Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3de94574-b81e-31b2-b276-df235ef92b58.roa
File:                     3de94574-b81e-31b2-b276-df235ef92b58.roa (raw, json)
Hash identifier:          9DjaMWf5ImlIqnZdM+yHYB5C7FV9Ti9YsAJXJUx/ohc=
Subject key identifier:   72:E9:5A:17:83:B3:91:E1:4C:3C:07:40:DC:77:59:2F:CD:BD:52:BE
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AECC11C7AA8864A9D80496C00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3de94574-b81e-31b2-b276-df235ef92b58.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     1340
IP address blocks:        8.39.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:1c:7a:a8:86:4a:9d:80:49:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=2526d812-4519-4fd9-9919-87273e0329cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:15:57:6b:80:99:51:80:9e:df:66:f4:aa:
                    0c:5b:24:63:23:fc:bd:99:3f:88:69:df:be:eb:28:
                    89:8c:f3:ea:e3:b7:52:77:58:d0:99:17:05:4c:6c:
                    8d:16:20:98:a4:5c:65:f1:37:72:43:cd:64:10:76:
                    dc:31:cd:6f:f1:d8:56:f2:ba:3f:57:dd:03:3c:3e:
                    81:aa:cd:ba:ba:e1:55:ae:0d:59:b6:c5:76:bd:99:
                    5c:14:4f:fd:06:b5:e9:e4:b7:4c:03:be:21:96:86:
                    a5:21:29:bd:ed:1e:b9:cc:b8:b4:b5:3e:4a:3c:e7:
                    af:9b:0f:7d:ab:af:f3:dc:a1:8b:9d:a4:d6:4c:be:
                    da:be:ee:d1:a7:e0:f8:80:83:91:99:58:5e:34:c6:
                    ac:cc:49:7c:7a:6a:ba:92:40:d8:d7:b8:2c:21:55:
                    57:d2:82:7d:66:90:5e:c1:57:ee:a9:89:95:4e:4f:
                    02:d0:3e:04:3b:0f:c6:75:c8:23:79:cd:37:8b:91:
                    c4:76:71:93:b0:ca:f0:6e:2a:70:a6:aa:e6:56:7c:
                    f1:8b:84:00:e8:97:91:22:b8:c0:94:21:62:a2:ae:
                    2f:d6:6b:fc:c8:54:8c:f7:2b:67:16:58:e7:87:f7:
                    4e:6f:a5:f3:70:0f:69:f6:03:c3:89:00:a8:72:e3:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:5A:17:83:B3:91:E1:4C:3C:07:40:DC:77:59:2F:CD:BD:52:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3de94574-b81e-31b2-b276-df235ef92b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.39.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:cb:0b:a7:80:40:af:85:95:e9:0d:06:a0:1c:95:fa:cc:a1:
         2b:e8:95:2b:0f:ac:e7:08:5d:01:31:0f:c3:5d:0d:ff:3d:9e:
         ca:4a:a9:b1:13:8d:ea:68:fa:c2:56:64:fd:35:0e:27:03:cd:
         65:c6:5b:9a:92:68:f7:39:d2:8d:5e:2d:ca:8d:59:d3:93:b5:
         6d:7b:61:bc:03:5a:67:a1:14:ea:43:37:87:3d:66:fe:f4:e6:
         18:53:4d:82:0f:89:11:00:95:80:2a:18:88:c3:43:a2:7d:de:
         ae:d7:fe:85:3a:e9:1f:c2:c5:01:ca:6a:81:3b:f7:fd:cd:d3:
         4e:6f:14:43:e2:55:fa:25:a0:5c:d1:58:90:30:df:74:18:1b:
         1b:33:91:9c:6c:52:52:74:bc:6e:e2:aa:00:bd:33:e1:0d:0e:
         e1:e2:53:08:72:ec:72:f8:f2:a7:00:3c:5d:84:d5:63:53:5a:
         2e:e1:e2:6b:e6:cf:65:bf:c3:70:06:ac:ba:8d:de:a8:48:85:
         fb:a5:65:ee:4e:64:c6:f6:ea:01:4e:50:d4:60:ed:a4:4a:32:
         aa:52:6f:24:3a:f6:03:f7:3e:5d:48:e9:2f:b4:1a:cf:7f:58:
         d4:15:a9:c1:e1:17:b0:f1:77:49:34:57:cd:17:c8:0b:e7:cf:
         22:60:3b:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRx6qIZKnYBJbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MjUyNmQ4MTItNDUxOS00ZmQ5LTk5MTktODcyNzNlMDMyOWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUMVV2uAmVGAnt9m9KoMWyRjI/y9mT+Iad++
6yiJjPPq47dSd1jQmRcFTGyNFiCYpFxl8TdyQ81kEHbcMc1v8dhW8ro/V90DPD6B
qs26uuFVrg1ZtsV2vZlcFE/9BrXp5LdMA74hloalISm97R65zLi0tT5KPOevmw99
q6/z3KGLnaTWTL7avu7Rp+D4gIORmVheNMaszEl8emq6kkDY17gsIVVX0oJ9ZpBe
wVfuqYmVTk8C0D4EOw/Gdcgjec03i5HEdnGTsMrwbipwpqrmVnzxi4QA6JeRIrjA
lCFioq4v1mv8yFSM9ytnFljnh/dOb6XzcA9p9gPDiQCocuNhBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHLpWheDs5HhTDwHQNx3WS/NvVK+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2RlOTQ1NzQtYjgxZS0z
MWIyLWIyNzYtZGYyMzVlZjkyYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjLC6eAQK+FlekNBqAclfrMoSvolSsPrOcIXQExD8NdDf89nspKqbET
jepo+sJWZP01DicDzWXGW5qSaPc50o1eLcqNWdOTtW17YbwDWmehFOpDN4c9Zv70
5hhTTYIPiREAlYAqGIjDQ6J93q7X/oU66R/CxQHKaoE79/3N005vFEPiVfoloFzR
WJAw33QYGxszkZxsUlJ0vG7iqgC9M+ENDuHiUwhy7HL48qcAPF2E1WNTWi7h4mvm
z2W/w3AGrLqN3qhIhfulZe5OZMb26gFOUNRg7aRKMqpSbyQ69gP3Pl1I6S+0Gs9/
WNQVqcHhF7Dxd0k0V80XyAvnzyJgO14=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:05 2025 by rpki-client