Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/07507025-7cab-3262-9684-ebf12b33ea5a.roa
File:                     07507025-7cab-3262-9684-ebf12b33ea5a.roa (raw, json)
Hash identifier:          hX5HvHojGTVFs7+75s24oPmZxAOabNtTQ5mRh3R9+jg=
Subject key identifier:   2F:CA:F2:D9:5E:EB:E6:A3:30:8C:B6:51:FC:62:84:AC:C7:FB:B9:59
Certificate issuer:       /CN=2e78bb85-c387-4ef5-a2b3-647636da166a
Certificate serial:       010D0C9F4328584A506AEA90E6D47806DC5AA280
Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/07507025-7cab-3262-9684-ebf12b33ea5a.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     57624
IP address blocks:        208.78.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:ea:90:e6:d4:78:06:dc:5a:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=7649c83f-f8ae-4a46-8fcd-408d51d89468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:bc:3b:94:50:89:e9:1f:fd:6f:a4:a0:81:
                    da:4b:99:c9:e5:08:75:45:4c:6f:c5:23:79:91:59:
                    18:87:48:b9:07:f7:25:4f:fb:28:5f:98:e6:fe:0e:
                    f4:a8:bd:48:4e:00:f8:19:46:45:d3:25:17:e8:0a:
                    f6:88:86:1a:98:94:fd:50:2f:73:6d:25:42:03:a0:
                    98:cb:83:fc:e9:18:ad:c9:14:e5:35:71:6e:f6:71:
                    d3:35:20:20:93:72:65:87:19:da:52:d6:d2:07:07:
                    0d:1d:64:3d:e1:0b:b0:b3:97:40:3e:58:da:e3:db:
                    75:50:4a:22:91:58:ea:2d:7a:3c:65:82:22:a8:56:
                    a0:7b:33:5c:fd:77:c9:52:4d:28:f4:79:87:a5:77:
                    70:11:4c:0d:7e:8d:16:01:f9:2a:a0:f0:af:ac:92:
                    67:47:f5:22:dd:e4:e0:c5:4c:d5:36:6a:f2:fc:3a:
                    8c:43:23:3a:c6:78:85:c6:ad:cf:47:19:fb:58:4b:
                    62:59:f7:29:e7:d2:00:0e:45:b1:78:33:a1:ef:f7:
                    89:71:9e:02:99:ff:59:72:48:8b:e9:bd:a7:e0:b6:
                    31:8c:37:4f:7f:d5:83:0e:f9:72:76:f0:9f:0d:cd:
                    86:a6:12:9a:e6:12:86:11:e1:fc:b6:89:77:16:64:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:F2:D9:5E:EB:E6:A3:30:8C:B6:51:FC:62:84:AC:C7:FB:B9:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/07507025-7cab-3262-9684-ebf12b33ea5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f7:62:11:bd:e4:33:c1:ae:70:49:ea:e1:8e:69:e1:a4:49:
         96:8c:0c:95:3b:40:a1:09:29:e3:73:4a:14:a9:fb:bd:5a:d0:
         a8:4d:06:73:40:4e:65:0d:20:28:23:99:19:ba:2c:89:39:87:
         c7:02:bf:2e:b9:ff:36:c5:c1:cc:b8:6f:56:0e:23:32:6c:cf:
         68:72:7f:e9:39:8f:42:df:fe:b9:1a:37:41:83:ca:09:4b:d4:
         cc:59:a5:ec:5b:47:e4:87:ad:94:1a:fb:84:3e:4e:88:5c:cf:
         b8:f6:a5:7f:c9:b1:24:f0:ca:7d:2c:5f:3d:ac:47:39:3a:b3:
         cf:35:25:da:45:fa:36:0a:9b:34:25:be:85:fb:15:d2:17:c2:
         f3:26:32:22:c8:87:34:80:9a:b8:c7:58:04:55:e1:34:32:2c:
         08:68:1d:0d:6b:8c:db:52:7b:9a:a9:0b:17:0b:e8:96:47:18:
         cf:4b:d2:c7:57:36:fc:76:b8:b0:61:54:32:ed:b4:a9:99:f5:
         ec:2e:0f:eb:aa:ae:f4:52:b1:ae:ef:c6:a2:af:d2:c2:3c:26:
         0d:22:f2:1f:0d:77:c7:d3:02:8a:ea:d9:e1:28:36:4e:3d:27:
         da:75:e8:99:98:76:9b:4f:85:45:f1:06:00:4a:e4:78:52:15:
         63:b7:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:15:53 2025 by rpki-client