Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed88dee6-13c2-30ef-a120-7a476fdd1df3.roa
File:                     ed88dee6-13c2-30ef-a120-7a476fdd1df3.roa (raw, json)
Hash identifier:          /4YNd9lLblPcD0hM1Kt4TFToEC/cdXeHbjf3sZU1QAc=
Subject key identifier:   E5:05:08:F7:D9:8D:ED:E6:87:7D:BF:26:AE:F2:70:C2:58:98:E5:8D
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AADF103EF1D90D43C88F4B500
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed88dee6-13c2-30ef-a120-7a476fdd1df3.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     26114
IP address blocks:        8.39.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:03:ef:1d:90:d4:3c:88:f4:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=fb47461d-1290-4da4-b520-e31fd86aac85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:f7:25:d6:db:f4:ff:be:bb:51:16:4a:b5:
                    58:a5:a1:35:cf:1d:b0:0f:92:e1:0b:b7:8d:cb:2f:
                    51:36:c5:96:ed:ce:e2:d6:3d:eb:cb:04:57:9a:ec:
                    8a:8b:fe:3b:85:84:59:07:62:77:e8:11:da:ac:4a:
                    a5:0a:81:ba:1d:09:b6:47:f2:66:11:96:d3:54:d2:
                    e4:61:81:e5:5e:62:e1:5d:b5:b0:a4:f0:9c:29:91:
                    31:53:41:f6:77:23:82:21:19:45:c8:ad:c6:49:2d:
                    57:10:71:8a:75:c5:a1:ac:a6:e1:2a:92:95:a9:b6:
                    67:5e:2c:83:d2:e6:a6:2b:b7:d5:f4:60:6f:8a:dc:
                    05:04:72:63:5d:3f:cf:12:19:49:0f:6e:ad:3a:85:
                    e0:af:60:c4:f1:50:5d:21:b3:0d:77:06:c8:d7:69:
                    fd:d6:be:30:50:48:28:64:3c:b1:1c:98:c6:d4:5e:
                    d8:92:53:45:c8:7c:64:88:a5:a0:67:55:4d:cf:0b:
                    db:13:b3:a0:03:aa:69:35:b0:80:2e:82:b6:34:d6:
                    09:58:a9:ab:bd:7d:73:a8:65:60:78:9a:0c:f1:df:
                    a2:32:3d:f9:92:ff:9e:2e:e7:7b:ee:86:e3:02:bf:
                    a8:6c:fd:be:0a:02:51:86:db:2b:ac:b3:25:81:4d:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:05:08:F7:D9:8D:ED:E6:87:7D:BF:26:AE:F2:70:C2:58:98:E5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed88dee6-13c2-30ef-a120-7a476fdd1df3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.39.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:62:44:82:11:68:e9:4a:42:af:3f:03:13:31:25:01:8e:
         6e:8f:a9:de:ce:be:33:e5:f9:d3:30:1e:28:b5:9a:ba:48:58:
         02:01:21:aa:ed:82:6b:8a:46:ce:69:53:8d:1f:5b:fb:81:9e:
         ab:79:09:2b:a3:0b:3d:e6:35:24:a0:8c:85:1a:6d:b1:d5:2b:
         57:66:e8:05:39:88:bf:23:fb:5f:9e:cf:2d:ca:a5:af:d7:60:
         85:7d:53:5b:c6:d2:34:b0:58:04:76:7a:90:53:e5:cf:3b:5a:
         dd:9f:49:73:53:ea:69:1d:6c:81:57:54:b2:21:f7:de:71:7b:
         55:87:49:b5:87:94:56:aa:ef:a8:25:48:19:f0:36:e5:d1:08:
         89:67:18:ef:9d:dc:bc:7e:40:86:f2:54:77:86:6f:ee:89:3d:
         58:af:29:af:4c:1f:ea:dc:a7:e5:56:1b:f0:4f:d5:d2:aa:10:
         6d:49:40:8d:6d:77:8e:b7:2d:9c:0a:4c:7b:ba:51:84:ec:54:
         f5:3c:a6:6c:32:cf:71:3a:f3:56:84:00:6f:48:79:8d:84:79:
         b6:4f:b3:06:b2:b4:34:43:11:9a:79:b9:92:90:83:e4:f3:2a:
         f0:1d:38:74:52:b7:9e:95:d7:af:f2:95:45:29:10:06:bc:84:
         18:60:2f:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QPvHZDUPIj0tQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
ZmI0NzQ2MWQtMTI5MC00ZGE0LWI1MjAtZTMxZmQ4NmFhYzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngD3Jdbb9P++u1EWSrVYpaE1zx2wD5LhC7eN
yy9RNsWW7c7i1j3rywRXmuyKi/47hYRZB2J36BHarEqlCoG6HQm2R/JmEZbTVNLk
YYHlXmLhXbWwpPCcKZExU0H2dyOCIRlFyK3GSS1XEHGKdcWhrKbhKpKVqbZnXiyD
0uamK7fV9GBvitwFBHJjXT/PEhlJD26tOoXgr2DE8VBdIbMNdwbI12n91r4wUEgo
ZDyxHJjG1F7YklNFyHxkiKWgZ1VNzwvbE7OgA6ppNbCALoK2NNYJWKmrvX1zqGVg
eJoM8d+iMj35kv+eLud77objAr+obP2+CgJRhtsrrLMlgU0B3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUFCPfZje3mh32/Jq7ycMJYmOWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZWQ4OGRlZTYtMTNjMi0z
MGVmLWExMjAtN2E0NzZmZGQxZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCc/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBeYkSCEWjpSkKvPwMTMSUBjm6Pqd7OvjPl+dMwHii1mrpIWAIBIart
gmuKRs5pU40fW/uBnqt5CSujCz3mNSSgjIUabbHVK1dm6AU5iL8j+1+ezy3Kpa/X
YIV9U1vG0jSwWAR2epBT5c87Wt2fSXNT6mkdbIFXVLIh995xe1WHSbWHlFaq76gl
SBnwNuXRCIlnGO+d3Lx+QIbyVHeGb+6JPVivKa9MH+rcp+VWG/BP1dKqEG1JQI1t
d463LZwKTHu6UYTsVPU8pmwyz3E681aEAG9IeY2EebZPswaytDRDEZp5uZKQg+Tz
KvAdOHRSt56V16/ylUUpEAa8hBhgL5Y=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:37 2025 by rpki-client