Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/12bfa637-070a-3a1a-9ec2-386a25030b34.roa
File:                     12bfa637-070a-3a1a-9ec2-386a25030b34.roa (raw, json)
Hash identifier:          VfcATuVpncGjf/sH1N4PoVHXO5PnllVjwD2SVZRtKfI=
Subject key identifier:   28:FE:14:7D:47:17:6B:8C:3D:C4:62:A5:95:04:13:20:E2:60:D8:F0
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849CE9A473F36675B6DED44AE20
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/12bfa637-070a-3a1a-9ec2-386a25030b34.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     26114
IP address blocks:        8.39.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:47:3f:36:67:5b:6d:ed:44:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=f68a37f8-cbd4-45ef-9b54-0e24cf873e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:80:27:40:6d:94:dc:35:49:3e:62:0b:00:
                    85:3d:0e:29:65:c4:2c:e0:2d:ea:ac:76:81:41:9a:
                    92:0d:c0:13:9f:c0:02:d4:1f:10:e6:e7:42:af:26:
                    60:af:e2:32:75:5b:47:6a:75:18:1b:f3:d4:68:44:
                    74:0a:87:cc:c0:66:f6:67:5a:9d:ef:23:88:b0:93:
                    fb:6a:96:1e:53:74:d7:cc:6f:63:6f:8a:8d:f3:16:
                    54:02:1a:3d:04:89:30:c4:6f:38:2c:ff:7d:87:8f:
                    d6:d0:ae:16:33:8f:f6:51:d2:23:25:73:85:46:0d:
                    d3:70:84:7b:2c:dc:18:7e:5f:ac:c7:11:16:8f:63:
                    91:cc:6e:33:7c:e7:a2:a0:33:94:5c:51:0a:bf:30:
                    98:11:e1:89:a5:6b:05:87:55:90:77:f9:06:d5:00:
                    b7:5e:f8:fc:c1:aa:36:53:19:86:1f:41:ab:03:8c:
                    d3:c5:aa:5a:bc:5d:1d:e4:b7:0c:83:33:7b:fa:9e:
                    9d:09:b3:e5:ec:9f:59:55:d7:3c:ec:1b:21:25:f1:
                    28:55:be:ea:59:46:b7:72:5c:be:ca:64:cb:60:59:
                    d6:18:4d:7d:1a:c9:87:d0:90:fc:35:25:c9:ab:3f:
                    99:41:0a:59:6e:54:79:9b:33:2b:ed:67:46:2e:c8:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:14:7D:47:17:6B:8C:3D:C4:62:A5:95:04:13:20:E2:60:D8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/12bfa637-070a-3a1a-9ec2-386a25030b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.39.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:6e:de:3f:8f:bd:8a:37:e6:53:8b:b2:b5:39:a9:a1:bc:a5:
         10:24:25:ac:7e:9b:39:9d:13:61:9d:b5:61:14:9a:61:e7:62:
         8b:b6:39:41:3c:c5:18:1c:09:04:a3:98:f8:bb:59:ec:1b:f8:
         f5:ef:d9:08:35:1c:e1:2e:58:09:7b:19:70:94:e8:f3:33:da:
         25:75:d4:f5:73:a3:98:00:cd:3b:d1:db:59:d9:e8:fe:2a:02:
         7f:68:79:b5:48:87:aa:70:b5:5c:8f:34:18:3c:cd:f5:7a:76:
         e0:b2:68:5c:2c:7c:76:08:b5:ec:a9:3e:05:5f:ee:69:4f:59:
         e9:b1:db:d3:ba:52:e3:6c:b4:42:5a:4c:3e:95:27:d6:12:55:
         a2:9b:5e:d6:b9:e2:41:0c:0c:2e:2e:1b:7d:35:f3:71:01:ef:
         7e:4d:74:7b:05:71:95:0b:b5:e3:52:59:13:f6:e8:aa:23:65:
         11:0b:23:8f:98:d8:b5:d1:fe:b7:58:70:77:5b:9a:00:4e:b4:
         85:91:3e:05:ea:8d:b0:11:1b:bf:c9:85:3e:9e:7c:26:6f:1f:
         63:e7:62:6d:ae:6c:23:7e:58:a8:7c:2e:b6:e2:25:eb:dc:49:
         05:1f:f9:71:1f:54:33:78:95:e0:6b:c2:b9:18:ac:86:d3:66:
         3f:32:81:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkc/Nmdbbe1EriAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
ZjY4YTM3ZjgtY2JkNC00NWVmLTliNTQtMGUyNGNmODczZTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvyAJ0BtlNw1ST5iCwCFPQ4pZcQs4C3qrHaB
QZqSDcATn8AC1B8Q5udCryZgr+IydVtHanUYG/PUaER0CofMwGb2Z1qd7yOIsJP7
apYeU3TXzG9jb4qN8xZUAho9BIkwxG84LP99h4/W0K4WM4/2UdIjJXOFRg3TcIR7
LNwYfl+sxxEWj2ORzG4zfOeioDOUXFEKvzCYEeGJpWsFh1WQd/kG1QC3Xvj8wao2
UxmGH0GrA4zTxapavF0d5LcMgzN7+p6dCbPl7J9ZVdc87BshJfEoVb7qWUa3cly+
ymTLYFnWGE19GsmH0JD8NSXJqz+ZQQpZblR5mzMr7WdGLsgYOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCj+FH1HF2uMPcRipZUEEyDiYNjwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMTJiZmE2MzctMDcwYS0z
YTFhLTllYzItMzg2YTI1MDMwYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCetMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhu3j+PvYo35lOLsrU5qaG8pRAkJax+mzmdE2GdtWEUmmHnYou2OUE8
xRgcCQSjmPi7Wewb+PXv2Qg1HOEuWAl7GXCU6PMz2iV11PVzo5gAzTvR21nZ6P4q
An9oebVIh6pwtVyPNBg8zfV6duCyaFwsfHYIteypPgVf7mlPWemx29O6UuNstEJa
TD6VJ9YSVaKbXta54kEMDC4uG30183EB735NdHsFcZULteNSWRP26KojZRELI4+Y
2LXR/rdYcHdbmgBOtIWRPgXqjbARG7/JhT6efCZvH2PnYm2ubCN+WKh8LrbiJevc
SQUf+XEfVDN4leBrwrkYrIbTZj8ygdA=
-----END CERTIFICATE-----
Generated at Sun May 11 15:09:57 2025 by rpki-client