Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/134e3d0f-add7-3c3d-ae36-893009d0cc5a.roa
File:                     134e3d0f-add7-3c3d-ae36-893009d0cc5a.roa (raw, json)
Hash identifier:          fsWXj/T7Xa4dqGCfPvlEnJJBAYLQh9eq8QqsVn+YglQ=
Subject key identifier:   27:ED:D8:EE:CB:18:6D:44:CB:C5:0B:61:1D:59:D5:9E:AB:69:1F:B9
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848D7A645AD52380BC7D7199940
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/134e3d0f-add7-3c3d-ae36-893009d0cc5a.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        207.162.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:45:ad:52:38:0b:c7:d7:19:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=364b680b-bb98-443f-9934-7065c92ba343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:bb:11:4b:15:08:27:8f:bf:28:23:40:b2:
                    27:21:e3:7b:2d:33:21:0b:8c:40:a3:3e:49:8b:95:
                    56:02:9b:18:b2:58:ed:08:4b:79:3b:87:6d:48:50:
                    9a:3d:d0:d6:a6:67:30:30:6f:00:38:90:eb:08:89:
                    97:74:9d:ad:22:48:f2:c3:d1:7d:28:c9:51:54:78:
                    43:11:4a:f6:04:1c:87:cc:c2:ac:d6:36:19:bb:fe:
                    9b:7d:e7:e2:b6:ea:64:1f:42:2f:76:06:23:1e:41:
                    56:a4:ef:fb:f1:ce:78:d1:69:6a:4a:14:d4:ec:80:
                    ad:c0:2a:69:a5:65:dc:08:a8:bb:1c:6d:ef:80:f9:
                    42:f1:22:5d:0f:25:2a:6d:90:ea:96:99:1c:9a:d0:
                    c5:66:d2:1f:a7:da:6f:fd:23:96:90:c0:fa:8e:0b:
                    33:cc:eb:e0:d8:f1:b8:cf:64:8d:11:c3:c0:c4:05:
                    ea:64:4f:f9:eb:af:89:ea:dd:67:f7:3c:20:28:76:
                    21:77:25:c9:a9:f2:79:d5:fa:6c:e3:ba:3c:64:3a:
                    ab:aa:fb:06:1f:67:84:72:3c:c4:24:85:29:fb:63:
                    05:b2:ed:2a:3c:fc:7e:62:71:ca:d9:76:8f:3c:98:
                    d8:d2:39:8f:f6:84:6f:47:01:56:03:9a:2b:3f:81:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:ED:D8:EE:CB:18:6D:44:CB:C5:0B:61:1D:59:D5:9E:AB:69:1F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/134e3d0f-add7-3c3d-ae36-893009d0cc5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:b1:f2:df:04:3c:27:a7:95:46:0e:dd:04:64:8c:81:71:
         4b:96:a7:2d:85:dd:69:54:b9:30:9f:03:c3:d2:82:5a:fa:ad:
         f1:ee:4c:5c:5c:80:b5:e6:76:1f:d8:88:95:d9:bd:e2:93:45:
         20:1c:c1:aa:d0:d9:a4:12:d2:5e:28:f6:c5:f2:e5:07:93:a8:
         a0:96:c2:2e:c9:17:66:2b:e5:20:b5:a9:af:4f:31:53:a0:c6:
         c5:2d:e0:cf:8a:84:42:a5:59:7d:ee:73:e2:10:24:6e:a0:62:
         a6:6b:ad:1f:1f:51:1a:8e:a4:c7:8d:03:b9:42:6e:fd:57:ec:
         26:7a:50:90:bf:63:a9:ed:4d:75:67:ff:30:fc:39:ab:70:61:
         7d:82:fc:44:49:52:a9:86:be:d3:30:58:09:10:d0:37:2f:93:
         dc:28:b6:3c:65:31:92:cb:7b:be:82:3f:01:ed:b1:22:d7:5f:
         ed:34:6c:a5:8b:0e:92:22:35:a3:5d:e2:fb:6e:ce:86:a6:ee:
         83:4c:a3:64:e7:1b:29:6c:10:e2:78:69:13:48:5b:34:79:d7:
         9b:b8:5f:b3:24:d8:64:09:b9:27:49:19:fb:fa:33:a1:d1:60:
         8c:0e:72:bb:83:65:19:a9:03:87:93:2b:1c:53:b2:af:cf:cd:
         00:cb:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:44:03 2025 by rpki-client