Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2608a530-797e-382f-ba66-c036b26d37cb.roa
File:                     2608a530-797e-382f-ba66-c036b26d37cb.roa (raw, json)
Hash identifier:          GqrsDU0bcwKch1prRpPC8XFsw39j7Eg16MlAaSyJAWY=
Subject key identifier:   35:44:1A:60:4E:01:37:0A:F0:52:26:73:4F:B3:E0:91:BA:E2:91:26
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F4328584AE5C67CAECE4207585A11F700
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2608a530-797e-382f-ba66-c036b26d37cb.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     19054
IP address blocks:        208.78.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:7c:ae:ce:42:07:58:5a:11:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=48ba56b0-fe3b-44bb-adc1-c99a39210a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:8a:eb:63:83:1b:0f:73:68:30:a2:e9:af:
                    f8:55:89:98:10:95:0f:ab:da:55:99:12:e5:3f:e9:
                    f3:9c:b6:47:d4:86:f6:b5:d6:d5:1f:f6:80:14:08:
                    24:fa:68:89:06:45:31:f7:e6:9a:b0:76:e6:89:1d:
                    5b:94:fb:56:8b:42:0f:08:15:70:1b:7c:c5:53:c5:
                    09:68:95:31:f5:e4:5b:1e:6d:d8:62:c4:5f:2b:98:
                    35:04:e8:35:6f:45:d8:7f:36:6a:f2:e6:30:c1:f7:
                    f1:1d:16:d6:dc:15:f7:bb:73:de:25:25:6d:00:b2:
                    2a:d6:27:dc:4c:df:95:98:b5:f2:f2:ce:ef:7b:df:
                    9a:2e:20:e0:9d:dd:1c:1c:32:84:56:3b:29:2c:42:
                    59:ff:af:a7:f0:d5:ad:47:9d:3c:c8:23:df:3d:59:
                    73:ce:c9:cc:0a:be:c5:54:98:31:74:f4:1f:16:06:
                    2d:bb:4a:bd:52:7e:96:09:10:0d:cf:49:fa:14:e1:
                    c0:42:1a:64:08:54:89:f3:1e:5e:0c:d6:3f:a0:0b:
                    e0:62:e3:7c:c3:dc:26:6a:be:92:d7:9b:f0:1a:b1:
                    f7:c7:60:f5:97:9f:b3:56:5f:88:dc:ff:69:e3:1b:
                    ea:38:cf:5a:ac:a8:ee:17:57:46:ff:dc:5d:ce:7a:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:44:1A:60:4E:01:37:0A:F0:52:26:73:4F:B3:E0:91:BA:E2:91:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2608a530-797e-382f-ba66-c036b26d37cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:55:5a:26:79:08:e3:a2:d0:c0:67:b3:f2:1f:12:46:ac:e1:
         08:53:4e:09:b0:ef:6d:d8:33:dc:c5:88:18:2f:6c:72:ff:d8:
         ef:31:2c:6b:98:92:92:13:26:6a:b4:e5:3a:51:5a:6b:7d:83:
         bd:99:2f:8f:af:d9:8d:65:86:18:a8:ad:ee:e0:28:3b:70:ba:
         c6:0e:89:39:43:e6:55:ae:26:e4:1b:1a:d7:e8:ad:59:45:bb:
         8d:60:be:0c:8f:64:a5:d0:7c:3e:10:53:0d:8d:c7:e1:37:8f:
         34:5d:2c:2e:c7:59:3f:cd:43:a3:44:d9:5b:24:2b:37:85:5b:
         2f:0f:a3:2a:81:b4:f6:03:fb:6c:40:35:b4:4b:3f:26:8f:73:
         5d:9b:a8:75:01:9d:f4:5c:80:8e:97:56:3d:16:ef:6c:c8:07:
         02:13:f4:ff:16:fe:8d:2e:1b:2b:4f:57:6a:fc:9b:4e:ad:cc:
         ab:04:e6:41:7a:3f:fa:d7:23:bf:78:eb:87:1d:9e:4f:51:c8:
         ac:c9:35:b2:46:f6:0e:76:ee:16:c2:b4:7a:28:b7:f7:12:bd:
         ba:d0:54:57:35:e8:b9:52:c5:37:75:2a:a2:6b:37:07:d0:b8:
         11:8e:81:ef:fd:f3:91:6a:b1:60:f5:2f:43:1d:6e:12:52:d0:
         25:9f:2b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:55 2025 by rpki-client