Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/77a2f9a1-3fd3-3399-a377-b0436d2fde42.roa
File:                     77a2f9a1-3fd3-3399-a377-b0436d2fde42.roa (raw, json)
Hash identifier:          Jn6tTZrg2hBkGvovpR0dn0qVjf3uWClsSRX4hzvkQ/U=
Subject key identifier:   64:E1:5F:8A:1C:27:B0:E6:0A:A0:61:20:31:FC:F1:7F:11:94:6B:D6
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F432858492E13BAD51A59F5220A01E720
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/77a2f9a1-3fd3-3399-a377-b0436d2fde42.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     25804
IP address blocks:        208.111.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:ba:d5:1a:59:f5:22:0a:01:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=ef66b435-98f8-415b-a8ff-965d8fa66e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:fe:ac:5d:c7:5b:f6:8d:d0:39:d7:f6:a9:
                    01:5a:1b:09:29:b3:15:d5:5f:fe:4c:a2:1a:bc:21:
                    91:fa:90:17:c7:57:71:66:09:7a:4f:ef:08:b1:a2:
                    97:20:04:6c:15:fe:fe:95:da:d0:39:d5:99:6d:92:
                    9a:4d:c3:8e:d3:4c:3b:5f:4d:54:77:f7:9b:33:b6:
                    87:91:b1:bb:67:5e:65:6f:16:7e:b0:52:72:39:f3:
                    db:c6:b4:45:31:ab:9a:7e:59:a3:b5:ca:5a:ba:2e:
                    52:5d:6b:c7:5a:f7:70:de:98:2e:d7:1b:06:b5:ef:
                    9e:41:db:78:fd:6c:71:6e:9c:ba:f1:af:94:d8:6c:
                    e9:12:49:7c:8e:18:4f:7c:71:27:30:b8:3d:27:34:
                    d5:36:f7:46:73:c8:d5:be:6e:58:26:2d:ae:72:5d:
                    24:f9:79:58:89:d5:77:36:95:bb:28:82:ed:3d:99:
                    fd:06:fa:7c:92:5e:de:7b:22:f3:ec:23:29:29:a2:
                    57:20:1d:17:f2:1a:1d:bd:6d:8a:3e:db:2c:82:03:
                    8b:cb:7d:01:ae:e5:03:2f:0a:9d:21:e4:74:e0:db:
                    4c:67:f5:55:40:37:a6:26:44:38:d5:a6:63:3a:23:
                    b7:37:c4:f1:11:5e:51:9a:9e:ee:af:eb:92:cf:be:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:5F:8A:1C:27:B0:E6:0A:A0:61:20:31:FC:F1:7F:11:94:6B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/77a2f9a1-3fd3-3399-a377-b0436d2fde42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:be:ed:20:9d:ac:49:96:50:c5:d2:95:25:45:3f:69:c2:
         92:ba:3b:57:16:84:52:a4:b4:28:33:a7:a2:46:76:54:fa:72:
         bd:42:25:1a:f6:1c:d2:12:b6:e7:06:2c:9e:97:6d:13:e1:53:
         ef:de:7a:1d:ac:fd:39:b3:31:68:5c:30:96:c0:64:dc:d4:cd:
         ab:02:db:3d:3c:9c:2a:4d:a0:93:58:30:3d:4d:80:e1:f5:79:
         84:40:0d:38:15:5b:53:0c:93:4b:92:66:5a:a3:40:11:33:61:
         c5:2b:f2:8d:6d:59:d2:1c:ae:37:e4:69:93:22:17:0d:d8:b7:
         d1:95:49:1e:01:91:ff:21:23:8d:1f:4f:81:da:cd:8c:8e:d8:
         8e:39:a8:9a:5a:c2:73:1c:33:48:f4:03:ab:40:b1:3f:f4:3c:
         b1:87:cd:f2:68:e9:b8:ce:90:f3:d1:76:48:18:50:41:ec:a1:
         8d:14:58:88:6d:67:b9:47:d0:dd:00:07:23:12:3b:54:e6:ce:
         c6:06:92:b0:e1:f4:7d:9c:6c:57:65:e1:30:ac:90:9d:97:e9:
         aa:df:c9:88:44:90:c9:db:5a:bf:e0:c2:a2:28:dd:65:32:5f:
         a5:b4:35:e0:38:ce:2f:4f:1b:3f:29:04:3e:f5:66:d0:b4:ae:
         6f:9d:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:31 2025 by rpki-client