Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/7df64809-c22d-34e8-bafa-ded08fc32729.roa
File:                     7df64809-c22d-34e8-bafa-ded08fc32729.roa (raw, json)
Hash identifier:          tvLBRr4KnDtzRJIZdMLr2mxtuEUhkcLpFLfjz4cki38=
Subject key identifier:   63:CC:95:9D:ED:35:45:FF:D9:34:53:95:04:43:C5:56:97:03:1A:D7
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584A4AD58D56BABBD4A421E9E480
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/7df64809-c22d-34e8-bafa-ded08fc32729.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     36236
IP address blocks:        134.195.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8d:56:ba:bb:d4:a4:21:e9:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=c9dba4b8-d2db-4eac-b0fd-35be914ad336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:ba:76:5d:6e:75:e6:ae:81:f5:fb:84:95:
                    a1:f6:9e:aa:c3:2f:df:12:a3:55:e2:8a:94:1d:cf:
                    b2:16:75:dc:c1:be:4d:c0:ec:eb:83:c9:f8:ed:80:
                    e5:93:04:32:76:e1:7c:0f:42:37:05:46:94:ca:57:
                    78:e3:1e:0b:be:bc:f6:b4:5b:64:84:33:da:61:14:
                    f7:e4:5e:68:e7:58:6d:4a:ea:56:6b:a3:f4:00:c0:
                    d0:d5:90:bc:f5:27:43:23:65:cc:3e:16:ad:e4:b5:
                    36:61:39:29:b0:f8:6a:c6:2d:3b:6b:ea:57:d4:ee:
                    5a:69:86:f1:4d:ff:51:fa:f7:75:65:3f:50:7a:ff:
                    e5:19:c7:af:c1:8d:1d:c3:10:a3:28:d2:73:8d:63:
                    04:d6:4d:53:04:0a:fa:71:2b:5e:25:7f:c1:d6:d7:
                    aa:f7:ad:b6:68:3a:9a:4b:c7:7d:1f:67:bb:85:8c:
                    a1:9a:3f:c7:e6:ec:87:bc:de:e3:48:b3:29:e9:c9:
                    92:04:f4:53:0c:fd:18:0b:c9:47:f2:fd:a4:52:7f:
                    1f:a1:e6:8a:57:e8:35:59:5b:f0:89:ec:7b:af:18:
                    f8:ed:50:a7:ec:f8:d7:3e:13:4d:7a:bb:ce:fa:d9:
                    91:11:5f:06:27:ce:06:a0:40:32:6b:16:06:30:3a:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:95:9D:ED:35:45:FF:D9:34:53:95:04:43:C5:56:97:03:1A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/7df64809-c22d-34e8-bafa-ded08fc32729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:65:e4:cc:de:a9:69:6f:66:e1:01:69:c8:b2:34:08:fa:
         82:92:cb:14:1e:a2:50:17:1a:0b:0a:00:b4:c8:f1:8f:e1:3e:
         6f:22:17:00:33:3c:f6:04:91:c2:c8:78:94:f7:23:1b:85:66:
         e8:81:1e:47:4e:8f:f4:87:17:fb:66:7c:93:68:07:0b:7a:c6:
         36:93:07:63:46:49:ca:8b:9a:1e:17:a2:2b:3a:01:7c:b6:ad:
         09:62:68:30:2a:69:a3:13:c7:84:ab:9e:5c:9d:8b:fb:b0:fa:
         08:70:37:56:71:d0:a4:6b:49:6a:53:e4:f9:ac:6c:88:8c:74:
         1f:c9:1e:7f:bb:78:db:24:ad:7c:e4:78:e5:bc:a1:5e:36:ba:
         0a:20:19:86:cb:5f:e9:e6:e6:38:17:b0:36:31:83:97:97:5b:
         71:0d:72:2c:04:44:50:dd:a2:25:38:94:36:4f:53:a8:42:6b:
         56:6c:57:6f:2d:89:a0:4b:b1:3b:97:45:ce:38:75:7c:37:8a:
         f6:63:86:93:ca:12:8e:2c:3f:c0:b4:b7:9c:be:5c:01:38:03:
         55:48:fc:6b:21:ab:51:ad:b1:cb:c3:46:05:83:bd:f3:9c:92:
         c9:05:b9:b8:6d:d9:25:59:51:9d:ae:63:bc:cb:68:f0:c1:d8:
         d5:35:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:35:09 2025 by rpki-client