Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa
File:                     6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa (raw, json)
Hash identifier:          La93YBtTTfgJTDpvdy5XVl+KTid3P94PaBXlq37TapU=
Subject key identifier:   F6:94:EF:1C:56:78:51:37:47:36:1F:24:47:1F:D4:FA:A9:DA:0A:87
Certificate issuer:       /CN=2e78bb85-c387-4ef5-a2b3-647636da166a
Certificate serial:       010D0C9F4328584A506AF7553BC4687E34F08080
Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     36242
IP address blocks:        208.78.36.0/24 maxlen: 24
                          208.78.37.0/24 maxlen: 24
                          208.78.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f7:55:3b:c4:68:7e:34:f0:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=4bd08836-3fd8-460c-9ed9-545edf7b66d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:02:7d:0e:82:c0:9e:76:71:5c:de:ae:37:
                    af:c9:2f:ab:85:d1:29:b8:37:13:f5:33:91:b1:ad:
                    81:92:7c:73:03:d8:53:0d:cc:00:4a:66:5f:d1:af:
                    bf:80:11:47:7a:a6:b6:9d:37:3d:7e:3e:1d:fa:3d:
                    66:d0:fa:ff:b2:8d:90:f8:32:8f:e1:8b:64:9f:bf:
                    08:17:f8:8d:68:d0:a4:07:62:84:09:81:02:b9:b4:
                    9d:9b:bb:cc:3c:58:ed:05:cc:f4:05:b2:4e:1d:ea:
                    e8:60:f5:79:24:1e:87:11:d4:20:ca:fc:c1:a8:4e:
                    09:6b:c5:53:8a:b4:02:c3:b9:0a:12:a4:d4:f9:9b:
                    aa:57:b2:b4:4b:f3:7d:df:3b:35:d9:a5:da:f6:37:
                    3e:3b:a7:48:73:d4:9f:f7:bd:e9:bb:05:68:64:bd:
                    3a:c1:7a:67:61:5a:d5:35:eb:76:14:2e:fc:92:89:
                    f8:9a:75:65:eb:1e:04:98:a9:50:2f:26:5f:00:5e:
                    38:76:6f:67:02:8c:14:d3:b9:fc:0a:27:3b:a0:8a:
                    2c:b7:41:48:0f:eb:b5:4c:d5:c3:d7:32:de:9e:b5:
                    28:71:fd:53:d6:4c:69:1e:04:67:ba:3e:8f:82:a1:
                    4a:1c:35:19:dc:9b:90:b6:74:a0:a6:cb:4d:5f:95:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:EF:1C:56:78:51:37:47:36:1F:24:47:1F:D4:FA:A9:DA:0A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.36.0/23
                  208.78.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:b0:0a:c4:2c:89:e7:a1:b0:7f:f8:94:f7:a0:38:f6:3f:f3:
         04:9d:61:9c:1b:fb:97:82:ff:63:8b:24:77:1a:85:2a:c4:6e:
         b3:52:40:ef:77:15:cc:63:b7:4e:5b:40:92:f2:eb:89:8b:d6:
         38:cb:63:a5:e9:4a:77:cf:f6:ca:6d:07:d3:20:cf:40:46:ff:
         74:8b:74:d9:1d:c3:70:d4:ce:2e:5a:6c:d7:5d:fd:33:f1:cf:
         4d:66:c4:db:49:b0:f0:fc:4d:78:22:b3:57:8d:61:0d:f7:65:
         ee:98:61:0a:c1:ac:b4:20:cb:73:67:47:f5:35:23:23:ae:5c:
         8d:bf:0f:a7:ed:3e:1b:01:e6:74:bf:64:51:12:aa:51:73:c5:
         45:bf:7b:87:f3:28:f1:69:da:cf:ba:2e:cd:1d:58:e9:04:03:
         cb:7a:84:e8:47:a9:12:36:63:37:68:0b:12:f9:ae:18:aa:1d:
         35:31:3d:38:5e:e2:e6:be:ca:ec:27:c2:43:93:1c:0a:6e:d8:
         85:ba:e7:9f:d1:4b:5c:ec:a7:94:64:0a:56:81:c7:2a:c8:49:
         b2:8f:7e:ed:dc:e1:9b:41:a9:83:60:03:7e:0a:f3:c4:2e:85:
         fe:cd:f1:65:5d:e9:f1:e4:0b:59:6a:8b:c5:bc:62:3b:88:fd:
         34:79:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:22:34 2025 by rpki-client