Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2608a530-797e-382f-ba66-c036b26d37cb.roa
File:                     2608a530-797e-382f-ba66-c036b26d37cb.roa (raw, json)
Hash identifier:          sRxE1aacHb0BQqIshLrvYexuaUXEMneVM7wJ8CAYNik=
Subject key identifier:   7E:E7:91:0D:71:FB:1C:85:C8:7D:15:BF:E4:DD:01:9A:61:45:B5:B3
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F4328584925B3A59A6CD9DE71B86BE700
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2608a530-797e-382f-ba66-c036b26d37cb.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     19054
IP address blocks:        208.78.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:a5:9a:6c:d9:de:71:b8:6b:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=6aa17558-f408-4b2b-bf87-a3cb26ac82d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:4f:9f:35:42:3e:12:13:36:0f:8a:77:bd:
                    d4:ec:97:4f:f0:93:7b:eb:42:45:f4:38:e1:d9:33:
                    2b:d8:ed:88:16:9b:b6:21:28:9f:44:74:44:4f:54:
                    e9:00:47:40:48:c1:fb:0f:65:4c:b7:38:75:41:93:
                    cd:01:a1:00:a8:e3:ea:e5:3c:20:bd:3e:3e:03:4e:
                    40:29:a9:07:b3:28:35:74:38:a9:c8:33:de:59:53:
                    a2:c4:91:55:42:ca:c8:2a:2d:85:4a:a0:31:07:ca:
                    59:b1:78:58:ea:70:c9:f9:45:10:db:7c:75:f3:20:
                    11:22:07:c2:bd:de:b0:04:45:9a:24:d7:f6:7a:2c:
                    b5:6a:b2:53:d1:d9:5c:b1:a5:47:b8:d3:b5:df:1b:
                    9e:e2:c9:49:68:b9:bd:2f:c2:13:ae:ba:e1:43:3b:
                    ba:bb:4e:ac:f6:15:74:da:6b:e4:91:e9:bf:fc:3f:
                    2c:2e:82:93:c9:1f:43:f7:d8:c4:a3:92:96:04:b6:
                    56:a3:fc:9d:d5:92:96:27:e6:38:a3:20:8b:ef:1c:
                    8f:cf:13:f7:c1:3c:f4:f7:a8:4b:6e:7e:1a:de:21:
                    3d:31:7a:e6:3e:fd:39:30:24:1b:49:5c:29:fb:d7:
                    f0:d4:30:7d:ad:79:0b:07:4e:47:10:b9:ab:14:e0:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E7:91:0D:71:FB:1C:85:C8:7D:15:BF:E4:DD:01:9A:61:45:B5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2608a530-797e-382f-ba66-c036b26d37cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:e1:e4:00:17:aa:a1:50:1a:92:60:47:b6:a4:b6:6d:49:
         1d:ad:32:0c:ea:f3:f1:46:f3:fd:05:33:f1:b2:fc:1b:67:37:
         8d:f7:c3:11:2a:a5:82:1e:e9:06:54:bc:c6:38:95:1b:fa:d6:
         a2:58:00:bd:4e:ef:9e:1e:dd:d2:c0:00:b1:89:0e:7e:c7:6a:
         39:32:89:0a:54:b0:a9:ac:3d:81:9e:c8:7f:cb:91:5f:b7:7f:
         a3:c5:ca:b2:7e:86:a4:c6:73:5f:2a:fb:e6:4d:89:70:cd:32:
         b2:db:e6:cd:80:53:0b:a7:fa:fa:a3:25:9f:80:a3:af:2c:2a:
         61:30:4d:57:86:45:9a:86:93:8b:f7:9c:f4:cb:0d:0b:bc:5e:
         5f:02:6b:c9:b2:66:6c:e2:4b:92:37:46:76:36:a3:27:76:03:
         94:fc:ce:e1:88:29:d6:a8:2e:1c:d0:cb:87:c1:4c:2a:2a:45:
         e1:6b:94:07:27:9c:7a:7f:e8:8f:02:1a:d3:32:d7:72:56:f6:
         16:d4:98:09:b1:7b:b8:b3:ec:1c:40:1d:16:b2:79:43:a1:e5:
         2f:ff:25:33:ce:a2:41:70:e8:74:b0:a9:17:1e:ef:29:25:0f:
         02:20:de:d5:ec:38:ad:22:db:3b:e0:d9:b5:14:ac:7b:b1:fe:
         27:a8:f8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:38:25 2025 by rpki-client