Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/99cec357-039a-36f1-af2e-10ab3a50ae9a.roa
File:                     99cec357-039a-36f1-af2e-10ab3a50ae9a.roa (raw, json)
Hash identifier:          EDwdlzjJ5C/FvIi7fBAhX8Lqk02yWPzMfGoqSXht/7I=
Subject key identifier:   AC:B8:E5:1E:4A:57:56:37:42:9A:5F:B1:52:68:E9:A8:B9:54:E8:B7
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584A2E2CD02931DC142D9145C200
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/99cec357-039a-36f1-af2e-10ab3a50ae9a.roa
Signing time:             Fri 13 Jun 2025 18:38:14 +0000
ROA not before:           Fri 13 Jun 2025 18:38:14 +0000
ROA not after:            Thu 11 Sep 2025 18:38:14 +0000
asID:                     4911
IP address blocks:        159.78.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:2c:d0:29:31:dc:14:2d:91:45:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jun 13 18:38:14 2025 GMT
            Not After : Sep 11 18:38:14 2025 GMT
        Subject: CN=cf4079e6-2cf8-4bdf-ae47-b51592529d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:34:ba:91:03:68:77:0e:c7:6b:f6:b0:37:
                    57:73:bc:6f:bb:55:be:b3:b5:d2:21:b5:8c:5a:f3:
                    3c:cb:bf:e2:59:c5:2f:85:f3:a4:45:69:8a:71:65:
                    18:6e:8a:ee:cc:ba:5d:16:00:08:cb:35:20:18:4e:
                    c8:7b:00:53:f5:f2:c7:64:b7:72:ba:53:05:d2:26:
                    38:a9:a9:8d:d9:9f:2b:85:8f:c1:3d:f8:c2:ba:6d:
                    0c:13:6a:74:03:d3:60:b9:f7:1e:45:3a:19:60:a9:
                    b0:f4:c8:38:2e:2f:88:42:d9:ac:56:17:eb:7e:cb:
                    d9:de:ec:b1:7a:94:1e:c9:ad:4b:ec:72:7e:57:a3:
                    ea:2d:9f:6b:96:02:31:40:6a:e6:f5:cc:75:87:9b:
                    ab:0e:3f:0c:9e:90:8c:a5:ca:30:8b:11:b5:15:f7:
                    b0:5d:d7:11:cf:e8:af:53:bb:a2:7a:c5:86:87:d5:
                    ff:33:b1:61:c9:d7:1f:10:d2:42:9e:64:84:6f:8d:
                    31:84:12:35:64:50:ee:35:f8:8f:f2:e2:ff:38:06:
                    2f:38:d3:38:f6:18:ef:ed:af:e4:c3:5b:26:b9:ae:
                    f3:c3:ca:b5:9f:fd:42:dc:e3:56:c8:16:92:b0:cb:
                    a3:13:17:92:2f:43:94:3d:2a:ea:5f:de:e0:3c:46:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B8:E5:1E:4A:57:56:37:42:9A:5F:B1:52:68:E9:A8:B9:54:E8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/99cec357-039a-36f1-af2e-10ab3a50ae9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f8:d2:ba:13:a3:4c:2b:36:eb:7f:64:f6:9b:c7:b9:c2:cc:
         df:09:33:a5:de:77:63:a7:73:ac:04:2c:36:b1:7f:6e:6d:33:
         69:59:9f:40:37:5d:b9:58:7c:76:49:ad:e2:6a:d2:a7:b7:b2:
         23:7c:08:85:27:1a:ff:b9:1a:a8:18:4b:ea:96:af:de:89:0b:
         ee:3f:4c:82:28:d5:a7:f1:58:40:30:c8:5c:71:d3:34:ae:52:
         c3:3b:f2:51:68:0c:80:91:19:77:7c:60:18:6b:ba:db:97:88:
         e4:9a:c5:2b:64:be:60:b1:40:06:84:3e:53:79:ba:8b:47:70:
         4e:6c:54:d4:01:12:1f:60:0f:7f:f1:89:61:15:c4:1f:f0:4a:
         4d:3c:12:eb:cf:40:b7:30:08:84:48:99:53:a2:09:c3:1c:2b:
         3c:a8:53:54:79:20:66:41:4e:29:e0:70:e0:81:32:88:26:78:
         00:42:e5:c1:03:f2:eb:72:2f:31:b7:e9:16:87:72:89:dd:a4:
         d1:b9:dc:7d:f5:d9:0b:85:76:ca:20:4d:13:af:8b:51:f2:8b:
         9f:b9:a9:b5:3d:ec:36:d3:21:7a:24:ce:de:d7:4b:5b:20:e5:
         4e:28:64:0d:8a:cc:80:3e:5b:6d:15:9f:46:8e:73:01:b5:5f:
         19:97:a4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:10:29 2025 by rpki-client