95:3e:
                    8d:37:5b:1d:1f:90:85:47:80:0d:be:50:2b:fd:19:
                    b6:b1:24:ab:8f:2f:8a:d2:c4:47:08:5e:21:81:eb:
                    6e:5a:ec:45:14:e6:a8:f1:21:71:a0:3b:4b:40:64:
                    83:38:db:f1:c2:30:c7:89:38:76:7d:cb:65:3c:a7:
                    6a:28:c1:b6:75:3a:e5:e4:0c:63:78:48:17:39:c7:
                    22:ea:21:d8:83:cb:55:d3:cf:be:53:f9:13:bb:0c:
                    cd:23:c0:06:e3:f6:0b:b2:70:c3:3c:6a:1a:fc:cb:
                    9c:59:a3:d8:06:ec:2e:a1:cd:fd:07:df:86:4c:84:
                    ec:c0:3c:90:8c:bf:87:ca:07:22:d7:e1:b3:ef:00:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5D:A4:A6:E1:3E:C4:A6:44:FF:F6:B3:E5:3B:04:1A:B3:90:61:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.37.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:75:03:97:80:aa:80:44:6d:71:fc:24:2c:7d:9b:0c:97:b8:
         14:93:f8:8a:43:b3:4a:5c:6e:6f:1e:24:73:d6:a8:6c:2a:65:
         07:85:e7:b1:75:91:b5:5a:e8:32:7c:42:38:b0:7c:13:9a:82:
         a4:e6:55:1f:60:e9:e8:aa:42:05:ff:aa:fc:19:68:93:d8:86:
         c9:b3:f4:02:63:36:24:2b:b1:91:68:b2:05:86:9a:93:e4:20:
         da:e7:95:53:cd:9f:91:1c:ec:87:25:4d:43:2b:3f:43:3d:50:
         fb:4c:d4:51:3e:f8:d8:4f:62:0e:35:0d:21:cd:7d:36:8f:a6:
         a3:17:18:82:bc:d2:74:da:84:5f:de:6c:08:cb:df:c9:b5:33:
         a6:90:00:67:89:3e:19:ce:ca:32:1c:07:03:5c:53:3d:55:4a:
         c0:7d:e1:e9:44:0e:52:31:a8:66:a1:11:94:48:4d:f1:5a:d2:
         5a:9d:05:07:cb:64:ed:8e:b3:0d:98:ed:56:be:ec:28:3f:11:
         8b:02:9f:ba:b3:e0:5a:28:86:49:0b:04:79:2d:ee:2e:2a:be:
         58:85:42:9b:1c:c2:18:0b:19:1e:e7:fd:35:06:f3:e1:85:88:
         cb:ad:c3:80:3b:1a:40:1e:5d:d4:1c:32:ff:c9:c6:00:97:9c:
         58:b4:69:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzEzvyG/5j4js4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
YTczYjkyYzMtOTcwOS00OWI4LThmY2ItNzJiNmJmYTQ2ZjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPCMrSqYhuedvuPUjWKvYBz9obfwFMkm1t36
vc2oORZTd9aNIslUhSAAnWaoLgkkBLBBHiy2y0cTbH/deOabduMPbSH6/7S+m42W
jPQ6Nky/KidGX5/tZVo5ODrM41MNgApw9usgnNZk6ErgnOqFVCDAF7ztlT6NN1sd
H5CFR4ANvlAr/Rm2sSSrjy+K0sRHCF4hgetuWuxFFOao8SFxoDtLQGSDONvxwjDH
iTh2fctlPKdqKMG2dTrl5AxjeEgXOcci6iHYg8tV08++U/kTuwzNI8AG4/YLsnDD
PGoa/MucWaPYBuwuoc39B9+GTITswDyQjL+Hygci1+Gz7wBVrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBdpKbhPsSmRP/2s+U7BBqzkGG+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZWQxZjlhOWEtZTFjZC0z
MmY5LWJiZTMtNmY4MDg5YzIzYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECCVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGR1A5eAqoBEbXH8JCx9mwyXuBST+IpDs0pcbm8eJHPWqGwqZQeF57F1
kbVa6DJ8QjiwfBOagqTmVR9g6eiqQgX/qvwZaJPYhsmz9AJjNiQrsZFosgWGmpPk
INrnlVPNn5Ec7IclTUMrP0M9UPtM1FE++NhPYg41DSHNfTaPpqMXGIK80nTahF/e
bAjL38m1M6aQAGeJPhnOyjIcBwNcUz1VSsB94elEDlIxqGahEZRITfFa0lqdBQfL
ZO2Osw2Y7Va+7Cg/EYsCn7qz4FoohkkLBHkt7i4qvliFQpscwhgLGR7n/TUG8+GF
iMutw4A7GkAeXdQcMv/JxgCXnFi0aUE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:00 2025 by rpki-client