Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4e3e7ebd-6870-3b18-af27-83fdbfa251fd.roa
File:                     4e3e7ebd-6870-3b18-af27-83fdbfa251fd.roa (raw, json)
Hash identifier:          YfwrdOn0nKSdW8Zzzag7QxYz+VpETLoMKphnPBgpork=
Subject key identifier:   A8:89:0E:47:15:82:13:ED:63:DA:92:DE:1C:DC:CA:AE:98:4A:03:A8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B626141CD2EF975477C364C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4e3e7ebd-6870-3b18-af27-83fdbfa251fd.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.228.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:14:1c:d2:ef:97:54:77:c3:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=e35fbe75-796f-4a00-8226-cc97a5b1a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:8a:9b:6c:89:40:3b:97:60:aa:88:eb:02:
                    12:97:2a:e9:eb:8d:47:c2:76:e9:48:45:0b:14:33:
                    4c:5b:be:63:ef:9d:20:4a:a7:6a:2d:9c:db:df:5d:
                    b3:9a:b3:4c:ef:df:b6:7f:a1:39:f1:b3:e4:a7:9a:
                    d5:91:31:ec:e9:ab:fb:a2:f8:d7:20:03:28:c6:cf:
                    6e:78:94:77:99:8b:da:22:48:2c:a3:a0:dc:b2:ea:
                    ef:65:84:cd:50:31:d3:6a:4d:12:69:a0:59:6d:f6:
                    f1:19:72:6a:39:c4:aa:8a:fd:15:be:56:56:06:80:
                    4d:22:2a:07:a0:f1:78:a7:27:ed:81:2c:d6:69:67:
                    f0:e0:0c:e7:1b:a3:2c:9d:10:1c:d0:36:29:9f:15:
                    7d:5f:1b:6d:bf:ef:36:71:43:87:03:79:bf:9d:3c:
                    bd:f6:69:cd:80:e2:f7:6e:62:cd:c8:bd:76:b5:e9:
                    d6:bc:2b:8a:ff:05:c9:dc:50:44:cf:9e:8a:e8:eb:
                    38:47:24:26:d1:d5:07:96:4a:a5:b4:45:b3:45:cd:
                    64:2e:af:ea:15:d4:e3:17:77:2d:13:c5:e1:ee:b8:
                    c3:b8:5f:e4:00:b8:07:63:e0:ba:c9:d5:07:e1:21:
                    07:1f:c3:c6:36:83:8f:f3:48:61:6f:35:25:cd:2e:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:89:0E:47:15:82:13:ED:63:DA:92:DE:1C:DC:CA:AE:98:4A:03:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4e3e7ebd-6870-3b18-af27-83fdbfa251fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ef:98:aa:77:ad:24:2d:21:72:37:92:ba:ae:8c:73:a7:5d:c0:
         83:e0:7d:80:cb:b2:ce:df:4e:ae:47:6b:82:ed:b4:f6:d4:37:
         b1:a3:40:11:a8:2d:c1:02:31:c7:31:bb:0c:7a:26:fa:e1:78:
         7d:ef:30:fd:56:dc:f9:7b:c0:dd:1f:e3:d9:fb:43:74:9a:b7:
         6e:ca:cb:b9:e8:32:48:d0:f8:cb:22:ff:27:d7:0f:ca:78:60:
         62:80:f2:40:5d:75:2a:d1:5e:df:26:5c:8b:24:42:12:bb:ca:
         53:e2:42:f1:d9:55:19:4a:06:48:50:3f:32:d6:20:42:c0:18:
         36:0a:36:a3:17:be:3b:56:c1:d4:96:0e:ab:4a:09:69:dc:cb:
         e5:f7:ce:de:0f:54:04:d9:9a:53:da:4e:ea:85:33:91:77:21:
         83:36:73:78:b7:de:8a:1e:f9:3f:c3:e2:1b:7f:e8:58:4d:fb:
         30:fa:48:16:d2:d3:d2:e2:4c:d1:80:53:81:02:04:50:55:cc:
         ab:d6:fb:5d:eb:68:c9:12:a0:b8:aa:9a:dd:57:eb:0f:3b:80:
         79:2e:26:4e:68:60:b4:d5:2f:a6:e4:c3:f4:1b:b4:ee:69:31:
         a2:40:ea:ac:ef:04:b7:a2:ac:b0:21:16:09:b1:e0:00:f3:c9:
         5f:dc:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:58 2025 by rpki-client