Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa
File:                     6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa (raw, json)
Hash identifier:          pznionZ2dbFz6hLqWfU/sKj1ZIXDIwT44ud/lPSxfWQ=
Subject key identifier:   42:E1:26:2B:EE:63:5D:A4:13:B9:7A:7A:FE:A6:96:8E:C7:B8:A9:A4
Certificate issuer:       /CN=2e78bb85-c387-4ef5-a2b3-647636da166a
Certificate serial:       010D0C9F4328584B3126F9425446EF0F1BA2D900
Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     36242
IP address blocks:        208.78.36.0/24 maxlen: 24
                          208.78.37.0/24 maxlen: 24
                          208.78.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f9:42:54:46:ef:0f:1b:a2:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=e16c68c3-a051-4b5a-ade5-8880acbe1720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:42:d1:0e:ea:ee:3d:e5:25:62:a0:98:d6:
                    b1:87:df:a6:6e:d7:e4:34:e4:a9:db:0e:a1:83:83:
                    45:35:0a:e0:6e:32:e7:05:3c:5e:db:a7:fa:8f:ff:
                    3d:72:1d:ec:b2:d8:b6:a9:82:e2:47:08:59:8a:05:
                    05:c3:1b:8a:89:e3:40:7a:46:82:db:c0:ad:d4:7f:
                    b1:cd:14:4d:e7:97:e6:03:2f:51:09:cf:f8:37:e5:
                    14:a0:f5:49:f4:75:45:82:3d:77:10:fe:29:c5:f2:
                    8f:b3:e2:2b:84:9c:ec:31:93:38:bd:6e:a0:92:01:
                    5d:96:a9:f2:7f:88:a1:e9:43:75:c6:9d:88:dd:37:
                    78:a9:32:bb:b5:6c:11:dc:87:37:15:7f:7a:cc:08:
                    f6:33:32:e3:57:82:23:bf:ff:f5:f8:10:82:0e:d6:
                    32:c5:78:4a:2b:bd:39:93:da:5b:3d:7c:11:80:90:
                    ae:6a:10:79:b3:27:4a:c7:d1:32:13:7c:7a:af:c8:
                    e6:7d:f9:3f:2d:58:56:01:db:61:7e:cc:a9:a7:bb:
                    e3:a2:7d:12:c5:95:47:dc:4a:c1:11:b8:ae:8a:36:
                    22:64:b6:4d:b4:80:c1:80:b7:4b:3a:91:ee:bd:ad:
                    e2:4d:19:6b:d7:0c:fe:90:41:77:9f:ad:8b:33:01:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E1:26:2B:EE:63:5D:A4:13:B9:7A:7A:FE:A6:96:8E:C7:B8:A9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.36.0/23
                  208.78.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:32:92:91:0c:d1:fe:47:1b:81:f8:21:aa:78:16:94:a5:95:
         0f:a0:07:52:12:2b:46:c5:36:d0:e9:0a:39:95:b1:eb:56:81:
         cf:48:6c:5a:70:0c:f7:0f:a6:04:9b:9b:8b:ac:21:e3:14:7a:
         2e:e4:0d:e9:79:ca:e3:bd:7e:30:90:06:47:3a:da:be:9e:08:
         a0:47:77:30:74:52:f9:a2:56:fe:8c:93:7a:86:0c:13:79:60:
         a2:22:df:59:62:74:85:80:1f:a8:58:cd:83:8b:53:53:56:73:
         79:ed:8c:97:4a:25:a7:ef:7b:3e:d6:41:3b:54:3a:2d:8d:81:
         6d:48:37:f0:63:a1:0e:64:04:48:7d:99:0b:2d:34:fc:8d:80:
         0a:52:25:d6:80:a8:a8:9d:7f:b2:fc:66:68:99:0e:40:32:36:
         e0:65:4d:b2:ec:a9:c3:56:ea:bc:25:5b:03:72:3b:9d:31:23:
         8e:e1:97:4c:cd:db:0d:23:6e:eb:e9:5a:8f:3e:00:b9:d6:ec:
         17:c3:a3:8c:9d:f0:82:94:3e:17:b7:85:17:4c:e6:97:1f:d0:
         29:54:82:39:e4:0f:ca:17:df:75:2e:6b:74:e8:5d:ed:b4:30:
         15:c8:42:a9:ed:d1:04:77:54:f9:fd:67:38:b4:d9:ae:ee:3a:
         41:1d:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:11:32 2025 by rpki-client