Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/fd6bcfdd-10b5-3d10-abe2-8a320c7d3fe7.roa
File:                     fd6bcfdd-10b5-3d10-abe2-8a320c7d3fe7.roa (raw, json)
Hash identifier:          K8bz4khFiMwzU6BnaGcFAduTvPQWJmU2VYk2d6Xayec=
Subject key identifier:   C1:0B:7C:14:4F:9D:6F:7F:4F:C1:40:A1:E9:B0:B7:29:3B:DD:31:63
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584819CFE1EC21CF649BDA7FCB80
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/fd6bcfdd-10b5-3d10-abe2-8a320c7d3fe7.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     2734
IP address blocks:        208.78.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e1:ec:21:cf:64:9b:da:7f:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=6374a78e-e6c5-496e-a40c-f426b2f108a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:88:1a:84:53:7a:de:b8:47:9e:16:71:b9:
                    32:66:54:19:20:b8:a0:34:ba:54:c5:c7:5f:23:f8:
                    ec:16:2a:2d:9c:56:1d:75:33:18:ba:4a:41:24:1e:
                    76:52:77:1a:9d:3c:0a:65:df:41:4e:65:0b:a2:5f:
                    9b:86:d6:8e:bb:21:03:98:82:84:1b:c8:59:7c:6b:
                    6e:8f:e6:d9:0e:d9:77:19:c1:b2:bd:68:4d:8e:cf:
                    9e:7d:52:2e:26:d1:a2:ec:d0:4d:5a:43:58:ed:67:
                    21:a0:4e:94:43:4e:26:61:79:51:c9:56:1b:93:e8:
                    f8:66:06:4b:22:5e:c0:ac:97:e8:39:fd:c1:e9:99:
                    ed:87:b5:71:63:8f:fd:51:f5:84:8c:ff:98:fe:9c:
                    aa:2a:ea:59:1c:8a:ea:18:3c:01:16:78:36:2e:a6:
                    71:1d:db:9d:12:0a:df:fd:83:e4:88:c8:03:d7:27:
                    93:d6:0c:bc:28:d4:43:8c:e7:e2:39:62:c4:f8:72:
                    91:e6:19:db:43:7a:b5:91:fa:62:a3:51:e8:64:12:
                    9e:78:d9:25:0f:00:46:d5:78:67:c0:11:05:f9:d6:
                    ba:b5:e7:99:34:2d:83:14:3c:e5:af:60:bd:fe:01:
                    39:2c:10:58:f3:73:65:58:67:a4:24:d8:e8:00:ae:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0B:7C:14:4F:9D:6F:7F:4F:C1:40:A1:E9:B0:B7:29:3B:DD:31:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/fd6bcfdd-10b5-3d10-abe2-8a320c7d3fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:a8:15:2d:67:16:94:fa:a5:64:20:9a:31:7c:bd:31:12:
         a0:7a:b5:28:cc:5e:0e:23:8a:68:be:f0:dc:11:87:69:01:8e:
         f9:d7:d4:73:f4:ec:59:a7:93:24:e4:1a:f0:f5:ae:16:0f:2b:
         97:04:4e:96:4a:e1:7b:fb:69:e0:b1:10:7d:25:58:d0:06:c7:
         b1:11:ad:dc:5b:6d:86:2e:ee:d8:05:89:57:64:64:4d:5a:6d:
         11:b5:78:3f:ab:e1:3e:2a:b0:e6:de:78:48:f5:31:89:76:72:
         72:04:8f:f2:16:94:42:e2:44:40:80:9d:84:32:ea:77:cc:2e:
         23:c3:80:69:8c:8f:4a:83:5f:26:e7:6f:82:90:ce:9b:44:9f:
         d6:70:ff:2e:5c:2b:42:d4:47:71:85:64:ee:16:13:3f:41:b1:
         a8:cb:10:7b:52:2f:1c:96:a3:27:95:4d:fd:2d:16:b3:f1:35:
         86:69:27:2b:f1:66:75:22:0a:c8:03:f5:e5:ef:74:7c:a8:d5:
         cf:2c:89:c7:96:57:45:ce:94:05:05:cf:c8:f0:35:a9:a3:8d:
         16:45:52:d1:be:97:4a:f4:68:68:ee:86:40:d8:ea:8f:02:9e:
         c0:05:c9:b5:0b:e2:1f:ea:1e:0e:97:43:c1:28:f9:61:59:0f:
         c0:15:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:58 2025 by rpki-client