Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
File:                     4387142e-4988-3933-b813-eafd0736b9a3.roa (raw, json)
Hash identifier:          HlXO6SV8FLAs6cXdKRVQsVxCoUQT23cHDc96rcE8UFE=
Subject key identifier:   CF:12:69:04:70:E9:FC:21:DF:CF:6F:67:0A:54:12:A0:09:3F:67:4C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B1D9C266950C43DF64B17C040
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        104.156.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:26:69:50:c4:3d:f6:4b:17:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a83e7907-a2fb-4e35-9244-dcafa85c1bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:b3:4a:41:c4:b3:e0:35:37:13:2e:ad:13:
                    f5:3d:ff:b0:c4:ff:b2:ce:0a:ff:fa:01:f8:d1:42:
                    69:bc:ff:05:9e:97:d5:64:8b:a1:a6:14:10:94:6e:
                    14:94:1a:77:8c:a4:d6:60:9e:eb:04:f9:8f:9c:97:
                    f2:18:1f:bd:0b:06:dd:bf:86:dd:18:1a:e9:4f:46:
                    20:f1:e2:5d:6d:9e:0b:fd:b4:10:d0:47:8f:0a:09:
                    e0:7a:4c:32:15:ba:a3:d3:93:a6:8c:4c:bf:f0:23:
                    2f:67:4c:b7:fd:1c:ee:a0:84:04:06:2b:35:f3:d3:
                    3c:c7:bd:1c:3d:2e:ba:c5:0d:70:a5:fe:42:ee:66:
                    6e:ba:22:8c:93:3a:55:a3:86:79:94:fe:8e:f9:e6:
                    91:f1:04:18:12:85:82:36:7d:19:3f:4d:cf:f1:25:
                    35:c0:ac:70:4d:b2:71:be:d6:b5:fb:69:f3:52:d8:
                    06:b5:f1:aa:09:ef:d4:11:31:36:d5:87:21:45:ac:
                    09:ae:27:38:88:8d:b7:37:b6:8d:91:48:41:be:a2:
                    72:92:e5:31:f2:b8:c7:ae:ba:db:8f:86:59:fa:4f:
                    71:95:ba:b5:52:38:7a:ae:b0:6c:46:64:b0:bc:95:
                    5f:a6:b8:16:23:6d:a2:46:7b:ba:ed:58:d7:38:92:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:69:04:70:E9:FC:21:DF:CF:6F:67:0A:54:12:A0:09:3F:67:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:13:6e:d5:fd:28:7d:bc:50:39:9b:2b:96:95:a3:8c:aa:97:
         f0:88:5a:f2:c8:14:39:44:33:e2:f8:fd:11:18:ed:6a:81:71:
         a5:12:3f:1e:90:09:58:fa:b5:ef:2a:18:27:fa:f7:7e:14:38:
         73:af:1c:69:0b:88:c2:8e:9d:fe:1b:4c:aa:9b:7f:19:ef:5a:
         c9:52:3a:16:51:82:f6:2f:64:75:cf:f7:6d:3f:38:44:66:0c:
         b0:00:d7:63:90:4d:79:30:59:99:3a:ba:95:9f:ea:be:5c:c1:
         c1:55:d8:03:75:cc:02:3b:30:f1:bc:d6:51:25:50:2b:2b:3c:
         ee:e6:7f:cf:98:06:4f:3b:55:fc:f8:e3:bc:85:cb:be:44:12:
         d3:02:38:95:96:11:35:9c:74:2e:dd:a5:14:b7:b9:1e:b7:54:
         96:3d:a3:fc:eb:56:93:ac:d1:40:e7:1f:68:e7:a9:df:28:3c:
         f2:83:47:d9:43:0a:ee:a6:25:30:91:a2:11:97:d3:4d:94:2a:
         e5:97:1e:e3:47:f7:70:60:e9:21:46:7e:41:c3:05:17:a1:f1:
         7e:52:a8:79:d8:46:bf:66:55:be:c7:9b:5a:c3:c3:4c:d4:25:
         ba:93:a2:1b:06:db:83:39:ae:cc:6a:59:c2:80:6c:29:12:c5:
         ac:56:82:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:26:08 2025 by rpki-client