Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e003d53-5af0-312e-9574-ef11cf7df92c.roa
File:                     2e003d53-5af0-312e-9574-ef11cf7df92c.roa (raw, json)
Hash identifier:          07D726xFB5X6OrTAOStyILw/Lz+BtWYNDb4+HWskTas=
Subject key identifier:   F3:24:A8:FA:0E:5B:1E:34:EF:2A:BC:B1:05:45:93:64:6D:8B:6B:59
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A0C054D0D0B83EA012CD64D00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e003d53-5af0-312e-9574-ef11cf7df92c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     30305
IP address blocks:        8.12.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4d:0d:0b:83:ea:01:2c:d6:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=286cb16c-ce9a-4c9f-9c79-a342931fa2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:85:eb:79:a7:01:cb:28:8e:3b:08:de:f1:
                    d4:aa:bb:03:00:96:bd:4a:c1:4e:ca:4a:a4:da:cb:
                    8e:47:74:a8:ca:e7:a6:44:af:bf:52:d1:2d:42:ae:
                    18:42:3d:57:cf:99:3f:a7:d6:f5:c0:39:44:bc:f9:
                    b5:b8:d6:e7:83:3d:e5:6d:84:8a:17:52:34:6a:85:
                    37:8c:e4:94:bf:ac:46:62:21:b3:8e:99:8e:33:0c:
                    09:b0:c3:a0:1c:72:a0:d1:dd:d7:69:8f:5a:18:af:
                    f0:57:38:09:c3:19:8a:56:01:db:52:2d:4a:41:be:
                    0b:1e:43:3e:e5:a9:39:43:7c:b6:75:47:87:01:47:
                    1f:36:7c:6d:56:10:cb:0a:de:5e:84:97:d2:6c:f5:
                    ee:39:f4:29:72:3e:55:61:d5:39:b1:7c:20:79:23:
                    79:f9:78:58:e7:8f:fa:25:43:76:21:05:a6:86:31:
                    5c:91:64:31:60:f3:08:17:e8:85:99:ad:a9:1d:73:
                    2f:df:4f:0a:36:64:4f:8d:48:c2:3c:32:a3:46:fc:
                    51:53:5a:86:86:ad:5e:23:7c:dc:fe:ed:0f:f9:1d:
                    42:aa:c4:2a:ee:6b:15:e5:c3:3e:82:ac:13:8f:39:
                    a2:da:6f:03:13:d5:55:43:79:08:65:65:ce:d9:38:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:A8:FA:0E:5B:1E:34:EF:2A:BC:B1:05:45:93:64:6D:8B:6B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e003d53-5af0-312e-9574-ef11cf7df92c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:79:2e:70:12:24:2b:7c:9c:87:da:b5:3d:b0:77:10:db:
         07:56:0c:d0:dd:61:38:9b:c6:26:74:9b:db:04:0d:3d:5a:dc:
         d3:5d:f1:99:d1:6f:5f:4a:a6:47:17:98:dd:32:b8:c2:ed:56:
         60:85:4c:05:c9:12:19:c5:ed:81:6b:7a:5d:06:b0:f5:ac:80:
         0b:f8:c8:0c:7a:79:03:4a:09:cf:43:d3:37:21:ec:8f:be:2b:
         20:c6:62:b7:13:9f:b4:1b:fa:f3:1e:8e:79:92:8a:93:d2:68:
         2b:b7:ce:f5:17:5b:0b:fa:68:d8:8b:a4:28:24:46:b5:80:95:
         e6:a5:18:01:76:53:38:cc:8c:a0:24:11:86:07:17:f7:94:ad:
         7e:bf:a3:2a:4a:13:8c:6b:1e:5c:81:4d:41:47:3c:49:1c:07:
         10:26:b9:4c:41:ac:b5:25:45:ef:bd:5b:79:0f:a9:e2:38:8b:
         fe:0f:fe:98:8c:7c:4b:a6:7c:56:3c:d3:a5:0f:6e:f6:07:d5:
         1e:1e:2a:e7:ca:eb:37:4d:85:c4:a4:bb:ac:c6:96:55:c8:c8:
         ea:e8:82:19:3a:3a:8f:15:18:3a:74:2d:dd:5b:84:28:2c:cf:
         8b:f6:16:2e:dc:f4:5b:e4:4e:bb:04:f7:54:75:29:85:e8:d2:
         41:c4:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:28:28 2025 by rpki-client