Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/c3c3b79f-efc3-3d74-8dd9-4c6d8426ab8d.roa
File:                     c3c3b79f-efc3-3d74-8dd9-4c6d8426ab8d.roa (raw, json)
Hash identifier:          zzZ3rs3Y1HUJ9RP4IrYg9exOZGjy01rYNVbDnNkPsy8=
Subject key identifier:   47:04:D5:A5:AC:40:ED:45:B6:08:40:B5:32:B2:FA:E9:04:6D:DB:FD
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F43285849287E68CAD7E105DE4DC23880
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/c3c3b79f-efc3-3d74-8dd9-4c6d8426ab8d.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     46353
IP address blocks:        205.173.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:68:ca:d7:e1:05:de:4d:c2:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=ce5ed70d-450d-4775-968d-2d089f6ad524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:de:99:8c:1a:e0:4d:41:6b:98:72:47:81:
                    d4:49:0b:af:9b:01:9e:97:26:b4:61:bb:51:da:35:
                    3e:38:a5:e9:9f:22:af:f0:d8:f6:82:ef:7c:17:89:
                    31:96:a8:31:45:d8:4f:74:6a:66:e2:c0:16:54:3c:
                    c4:c9:69:00:9b:3e:df:e8:99:93:4c:eb:1f:92:64:
                    c5:93:1d:b6:34:a8:97:0d:67:fa:e4:2b:57:8e:6c:
                    c6:25:4e:7b:67:74:a6:cf:74:9f:28:a5:55:88:dc:
                    81:1a:10:f5:34:0e:5f:23:c8:84:ed:13:71:da:9d:
                    61:1e:3b:4a:f2:83:75:4d:48:be:0a:4d:6f:3c:8b:
                    eb:96:13:e7:fc:b5:b1:a2:c6:7c:18:b6:bc:6c:46:
                    66:8c:d8:c3:42:03:22:5c:08:16:78:0a:ac:08:ee:
                    2e:9d:7e:a7:86:6a:2c:5f:79:28:d7:aa:bd:ab:97:
                    9c:83:be:bf:67:22:22:65:e6:d2:fa:0a:72:b2:4f:
                    48:c8:1e:65:2e:20:2c:09:85:ce:b5:8c:70:25:6e:
                    c4:89:f2:eb:99:e6:01:7e:23:4a:be:f6:d1:13:26:
                    41:d2:ad:87:fb:4f:b2:f2:a8:60:b8:97:b7:9a:a6:
                    ab:78:13:f2:57:52:21:e2:af:96:a0:c6:71:0d:5c:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:D5:A5:AC:40:ED:45:B6:08:40:B5:32:B2:FA:E9:04:6D:DB:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/c3c3b79f-efc3-3d74-8dd9-4c6d8426ab8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.173.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:1c:92:78:11:48:b8:b3:e9:f2:d6:e8:11:d8:3b:b6:bd:fd:
         87:70:c8:f2:33:3b:c2:18:19:10:df:a9:c3:d5:17:76:b9:a7:
         0b:83:da:ac:c7:9a:85:81:6f:86:67:1c:64:94:24:94:1e:3c:
         ff:97:25:00:f5:9f:89:da:3d:59:8d:55:c3:94:31:43:ca:d2:
         6f:77:33:cf:d6:24:84:db:15:ce:d5:fd:74:0a:6a:aa:f6:8e:
         a2:d5:a4:5e:9f:37:10:ce:f7:03:7a:c2:b5:bd:d0:58:86:73:
         ea:81:58:99:81:21:11:d5:62:fe:77:73:c2:d2:39:07:e0:85:
         e6:33:d5:5d:f5:5c:ad:fc:ad:f1:0d:ab:8b:ec:55:ac:7c:45:
         82:18:57:8f:5a:c7:e8:b1:4f:52:5a:6e:ad:10:36:d8:c3:55:
         a4:24:3a:ff:dd:3c:7a:4c:2e:68:dc:aa:a8:7b:3f:46:f3:c9:
         ea:49:a5:ad:43:f6:37:ff:ac:a3:84:e2:1c:4a:73:5f:fb:f0:
         cf:f7:d9:38:4f:d0:51:27:68:fa:60:7e:5f:62:72:e2:91:e9:
         f8:7d:e9:a1:35:35:f3:a0:86:b2:21:0e:30:8d:e6:49:68:2c:
         5f:b4:78:d1:f1:ca:b0:4d:f7:7e:89:fd:27:3e:ac:6c:76:ac:
         c0:37:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:08 2025 by rpki-client