Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/45f81854-0ce6-39a9-825c-623afde803ac.roa
File:                     45f81854-0ce6-39a9-825c-623afde803ac.roa (raw, json)
Hash identifier:          DmDOYk83Vc++vquZ2Vz89ZWQ4zzI7nyq7+BSzSn0AEQ=
Subject key identifier:   FA:B2:50:E5:27:35:D4:CB:17:49:10:C6:9D:AA:34:40:58:0D:63:AB
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A4F05BE8B98F2BE6250973600
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/45f81854-0ce6-39a9-825c-623afde803ac.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     25871
IP address blocks:        8.39.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:be:8b:98:f2:be:62:50:97:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=e2d35d05-c21c-4817-b54d-35808cd445f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:cd:4f:c3:e7:43:3f:b7:5d:d7:4a:d9:0b:
                    0e:94:05:77:3c:a0:fb:f5:56:d1:7e:5f:f5:ac:92:
                    1c:91:4c:38:00:98:bd:52:67:62:de:54:97:59:a2:
                    eb:87:5c:59:6e:19:35:e9:30:5b:4c:fc:97:f6:d7:
                    bd:93:b8:26:ba:28:f0:a2:5a:cd:6a:b7:2f:9b:ec:
                    32:95:d9:72:12:bf:fe:5a:a4:60:fc:b8:ab:30:0b:
                    56:e2:b8:82:05:a8:bd:79:63:91:e9:9f:93:60:2c:
                    1f:9e:ec:48:a1:60:74:57:c2:4d:5a:e9:03:e5:40:
                    a0:ba:18:28:0f:49:e3:8f:bf:ab:08:d6:4c:79:c2:
                    6a:94:cd:7e:ce:7b:f4:58:3c:f3:bb:f7:f5:5d:91:
                    00:02:a5:81:0a:a1:72:a9:1b:f7:f1:07:a1:1e:d3:
                    48:03:22:96:96:06:ef:5a:6c:13:f6:78:82:8a:0b:
                    2c:67:cb:68:9c:ad:91:93:0d:a9:d5:88:6b:f3:08:
                    a6:24:17:87:4e:7f:ab:21:5e:c0:df:cd:32:55:88:
                    52:9a:a7:b7:c8:2e:1f:24:7b:5a:4d:3d:a8:c9:0d:
                    9a:19:64:45:f6:66:aa:8b:88:63:9b:0f:66:38:8f:
                    0a:66:23:c2:cb:fb:4e:d2:a9:04:63:e6:9d:42:07:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:50:E5:27:35:D4:CB:17:49:10:C6:9D:AA:34:40:58:0D:63:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/45f81854-0ce6-39a9-825c-623afde803ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.39.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:53:91:c6:ef:ea:02:00:99:9a:ae:58:73:51:f6:7a:e8:
         46:a1:f9:df:b6:c0:a3:8e:98:f5:a5:c4:e7:3d:af:9e:59:49:
         05:d1:b9:4f:50:6a:b3:dd:61:04:09:b6:01:75:2e:36:5e:9a:
         d8:7b:54:9a:67:86:dc:d7:b6:24:aa:5a:85:8b:45:1b:be:b8:
         5a:b7:a5:0f:10:21:43:f2:35:10:1a:9e:8a:e3:e9:d5:74:5a:
         3a:dc:1a:83:c3:8c:d9:4d:63:6d:6e:d6:6d:22:ff:99:9f:69:
         ca:54:32:26:e7:1f:5e:37:c4:c6:4a:97:17:d8:a9:cf:36:3e:
         21:bc:27:34:dc:fb:d6:5f:9c:08:7f:d3:df:77:cb:67:f6:e4:
         ac:63:02:de:11:4a:28:65:b9:f7:da:f2:22:71:a6:1b:3e:c0:
         9e:c0:05:e3:dc:54:8c:37:db:6b:c0:c8:c7:33:34:88:8f:25:
         28:33:a4:70:74:19:fa:85:e3:c2:59:68:2b:8b:e5:46:18:d6:
         34:36:78:00:4b:2a:3c:31:3a:87:62:94:e7:95:f4:8b:27:2d:
         29:be:6e:95:5d:3c:71:e9:57:35:05:21:13:28:22:39:2d:56:
         fa:b0:dc:81:bf:b3:e3:1f:5a:d0:83:5a:78:c9:4e:3a:9a:dd:
         28:97:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:39:39 2025 by rpki-client